Logo

Create Custom Views in Event Viewer

The Event Viewer in the Windows operating system is used to troubleshoot any computer issues. It is one of the most useful tools that keep logs of both security and system events. It also monitors for both software and hardware problems in the computer. This tool is the only one with amazing features that maintain logs about everything that’s going on in the computer system. It keeps track of all the information to the point where going over them will take a lot of time.

Luckily, the Event Viewer tool now allows users to create custom views where you can set the filters and sort the data recorded to limit the information details to only what you’re interested in seeing. For instance, if you want to troubleshoot with one hard drive, you can just create a special custom view to display only the hard drive warnings in the security logs. This will save you hassle and time.

Take note that the logs in the Event Viewer are divided into two main categories namely the Window logs and the Application and Services logs. You can just set the filter to the logs by their event id, specific date, and many other events when you have to troubleshoot some problem in your computer. So if you are trying to troubleshoot a problem in your Windows 10 computer and you’re checking the Event Viewer, read on as this post will guide you in creating custom event views in the Event Viewer. To get started, refer to the instructions given below.

Step 1: Go to the Start menu and in the search box, type “event viewer” and then click on Event Viewer from the search results to open it.

Step 2: After opening Event Viewer, click on Custom Views located in the left pane of the window.

Step 3: Next, click on the Administrative events under the Custom View to create special log views.

Step 4: Then on the right side of the window, click on Create Custom View to open the Create Custom View window.

Step 5: There is a logged drop-down list under Filter. From there, you have the option to choose an appropriate predefined time or use a custom time range for your Custom log views.

Step 6: After that, select an appropriate event level for your custom view. You have fine entry-level options to choose from such as critical event level, error, warning, information and verbose.

  • Critical – select this if you want to see the events that require your immediate attention in the custom view.
  • Error – select this if you want your Event Viewer to display the events that are less critical but hints at the problems.
  • Warning – select this event-level if you want to see the event with the potential problem but may not bound to happen.
  • Verbose – select this if you want to see detailed information about all the events.

Step 7: After you’ve selected the event level, you now have to select how you want the events to be filtered. They can either be filtered By the log or By the source.

  • By the log – you can select two options called Windows log and, Application and Service logs. The Windows logs allow you to filter the logs created during events like setup, security, applications, and system events. While the Application and Service logs filter the log created by the installed applications in your system.
  • By the source – select this if you want your Custom View to search for information in event sources. It allows you to view events in detail for various applications and devices.

Note: You have the option to further customize the event logs with more filters like Event IDs, task category, keywords, User, and Computer. Using these additional filters, you can choose to filter the events in the special views by specifying event id numbers in the Event IDs, entering predefined Windows words in the Keyword, specify the user accounts in the User field, as well as choose the system from the server to maintain logs in the Computer field.

Step 8: Once you’re done customizing the log filter, click on OK to apply the changes made.

Step 9: After that, a Save Filter should be displayed in the Custom View window. Just enter the Custom View name and select the Event Viewer folder where you want to save the Custom view. The folder name should be Custom View by default. And if you want, you can also create your own folder if you want your custom views to be visible to all the system users.

Step 10: Next, check all the Users box located in the lower corner of the window and then click the OK button after you’re done.

You should now see the customized filter you just created on the left side of the window. Just click on it to check your filtered events in the center of the Event Viewer window. And for you to save the custom view logs, simply right-click on the Custom views you created and then click on Save All Events in the Custom View As from the drop-down menu. Then put a name on the file and select the appropriate location where you want to save the logs and click on the Save button. Note that the log file is saved with the “.EVTX” file extension and when you double click on it, it will open the file in the Event Viewer.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

RebateInformer Hijacker removal guide for windows

RebateInformer is a browser extension for Google Chrome. This extension monitors the web pages the user is visiting and checks against an affiliate database for various rebates and coupons related to the context of the products being shown in the browser.

This extension analyzes websites your browser visits and attempts to find deals associated with the merchant’s product offerings. If an offer is found, it is injected into the deals page even if it's sold by a different merchant at a higher price. Several anti-virus scanners have marked this extension as Potentially Unwanted, and due to its data mining behavior, it is not recommended to keep it on your computer.

About Browser Hijackers

Browser hijacking is regarded as the web’s constant problem that targets web browsers. It is a type of malicious software that alters your web browser’s settings and redirects you to sites or webpages that you had no intention of visiting. Browser hijacker malware is created for numerous reasons. It redirects you to the sponsored sites and injects adverts on your internet browser that helps its creator generate ad revenue. It could seem naive, but the majority of these websites are not legitimate and may pose a serious threat to your online safety. Additionally, hijackers can make the whole infected system fragile – other dangerous malware and viruses will use these opportunities to intrude into your computer system effortlessly.

Browser hijacking symptoms

There are many different symptoms that indicate the web browser has been highjacked: your browser’s home page is suddenly different; new bookmarks pointing to porn websites are added to your bookmarks; the default internet search engine and the default browser settings are modified; unsolicited new toolbars are added to your browser; numerous pop-up adverts show up and/or your browser pop-up blocker is disabled; your web browser starts running slowly or displays frequent errors; you’re blocked to access the websites of computer security solution providers.

How browser hijacker infects computers

There are several ways your PC could become infected with a browser hijacker. They usually arrive through spam e-mail, via file-sharing networks, or by a drive-by-download. They also come from add-on applications, also called browser helper objects (BHO), browser extensions or toolbars. Sometimes you may have inadvertently accepted a browser hijacker as part of an application package (generally freeware or shareware). An example of some notorious browser hijacker includes Conduit, Anyprotect, Babylon, DefaultTab, SweetPage, Delta Search, and RocketTab, however, the names are continually changing. Browser hijackers could record user keystrokes to collect potentially valuable information that leads to privacy concerns, cause instability on systems, drastically disrupt the user experience, and eventually slow down the computer to a point where it becomes unusable.

Browser hijacker removal

Some browser hijacking can be simply stopped by finding and removing the corresponding malware software through your control panel. Unfortunately, many of the software packages utilized to hijack a web browser are deliberately built to be hard to detect or remove. Furthermore, manual removals require in-depth system knowledge and thus could be a very difficult job for novice computer users. Professionals always suggest users remove any malicious software including browser hijacker by using an automatic malware removal tool, which is better, safer, and quicker than the manual removal technique. Safebytes Anti-Malware features a state-of-the-art anti-malware engine to help you prevent browser hijacker infection in the first place, and mop up any existing problems. And employ a PC optimizer to erase all associated files in the registry and fix browser problems.

Can’t Install Safebytes Anti-malware due to the presence of a Virus? Try This!

Malware can cause all sorts of damage once they invade your system, from stealing your personal information to deleting data files on your computer. Some malware sits in between the computer and the net connection and blocks a few or all internet sites that you would like to visit. It could also block you from the installation of anything on your system, especially the anti-malware program. If you’re reading this right now, you’ve perhaps recognized that a malware infection is the real cause of your blocked web traffic. So how to proceed when you want to install an anti-virus application such as Safebytes? Refer to the instructions below to eliminate malware by alternate methods.

Download the software in Safe Mode with Networking

In Safe Mode, you can actually modify Windows settings, uninstall or install some applications, and get rid of hard-to-delete viruses. If the malware is set to load automatically when the computer boots, shifting into this mode may prevent it from doing so. In order to enter into Safe Mode or Safe Mode with Networking, press F8 while the computer is booting up or run MSConfig and find the “Safe Boot” options under the “Boot” tab. As soon as you reboot into Safe Mode with Networking, you could download, install, and update the anti-malware program from there. After installation, run the malware scanner to remove standard infections.

Obtain the anti-malware software using an alternate web browser

Web-based malware can be environment-specific, targeting a particular web browser or attacking specific versions of the web browser. The ideal solution to avoid this issue is to choose a browser that is renowned for its security measures. Firefox contains built-in Malware and Phishing Protection to keep you secure online.

Install anti-malware on a thumb drive

Here’s another solution which is using a portable USB antivirus software that can check your system for malicious software without needing installation. Do these simple steps to clean up your infected PC by using a portable antivirus. 1) Download Safebytes Anti-Malware or MS Windows Defender Offline onto a virus-free computer. 2) Connect the USB flash drive to a USB port on the clean computer. 3) Double-click the Setup icon of the anti-malware program to run the Installation Wizard. 4) Choose the drive letter of the flash drive as the place when the wizard asks you where you want to install the antivirus. Follow activation instructions. 5) Transfer the USB drive from the uninfected computer to the infected PC. 6) Double-click the anti-malware program EXE file on the USB flash drive. 7) Hit the “Scan Now” button to begin the virus scan.

Review of SafeBytes Anti-Malware

These days, an anti-malware program can protect your computer or laptop from different types of internet threats. But how to select the right one amongst various malware protection application that’s available in the market? You may be aware, there are numerous anti-malware companies and tools for you to consider. A few are very good ones, some are ok types, and some are simply just bogus anti-malware programs that can damage your PC themselves! You need to be very careful not to pick the wrong application, particularly if you purchase a premium application. With regards to commercial antimalware tool options, many people go with popular brands, such as SafeBytes, and are quite happy with it. SafeBytes anti-malware is a reliable tool that not only protects your PC permanently but is also quite user-friendly for people of all skill levels. With its most advanced virus detection and repair technology, this software will help you protect your personal computer against infections brought on by different types of malware and other internet threats, including spyware, adware, trojans, worms, computer viruses, keyloggers, potentially unwanted program (PUPs), and ransomware. SafeBytes has got a plethora of features that can help you protect your computer from malware attacks and damage. Here are some typical features found in this application: Real-time Protection: SafeBytes provides round-the-clock protection for your computer restricting malware intrusions instantly. It will check your PC for suspicious activity regularly and its unparalleled firewall guards your PC against illegal entry by the outside world. Robust, Anti-malware Protection: This deep-cleaning anti-malware software goes much deeper than most antivirus tools to clean your personal computer. Its critically acclaimed virus engine detects and disables hard-to-remove malware that conceals deep inside your PC. Safe Web Browsing: Safebytes assigns all sites a unique safety rating that helps you to get an idea of whether the webpage you’re just about to visit is safe to view or known to be a phishing site. Low CPU Usage: SafeBytes is really a lightweight tool. It consumes a very small amount of processing power as it runs in the background so you won’t notice any system performance issues. 24/7 Online Support: Expert technicians are at your disposal 24/7! They will quickly fix any technical issues you may be experiencing with your security software. To sum it up, SafeBytes Anti-Malware offers superb protection combined with an acceptable low system resources usage with great malware detection and prevention. You now may know that this particular tool does more than just scan and delete threats on your computer. So if you are looking for the best anti-malware subscription for your Windows-based PC, we strongly recommend the SafeBytes Anti-Malware tool.

Technical Details and Manual Removal (Advanced Users)

If you do not wish to use malware removal software and prefer to get rid of RebateInformer manually, you may do so by going to the Add/Remove Programs menu in the Control Panel and removing the offending software; in cases of browser plug-ins, you can uninstall it by visiting the browsers Add-on/Extension manager. You will definitely also want to reset your browser. Lastly, check your hard drive for all of the following and clean your registry manually to get rid of leftover application entries following an uninstallation. However, this can be a difficult task and only computer professionals could perform it safely. Also, some malware is capable of replicating itself or preventing deletion. It is highly recommended that you carry out the removal process in Windows Safe Mode.
Files: Search and Delete: baddomaindb.dat domaindb.dat chrRebateInformerSetup.exe RebateBlast.com.url RebateInformer.lnk Help.url RebateBlast.com.url RebateInformer.lnk Settings.lnk Uninstall RebateInformer.lnk npUniPlugin.dll RebateI.dll RebateInf.exe unins000.dat unins000.exe Folders: %APPDATA%\RebateInformer\ %PROGRAMS%\Inbox.com Toolbar\ %PROGRAMS%\RebateInformer\ %PROGRAMFILES%\Inbox.com\ %PROGRAMFILES%\RebateInformer\ Registry: key HKEY_LOCAL_MACHINE\SOFTWARE\CToolbar\PlugIns\REBATEINF key HKEY_LOCAL_MACHINE\SOFTWARE\Rebate Informer key HKEY_CURRENT_USER\SOFTWARE\CToolbar\PlugIns\REBATEINF key HKCU\Software\CToolbar key HKLM\SOFTWARE\CToolbar key HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crdownload key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\4EF645BD-65B0-4F98-AD56-D0437B7045F6_is1 key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CToolbar_UNINSTALL key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\Crawler key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\CCB69577-088B-4004-9ED8-FF5BCC83A039 key HKLM\SOFTWARE\Classes\RebateInf.RebateInfObj key HKLM\SOFTWARE\Classes\RebateI.RebateInformImageGen key HKLM\SOFTWARE\Classes\RebateI.Rebate Informer BHO key HKLM\SOFTWARE\Classes\CToolbar.TB4Server key HKLM\SOFTWARE\Classes\CToolbar.TB4Script key HKLM\SOFTWARE\Classes\ctbcommon.Buttons key HKLM\SOFTWARE\Classes\CToolbar.TB4Client key HKLM\SOFTWARE\Classes\CShared.TB4Server2 key HKLM\SOFTWARE\Classes\CShared.TB4Server key HKLM\SOFTWARE\Classes\CShared.TB4Script key HKLM\SOFTWARE\Classes\CShared.TB4Client key HKLM\SOFTWARE\Classes\TypeLib\E79BB61D-7F1A-41DF-8AD0-402795E3B566 key HKLM\SOFTWARE\Classes\TypeLib\506F578A-91E1-46CE-830F-E2F4268E9966 key HKLM\SOFTWARE\Classes\TypeLib\438B047C-C041-4D15-98CF-A97C6B366C28 key HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\rebinfo key HKLM\SOFTWARE\Classes\Interface\E9BBD270-4B87-4EE2-912F-6635674986C0 key HKLM\SOFTWARE\Classes\Interface\B3BA5582-79A9-464D-A7FA-711C5888C6E9 key HKLM\SOFTWARE\Classes\Interface\604EA016-1EDE-41E6-A23E-76CF8F2A4808 key HKLM\SOFTWARE\Classes\Interface\41349826-5C7F-4BF0-8279-5DAF1DE6E9AE key HKLM\SOFTWARE\Classes\Interface\01C78433-6FDF-4E5A-A82D-B535C32E03DF key HKLM\SOFTWARE\Classes\CLSID\EFB46ED3-8FD8-4051-8FD6-DD9CE7E63BEF key HKLM\SOFTWARE\Classes\CLSID\DB35C569-5624-4CFC-8043-E5139F55A073 key HKLM\SOFTWARE\Classes\CLSID\CCB69577-088B-4004-9ED8-FF5BCC83A039 key HKLM\SOFTWARE\Classes\CLSID\AF808758-C780-404C-A4EE-4526323FD9B6 key HKLM\SOFTWARE\Classes\CLSID\8736C681-37A0-40C6-A0F0-4C083409151C key HKLM\SOFTWARE\Classes\CLSID\54ECA872-DB2A-4C6B-BBB2-F3777C6786CC key HKLM\SOFTWARE\Classes\CLSID\4EF645BD-65B0-4F98-AD56-D0437B7045F6 key HKLM\SOFTWARE\Classes\CLSID\1DDA201E-5B42-4352-933E-21A92B297E3B key HKLM\SOFTWARE\Classes\CLSID\183643C8-EE67-4574-9A38-927852E34163 Value [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions][email protected]=[%PROGRAM_FILES%]\REBATE~1\Firefox\ Value [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RebateInformer=[%PROGRAM_FILES%]\REBATE~1\REBATE~1.EXE /STARTUP Value [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions][email protected]=[%PROGRAM_FILES%]\RebateInformer\Firefox\ Value [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RebateInformer=[%PROGRAM_FILES%]\RebateInformer\RebateInf.exe /STARTUP
Read More
New toys in new PowerToys for Windows
A new update to popular Microsoft PowerToys has brought a few new features that are aimed at speeding up the workflow. PowerToysThe first new feature that was slid in is Always on top utility. With this cool utility, you can keep the window as the name suggests, always on top of other windows. To enable this cool feature all you have to do is press the key combination of ⊞ WINDOWS + CTRL + T and an active window will be now always on top of all other windows. To reverse and unlock this window from being always on top just press key combination again. A second new feature is a really great one and my favorite thing to happen in power toys. Often we are making the search in our browsers to find stuff, things, maybe some explanations, information, etc. The newest update in power toys brings this to a whole new dimension. While you are on PC you just simply need to type ?? followed by questions like: ?? When doctor strange 2 is coming out and that will launch your default browser with your chosen search engine and provide you with the answer. Third and final thing is G-code support in the file explorer preview pane and thumbnails, meaning that if you work with CNC equipment you can now have a thumbnail preview of the code itself inside File Explorer. And that’s it for now, thank you for coming and reading, Take care and I hope to see you next time.
Read More
How to Fix Windows 10 Upgrade Compare Exchange128 Error Message

Compare Exchange128 error – What is it

Some Windows 7 and Windows 8.1 users reported experiencing a Compare Exchange128 error when trying to upgrade to Windows 10. The error reads, “You can’t install Windows 10 because your processor doesn’t support CompareExchange128”. In order to upgrade to Windows 10 (64-bit), the CMPXCHG16B instruction must be present. If you receive this error, this mostly means that your CPU doesn’t have the CMPXCHG16B instruction.

Solution

Restoro box imageError Causes

The CompareExchange128 error normally occurs due to two possible reasons:

  • CPU lacks CMPXCHG16b Instruction
  • Old & Outdated BIOS – Even if your CPU has the CMPXCHG16b instruction, the CompareExchange128 issue can still occur if you have an older BIOS.

Further Information and Manual Repair

One main requirement to upgrade to Windows 10 is for your CPU to have the CMPXCHG16b instruction. You also need the right BIOS version to guarantee a smooth installation. See below on how to manually fix this issue.

NOTE: If you don’t feel confident using the manual methods listed below, it’s highly advisable to get help from an expert technician. If you don’t know someone, you can also use an automated tool to fix this.

Before performing any fixes, try to determine first if the cause of the error is due to your CPU lacking the CMPXCHG16b instruction. You can use a CPU Info tool that provides complete details about your processor, memory, and motherboard. If you’re looking for more in-depth information, you might also try command-line utilities. But, the safest and easiest way to check this is by simply searching online. Try using the search query: <CPU Model> CMPXCHG16b

Method 1 – Update your BIOS

This method will download the latest BIOS from your motherboard’s manufacturer. This makes sure your CPU has the CMPXCHG16b instruction needed to complete the Windows 10 64-bit installation. To update your computer’s BIOS, complete the following steps:

  1. Determine first the current BIOS you have on your computer. Open System Information Windows app and type msinfo32 in the search bar. The BIOS version will appear under the processor speed. Record it somewhere.
  1. Go to the support page of your motherboard’s manufacturer. Find if there’s any update on the BIOS that you’re currently using. If you find one, download the BIOS update file available. Make sure that you’re looking into the right model and you download all the necessary documentation. Otherwise, the BIOS update might not work.
  1. Update your BIOS. Most BIOS update steps are straightforward. Just make sure to follow the steps provided.

Method 2 – Install Windows 10 32-bit version

If updating the BIOS doesn’t work, what you can do is install a 32-bit version of Windows 10 instead of the 64-bit version. Here’s how to do this:

  1. Download and install the 32-bit version of Windows you currently have. If you have a Windows 7 64-bit version, get the 32-bit version of Windows 7. The same goes for Windows 8.1. When you do this, you might want to back up your files first. Remember that installing the 32-bit version works like other installations, and could delete some of your files.
  1. After installing the 32-bit version, go to Updates and install all the necessary updates. This includes upgrading to Windows 10 if you’re asked to.
  1. When you installed the Windows 10 upgrade, you’ll now have the Windows 10, 32-bit version installed. This will be the version activated on Microsoft servers. Despite this, the activated version stored is only applicable to your computer’s hardware, not the version of Windows 10.
  1. Download Windows 10, 64-bit version.
  1. Prepare an empty DVD or USB flash drive. Use Creation Media software then click the Create Installation Media for Another PC option.
  1. Install the 64-bit Windows 10 version you downloaded from Step 4. Make sure not to put anything when you’re asked to input the serial number.
  1. Once the installation is complete, you’ll have the 64-bit version of Windows 10.

Method 3 – Buy a new processor/motherboard

If the above two methods don’t work, there’s a great chance that this error occurs because of an outdated processor/motherboard. Your next possible solution is to buy an updated model that’s fully compatible with 64-bit Windows 10.

Method 4 – Download an automated tool

If all else fails, you might want to consider using this powerful automated tool to quickly fix the problem and any other computer-related issues.

Read More
Android malware spies while posing as a Update
New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:
  • Stealing instant messenger messages;
  • Stealing instant messenger database files (if the root is available);
  • Inspecting the default browser's bookmarks and searches;
  • Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
  • Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
  • Inspecting the clipboard data;
  • Inspecting the content of the notifications;
  • Recording audio;
  • Recording phone calls;
  • Periodically take pictures (either through the front or back cameras);
  • Listing of the installed applications;
  • Stealing images and videos;
  • Monitoring the GPS location;
  • Stealing SMS messages;
  • Stealing phone contacts;
  • Stealing call logs;
  • Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.
Read More
Fix ATTEMPTED_WRITE_TO_READONLY_MEMORY
This post will help you fix the ATTEMPTED_WRITE_TO_READONLY_MEMORY Blue Screen issue with an error code 0x000000BE. If you encounter this kind of BSOD error when you try to boot into your Windows 10 computer, note that there are various possible causes for this error. It could be caused by an error with a device driver, hardware issues, or some error in the BIOS of your computer. The ATTEMPTED_WRITE_TO_READONLY_MEMORY Blue Screen error with a bug check of 0x000000BE appears when a driver tries to write a read-only memory segment. You’ll be able to see the name of the driver in the Blue Screen error if the driver that’s causing the error can be identified. You can also see it in memory at the location (PUNICODE_STRING) KiBugCheckDriver. In most cases, this kind of error is usually caused by various files such as iusb3hub.sys, ntkrnlpa exe or vhdmp.sys, ntoskrnl.exe, ntfs.sys, dxgkrnl.sys, tcpip.sys, atikmdag.sys, and win32k.sys. There are several possible fixes you can try to fix this issue but the main issue lies within booting into Windows since the error occurs as soon as you boot into your Windows 10 computer. Refer to each one of the options provided below to resolve the ATTEMPTED_WRITE_TO_READONLY_MEMORY Blue Screen error.

Option 1 – Try to rollback, update or disable drivers

The first thing you can do to fix the ATTEMPTED_WRITE_TO_READONLY_MEMORY Stop error is to roll back, or update, or disable device drivers. It is most likely that after you updated your Windows computer that your driver also needs a refresh. On the other hand, if you have just updated your device drivers then you need to roll back the drivers to their previous versions. Whichever applies to you, refer to the steps below.
  • Open the Devices Manager from the Win X Menu.
  • Then locate the device drivers and right-click on them to open the Properties.
  • After that, switch to the Driver tab and click on the Uninstall Device button.
  • Follow the screen option to completely uninstall it.
  • Finally, restart your computer. It will just reinstall the device drivers automatically.
Note: You can install a dedicated driver on your computer in case you have it or you could also look for it directly from the website of the manufacturer.

Option 2 – Try running the Memory Diagnostic Tool

The Memory Diagnostic tool in windows can help resolve the ATTEMPTED_WRITE_TO_READONLY_MEMORY Blue Screen error by checking and automatically fixing any memory-based issues. To run it, refer to these steps:
  • Tap the Win + R keys to open Run and type exe and hit Enter to open the Windows Memory Diagnostic Tool.
  • After that, it will give two options such as:
    • Restart now and check for problems (Recommended)
    • Check for problems the next time I start my computer
  • Once your computer has restarted, perform a basic scan or you could also go for the “Advanced” options such as “Test mix” or “Pass count”. Simply tap the F10 key to start the test.
Note: After you select your preferred option, your computer will restart and check for memory-based issues. If it finds any issues, it will automatically fix them and if there’s no issue found, then it’s most likely not a memory-based issue so you should try the other options given below.

Option 3 – Try to update the BIOS

Updating the BIOS can help you fix the ATTEMPTED_WRITE_TO_READONLY_MEMORY BSOD error but as you know, BIOS is a sensitive part of a computer. Even though it is a software component, the functioning of the hardware depends on it largely. Thus, you must be careful when modifying something in the BIOS. So if you don’t know much about it, it’s best if you skip on this option and try the other ones instead. However, if you are well-versed in navigating the BIOS, then follow the steps below.
  • Tap the Win + R keys to open the Run dialog box.
  • Next, type “msinfo32” in the field and press Enter to open System Information.
  • From there, you should find a search field on the bottom where you have to search for the BIOS version and then press Enter.
  • After that, you should see the developer and version of the BIOS installed on your PC.
  • Go to your manufacturer’s website and then download the latest version of BIOS on your computer.
  • If you are using a laptop, make sure that you keep it plugged in until you have updated the BIOS.
  • Now double click on the downloaded file and install the new BIOS version on your computer.
  • Now restart your computer to apply the changes made.

Option 4 – Try disabling BIOS Memory Options

Disabling the BIOS Memory options such as Caching and Shadowing can help you in fixing the ATTEMPTED_WRITE_TO_READONLY_MEMORY Stop error. All you have to do is enter the BIOS first and then use the Arrow and Enter keys to select your choices. And if you can’t seem to find it, look for specific instructions from your OEM or you could also look out for instructions from the manufacturer of your motherboard.

Option 5 – Try running the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like ATTEMPTED_WRITE_TO_READONLY_MEMORY. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:
  • Tap the Win + I keys to open the Settings panel.
  • Then go to Update & Security > Troubleshoot.
  • From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.
Read More
Windows ImageAcquisition High CPU & Disk usage
What is Windows ImageAcquisition High CPU & Disk usage? The Windows Image Acquisition is the driver model in charge of the communication between the graphics hardware and the operating system. There are times when it causes high disk and CPU usage in Windows 10 systems which results in slow performance of the computer. To fix this issue, read on as this post will help you in addressing the problem. The cause of this problem might have something to do with the hardware or the drivers. And so if your computer becomes slow because of the Windows Image Acquisition process, here are some suggestions that might be of help. You can try to restart the Windows Image Acquisition service, run a System File Checker Scan, disconnect & reconnect imaging hardware as well as update and reinstall the drivers and updating the graphics drivers. For a complete set of instructions, follow the given options below.

Option 1 – Try restarting the Windows Image Acquisition Service

  • Tap the Win + R keys to open the Run dialog box.
  • Then type “services.msc” in the field and hit Enter to open the Windows Services Manager.
  • From there, look for the Windows Image Acquisition Service and check on its service Status.
  • If the Service Status is blank, right-click on it and select Start. And if the service Status is Running right-click on it and select Restart. After that, check if your computer’s performance is now back to normal.

Option 2 – Try running a System File Checker scan

As you know, running a System File Checker scan can help in replacing missing files as well as repair the corrupted ones which might be the reason behind the problem.
  • Tap Win + R to launch Run.
  • Type in cmd in the field and tap Enter.
  • After opening Command Prompt, type in sfc /scannow
The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:
  1. Windows Resource Protection did not find any integrity violations.
  2. Windows Resource Protection found corrupt files and successfully repaired them.
  3. Windows Resource Protection found corrupt files but was unable to fix some of them.
  • Restart your computer after the scan is completed.

Option 3 – Try disconnecting and reconnecting the imaging hardware and then update and reinstall its drivers

It could be that the hardware that calls for the Windows Image Acquisition service has some issues which are why disconnecting and reconnecting the imaging hardware like scanners, printers, cameras can help in fixing the problem. In addition, you can also boot your computer in a Clean Boot State so that you can find the problematic hardware by hit and trial method. Refer to the steps below to do so:
  • Log onto your PC as an administrator.
  • Type in MSConfig in the Start Search to open the System Configuration utility.
  • From there, go to the General tab and click “Selective startup”.
  • Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
  • Next, click the Services tab and select the “Hide All Microsoft Services” check box.
  • Click Disable all.
  • Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)

Option 4 – Try updating the Graphics drivers

  • First, boot your computer into Safe Mode.
  • After that, tap the Win + R keys to launch Run.
  • Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
  • After that, a list of device drivers will be displayed. From there, look for the Display Adapters and click on them.
  • After that, right-click on each entry under the Display Adapters and select the “Uninstall Device” option from the menu.
  • Now restart your computer.
  • After restarting your computer, go to the Settings app and Check for Updates in the Windows Update section.
Note: You also have the option to go directly to the website of your graphics card manufacturers like NVIDIA, Intel, or AMD and go to the section called Drivers then check if there’s a new available update – if there is, download and install it.
Read More
Windows won’t go Sleep, Legacy Kernel Caller
If the display of your Windows 10 computer turns on all of a sudden no matter how put it to sleep over and over again, it always wakes up, read on as this post will guide you in resolving this peculiar issue. In case you don’t know, the Windows 10 computer Sleep state is made in such a way that if it’s really important, it wakes up. You may have configured this kind of behavior or there could be some hardware component that’s interrupting its Sleep state. Thus, this post will give you some troubleshooting tips to fix the Sleep state issue caused by the Legacy Kernel Caller. The Legacy Kernel Caller points to the external hardware that’s causing your Windows 10 to wake up even when it’s in a Sleep state. Step 1: Find out what’s keeping your computer from going to sleep. To figure out what really is keeping your computer from going to sleep, you can execute the “powercfg –requests” command instead of checking the power configuration of your computer. This command will look for requests from applications and drivers that prevent the computer from turning off the display or from going to sleep. To execute the command, simply open Command Prompt and type “powercfg –requests” and hit Enter. After that, you will see part of the result that looks like this:
“SYSTEM [DRIVER] USB AUDIO DEVICE An audio stream is currently in use [DRIVER] Legacy Kernel Caller.”
Step 2: The next thing you have to do is remove all the external hardware connected to your computer. In this step, you have to disconnect external hardware from your computer. Based on reports from users who experienced the same issue, the “TV card” is the culprit so make sure you remove that one. Once you’ve removed it, open Command Prompt and run the “powercfg –requests” command again and you’ll see that the “Legacy Kernel Caller” will no longer be on the list. In addition, your computer will get into its regular sleep mode once the hardware is removed. Once you do that, the driver gets hung and won’t release the power request despite being used. Step 3: Try using the request override option The powercfg command also offers a request override option which allows users to disable the requests from applications and services to wake the computer from sleep mode. To run this command, simply open Command Prompt with admin privileges. After you open Command Prompt, type the following command and hit Enter to disable requests from applications and services that causes the computer to wake from sleep state.
Powercfg -requestsoverride Driver "Legacy Kernel Caller" System
Step 4: Check the streaming and media applications You also have to check if your computer is running an audio or video service in the background. In such cases, your computer won’t be able to go to sleep mode if these services are running in the background. You might have noticed that when you play a video or audio, your computer never goes to sleep. And if you have put it to sleep in between watching the video, then it’s probably why your computer is waking up. Thus, you have to stop these services. Step 5: Check the devices that can wake your computer If you didn’t see the Legacy Kernel Caller in the result after you execute the ”powercfg –requests” command, then you can try to execute the following command instead.
powercfg –devicequery wake_armed
After you enter this command, it will give you a list of all the devices that can wake your computer. So if there is anything other than the mouse, keyboard, touchpad, you have to check the power configuration of that device. To do that, go to the Device Manager and disable the device’s “Allow this device to wake the computer” option in its Properties Step 6: Check the Sleep Advanced Settings
  • Click on the Windows key and type “control panel” in the field and select the related search result.
  • Next, select the Security and Maintenance option and click on the Power Options.
  • After that, you have to select the Change Plan Settings but keep in mind that this option is barely readable so you need to read each option carefully.
  • Now click on the Change advanced power settings button and a new window will appear.
  • Then look for the “Sleep” option and expand it. Make sure that the “Allow hybrid sleep” option is on.
  • Reboot your computer and check if your computer now functions properly. If it still didn’t work, you may have to reverse the changes you’ve made.
On the other hand, you could also run the Power Troubleshooter to resolve the Sleep state issue. This built-in troubleshooter will automatically fix any power-related issues in your computer.
Read More
YOU ARE NOT AUTHORIZED TO ACCESS ...
If you have encountered the “YOU ARE NOT AUTHORIZED TO ACCESS THIS WEB PAGE AS PER THE DOT COMPLIANCE” error while trying to visit a website using either Firefox or Chrome browser, then read on as this post will guide you on how you can fix this error. Apart from this error message, you might also see an alternative message that says, “Web Page Blocked! The page you have requested has been blocked because the URL is banned as per the Government Rules”. When you get any of the aforementioned error messages when visiting a website, this means that it has been marked. It is mostly recommended to not access the site as it might be blocked for some illegal reason. However, if you are certain that the website is legitimate and safe and you believe that it has been blocked by accident, then you can check out the given methods in this post to unblock and access the blocked or restricted website. There isn’t actually a straightforward way to remove the restriction on the website or the DOT compliance. And it won’t matter what browser you use as you will still get the same error. Thus, the best way to go about this issue is for you to bypass the ISP restriction. But before you proceed, keep in mind that the ISPs (Internet Service Providers) can block any website when a request goes through their servers.

Option 1 – Try changing the DNS

If the request to access the website does not go through the ISP’s DNS server, you might have a chance in accessing it by changing your DNS settings. You can try using the Google Public DNS.
  • Tap the Win + R keys to open the Run dialog box.
  • Then type “inetcpl.cpl” in the field and hit Enter to pull up the Internet Properties.
  • After that, go to the Connections tab and select the LAN settings.
  • From there. Uncheck the “Use a Proxy Server” option for your LAN and then make sure that the “Automatically detect settings” option is checked.
  • Now click the OK and the Apply buttons.
  • Restart your PC.
Note: If you are using a third-party proxy service, you have to disable it.

Option 2 – Try to install a Proxy Extension

You could also try installing a Proxy extension or Proxy software as it could also help you access the website you are trying to open as it allows you to access the blocked websites by routing the request through their server. Aside from that, it can also hide it from ISPs to make them look like the content is coming from the proxy servers.

Option 3 – Try using a VPN connection

There are instances when the network that your computer is logged on might have blocked your access to the website you are trying to open and so to fix it, you can try to use a VPN connection. There is a lot of free VPN software out there but just make sure that you install a trusted one. Once you’ve connected using VPN, try to open the website again and see if you can now access it.

Option 4 – Check the Windows Host file

You can also try to cross check the Windows Hosts file to find out if the website you are trying to open has been blocked because if it is, then it’s no wonder why you’re getting the ERR CONNECTION TIMED OUT error in Chrome. There are instances when some third party application modifies the file and add some websites to the block lists. So if the website is indeed blocked, you need to remove it from the list.

Option 5 – Try to contact your ISP

If none of the options given above worked, then you can try to contact your ISP as there are times when DOT clears a website, the ISPs are still blocking it. Thus, it’s probably better if you reach out to them and ask them to unblock the website from their end.
Read More
Fix Windows 0x8007002C – 0x400D Error
In Installing or upgrading your Windows 10, there really is no guarantee that everything will go smoothly as there are times you encounter errors like the “ We couldn’t install Windows 10, 0x8007002C - 0x400D ” error message among other Windows update/upgrade errors. When you encounter this particular error message you will the following message on your screen:
 “We’ve set your PC back to the way it was right before you started installing Windows 10. 0x8007002C-0x400D The installation failed in the SECOND_BOOT phase with an error during MIGRATE-DATA operation”
This kind of Windows upgrade error indicates that some of the files needed for the installation are locked out for some reason and that Windows was not able to migrate them to a new version. It could be that your computer does not have sufficient space for those files. Thus, no matter how many times you try to upgrade your computer, you always end up going back to the previous version of Windows. To fix the “0x8007002C – 0x400D, The installation failed in the SECOND_BOOT phase with an error during MIGRATE-DATA operation” error, here are some suggestions that might help:

Option 1 – Disable your antivirus program

There are times when the antivirus program installed in your computer blocks file access and even disk access. Thus, disabling the antivirus program or any security software installed in your computer is always a good idea you can try when the Windows Update process does not go smoothly. So before you try updating your computer again, make sure to disable the antivirus or security program and once the Windows Update is done, don’t forget to enable the antivirus program back again.

Option 2 – Perform a Disk Cleanup to free up disk space

Chances are, some unnecessary files in your computer might be interrupting the installation process which explains why you’re getting the “0x8007002C – 0x400D, The installation failed in the SECOND_BOOT phase with an error during MIGRATE-DATA operation” error instead so you need to perform a Disk Cleanup in order to fix the problem.
  • In the Cortana Search box, type “disk cleanup” and click on the related search result.
  • Then select the disk you want to clean and click OK.
  • Wait for the process to be completed and then restart your PC and try to install the Windows upgrade again.

Option 3 – Get rid of any file protection software

The Windows setup migrates the folder from one version to another during the upgrade. However, if some of your folders, if not all, are protected using some file protection software, then Windows won’t succeed in moving the folder and you will encounter this Windows upgrade error instead. Thus, you need to unlock all those protected files or better yet uninstall the file protection software after you remove the locked files. After that, try installing the upgrade again.

Option 4 – Rename the SoftwareDistribution folder

The Software Distribution folder in the Windows operating system is a folder that can be found in the Windows directory and is used to store files temporarily which might be required to install the Windows Update on your PC. Thus, it is required by the Windows Update and maintained by WUAgent. Aside from that, it also contains all the Windows Update History files and once you delete them, you will most likely lose the Update history. As a result, the next time you run the Windows Update, it may result in a longer detection time.
  • Open the WinX Menu.
  • From there, open Command Prompt as admin.
  • Then type in the following command – don’t forget to hit Enter right after typing each one of them.
net stop wuauserv net stop bits rename c:windowsSoftwareDistribution SoftwareDistribution.bak
  • After entering these commands, it will stop the Windows Update Service, the Background Intelligent Transfer Service, and rename the SoftwareDistribution folder.
  • Next, got to the C:\Windows\SoftwareDistribution folder and get rid of all the folders and files thereby tapping the Ctrl + A keys to select them all and then click on Delete. Note that if the files are in use, you won’t be able to delete them.
  • Once all the contents in the Software Distribution folder are deleted, restart your PC and then go back to Command Prompt and input the following commands again.
net start wuauserv net start bits
Since the folder has already been flushed, it will be populated afresh the instant your restart your computer and open Windows Update.

Option 5 – Run the DISM tool

As mentioned, the “0x8007002C – 0x400D, The installation failed in the SECOND_BOOT phase with an error during MIGRATE-DATA operation” error might also be caused by corrupted files in the computer. Thus, you can try using the DISM tool to repair them. Running the DISM tool can repair the Windows System Image and Windows Component Store in Windows 10.
  • Open the Command Prompt as admin.
  • Then type in this command: DISM /Online /Cleanup-Image /RestoreHealth
  • Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 6 – Run the Windows Update Troubleshooter

Running the built-in Windows Update troubleshooter could also help you resolve this particular Windows upgrade error. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button.

Option 7 – Try running Microsoft’s online troubleshooter

You also have the option to run Microsoft’s online troubleshooter which could help you fix Windows Update errors including the “0x8007002C – 0x400D, The installation failed in the SECOND_BOOT phase with an error during MIGRATE-DATA operation” error.
Read More
Fix Error 1061 The service cannot accept control messages at this time Error in Windows 10
If you are trying to run or starting a program on your Windows 10 computer and you suddenly get an error message saying, “Error 1061 The service cannot accept control messages at this time”, read on as this post will show you what you can do to fix the problem. This kind of error pops up since the Application Information Service does not respond to the requests to raise applications to Administrator in Windows 10 like the Task Manager, Service updates, and so on. Thus, you won’t be able to run or open apps and will only get stuck with this error. The “Error 1061 The service cannot accept control messages at this time” message is a type of network error that typically occurs when there is a temporary mismatch between the requested control and the state of the service to be controlled. It’s most likely that the service is in a state of start-pending, stop-pending, stopped or it may already be used by another user which explains why this error message suddenly appears. You can encounter this error message on any Windows operation. Here are some of the most common occurrences:
  • Debugging a Windows service
  • Starting Task Manager
  • Starting Registry Editor
  • Starting Firewall
  • Starting services.msc
  • Starting dsm.exe
  • Updating services
  • Asking for file permissions, etc.

According to Microsoft MSDN, the error occurs because:

“There is a temporary mismatch between the requested control and the state of the service to be controlled. The service may be in a state of start-pending, stop-pending, or stopped. Wait a few minutes, then retry your operation.” If after a few minutes, the error still appears, then you may have to follow the options prepared below.

Option 1 – Try to restart the Credential Manager Service

  • Go to the Start menu.
  • Then type in “services” in the search box.
  • From the search results, right-click on “Services” and select the “Run as Administrator” option.
  • Next, look for the Credential Manager Service in the Services window.
  • Once you found it, double-click on it to open its Properties. From there, you need to click on the Stop button.
  • After that, set the Credential Manager Service to “Automatic” and click on the Start button to restart it.

Option 2 – Try to start the Application Information Service

You can also try starting the Application Information Service to fix the “Error 1061 The service cannot accept control messages at this time”. Just open the Windows Services Manager and make sure that Application Information Service is Started. And if you find that it’s already started, you need to restart it.

Option 3 – Try killing the IIS Worker Process via Task Manager

  • Tap the Ctrl + Alt + Del keys and select the Task Manager.
  • Next, click on More details to expand the Task Manager and then look for the IIS Worker Process entry which should be displayed in the list under the Processes tab. From there, you can see it in the Background processes. Once you find it, kill its process.
  • You can also try to look for the “w3wp.exe” entries and end its process. if you find many entries, right-click on some of them and select the End task option from the context menu.
  • Now restart your PC. That should fix the problem.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status