How to Use and Configure Active Hours

The issue with the abrupt system reboots to force Windows 10 updates on a computer has been lessened with Active Hours. This feature keeps a record of the hours during which a system remains active and prevents the installation of updates during such hours. For example, when a system restart is needed to complete the installation of an update, Active Hours delays the update and allows you to finish what you’re doing on your computer. Thus, if you haven’t heard of this feature, then now is the time you do, read this post to configure and use Active Hours in your Windows 10 computer.

There are three ways you can configure Active Hours. The first one is for general users, whereas the rest of the two methods are for users who knows their way about the Windows Registry and Group Policy. To get started, refer to every given option below.

Option 1 – Configure Active Hours via Windows 10 Settings

  • Go to Settings > Update & Security. From there, click on the “Change active hours” option under the Windows Update section.
  • Next, you can select a time (“Start time” and “End time”) during which the restart can occur.
  • After that, click on the Save button and exit.

Note: Keep in mind that the values you’ve entered indicate the hours during which your system is in use, namely, ACTIVE. It is important for your active hour’s interval period and it can be anything between 1 and 18 hours since you can’t go beyond 18 hours. In addition, there is no option to configure different active hours on different days and you can’t specify different active hours for weekends and weekdays as well.

On the other hand, Windows 10 also offer users an option to override Active Hours. All you have to do is go to Settings > Update & Security > Windows Update > Restart Options. From there, you can choose a custom restart time when your computer will restart to install the updates but this is only a one-time setting.

Option 2 – Configure Active Hours via Registry Editor

  • Tap the Win + R keys to open the Run utility and type “Regedit” in the field and tap Enter or click OK to open the Registry Editor.
  • Next, navigate to this registry path: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsUpdateUXSettings
  • In the given registry path, you can choose to change “ActiveHoursStart” and “ActiveHoursEnd”.

Note: There are no extra settings available in the Registry Editor but you can change the remote computer’s Active hours settings using the Registry Editor.

Option 3 – Configure Active Hours via Group Policy

Note that this option is available for the Windows 10 Pro and Educational or Enterprise versions. It is mostly used by computers in Business or through remote access. To get started, follow these steps:

  • Tap the Win + R keys to launch Run and type “gpedit.msc” in the field and tap Enter or click OK to open the Group Policy Editor.
  • Next, navigate to this group policy setting: Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Updates.
  • From there, look for a policy labeled “Turn off auto-restart for updates during active hours” and double click on it. This will open a new window.
  • Click on the Enabled radio button to enable Active Hours. You also have the option to choose active hours just like in the first given option above. It works just fine except when the following policies don’t override:
    • No Auto-restart with logged-on users for scheduled automatic updates installations.
    • Always automatically restart at the scheduled time.
  • Since Group Policy allows you to reduce the range of active hours, you can configure it if you want it to be less than 18 hours. Just find the policy setting labeled “Specify Active hours range for auto -restarts. The minimum is 8 hours”.
  • After you set the Active Hours, click the Apply and OK buttons to save the changes made.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

CHKDSK cannot continue in read-only mode
As you know, the CHKDSK utility is proven to be one of the useful tools to fix any issues that concerns file system, storage, and disk. However, as useful as it may be, it is still not immune to issues as you could encounter errors when running it. One of these errors is the “One such error is the CHKDSK cannot continue in read-only mode” error. If you receive such an error message while running CHKDSK, then you’ve come to the right place as this post will help you sort the problem out. It is possible that the drive is read-only or that the Write Protection is enabled. It could also be that the drive is already being used and scanned by a different program or utility. To get rid of this error, there are a couple of suggestions you need to check out. You can try to run the CHKDSK utility from Recovery or run it on Boot. You could also try to disable Write Protection. For more detailed steps, follow the given instructions below.

Option 1 – Try to run the CHKDSK utility from Recovery

The first thing you can do to resolve the error in CHKDSK is to run the CHKDSK utility from Recovery. How? Follow these steps:
  • First, boot into the installation environment for Windows 10 from a Windows installation media.
  • Next, click on the “Repair your computer” option.
  • After that, select Troubleshoot > Advanced options > Command Prompt.
  • After opening Command Prompt, type this command and tap Enter: chkdsk <Partition Letter>: /r /f
  • Wait until the disk error checking process is completed.
  • Once it’s done, exit the Command Prompt window and restart your computer and then see if the error is fixed.

Option 2 – Try running the CHKDSK utility on Boot

On the other hand, you can also try to run the CHKDSK utility on Boot so you can fix the error and recover any damaged segments of the drive.
  • Open an elevated Command Prompt and enter this command: chkdsk /r
  • After that, you will a message that says, “Chkdsk cannot run because the volume is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts? (Y/N)”
  • Type Y and tap Enter to schedule a CHKDSK scan once your computer reboots next time.

Option 3 – Try to remove the Write Protection from the drive

As mentioned, removing the Write-Protection on the concerned drive could also help you fix the problem and there are two ways to get rid of the write protection – you can either use the Diskpart utility or the Registry Editor. How? Refer to the following steps.

Via Diskpart utility:

  • Open Command Prompt with admin privileges and then type the “diskpart” command and tap Enter to execute it.
  • Next, type “list disk” and tap Enter to get the list of all the Disk connects or all the partitions that are formed on those disks.
  • After that, you need to choose one command depending on the list of commands you entered. Type “select disk #” and tap Enter to select the disk or partition you want to select.
  • Then type “attribute disk clear readonly” and tap Enter to Disable the Write Protection on the selected disk or partition.

Via Registry Editor:

  • Tap the Win + R keys to open the Run utility and type “Regedit” in the field and then tap Enter to open the Registry Editor.
  • Next, navigate to the following registry key:
ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlStorageDevicePolicies
  • After that, look for the DWORD named “WriteProtect” and double click on it, and then set its Value Data to “0”.
  • Now restart your computer and see if the problem is now fixed or not.
Read More
How to Fix Windows Activation Error Code 0xc004f050

Error Code 0xc004f050 – What is it?

Error code 0xc004f050 refers to a problem with activating the Windows key. The problem appears when you try to activate a copy of Windows by using Windows Activation wizard. This happens when the system becomes unstable and critical system files start missing. Though Windows 10 is a free upgrade for Windows 7/Windows 8/Windows 8.1 users, the activation error is still an issue. If you already had Windows 7/Windows 8/Windows 8.1 activated and did an upgrade successfully, then there should be no problem. This Problem Occurs only when you do a clean install.

Symptoms

When you try to activate a copy of Windows Vista or Windows 7 by using the Windows Activation wizard, you receive an error similar to the one below:
An error has occurred Code: 0xC004F050 Description: The Software Licensing Service reported that the product key is invalid

Solution

Restoro box imageError Causes

  • This causes due to an invalid product key.
  • This problem may occur if the license validity interval has expired, or if the license is not signed correctly.
  • Error Code 0xc004f050 occurs when the system becomes unstable and critical system files start missing.
  • Improper way of installing, deletion of some very important system files, misconfigured system files, etc. may also cause this error.
  • When you do a clean install, it wipes everything from the Primary Drive and after the install, windows can't find the Hardware ID which is used to verify your license.
  • For Windows 7, Windows Server 2008, and Windows Vista-based computers, this error may occur if you have entered the key for a beta version of the operating system while using the released version of the operating system.

Further Information and Manual Repair

This error is not something that can be fixed in seconds but will require some time and technical knowledge.

Method 1:

Re-insert the product key by using the Change Product Key tool:
  1. Click Start, click Computer, and then click System properties on the toolbar.
  2. In the Windows activation section, click Change product key.
  3. If you are prompted for an administrator password, type the password or click Continue.
  4. In the Product key box, type the product key, and then click Next.
  5. Follow the steps in the Windows Activation Wizard to complete the activation process.

Method 2:

Activate Windows by using the automated telephone system:
  1. Click Start, and then click Computer.
  2. Click System properties on the toolbar, and then click Click here to activate Windows now in the Windows activation
  3. If you are prompted for an administrative password, type it and click Continue.
  4. Click Show me other ways to Activate.
  5. Click Use the automated phone system and follow the instructions.

Method 3:

  1. Clean install Windows 7/Windows 8/Windows 8.1 using the installation disk and activate your copy.
  2. Now, download all the updates to see the Windows 10 Upgrade notification or download Windows Media Creation Tool and use the option Upgrade this PC to get Windows 10 right away.
  3. Once the upgrade is done, check the Activation Status. It will be fully activated as it should be. The Error code 0xc004f050 should not appear anymore.
If you want to get rid of the old Windows installation folder, then use the Windows Media Creation Tool to create a Flash Drive. Clean Install Windows 10. Now, every time when it asks for a product key, skip it. After installation is complete, Windows will automatically identify and activate your Copy. NOTE: Clean Install will make Sure you cannot roll back to your previous Windows 7 or Windows 8. So do it only if you are confident of using Windows 10 from here on. To verify the Windows activation status, follow these steps:
  • Click the Start button, and then click Computer.
  • Click System properties on the toolbar, and then view the activation status in the Windows activation section.
Read More
Download and Install Google Fonts on Windows
Google fonts are a free open-source font library made to enrich web content and present end-user with a smooth web experience while surfing. Fonts are completely free for both commercial and personal use and they are not limited to use in WEB only, you can use them also in other projects like business cards, flyers, etc. In order to use google fonts first thing of course you will need to download them. In this guide, we will show you how to download and install google fonts.
  • Go to the Google Fonts page.
  • Select the font family that you wish to use. You can preview each font style to make double-sure it is the right one.
  • When you are ready, click on the Download family button.
Roboto Font
  • A File Explorer window will pop up, asking you where to save the font family.
  • The downloaded file will be compressed in .zip format to save bandwidth, so you will first need to uncompress/unzip it. Right-click on the file and select Extract all.
Extract All
  • You will then be asked where to unzip/extract the file. File Explorer will automatically create a new subfolder, named as the file name, so all you need to do is confirm it by clicking Extract.
Extract Files
  • Click on the Windows icon in the bottom-left corner of your desktop
Settings
  • Select the Personalization category and Fonts.
Available Fonts
  • Split the screen between File Explorer and Settings by dragging the windows to either the left or right edge of the screen. Select all the font files by pressing CTRL + A and drag them into the Add fonts box.
Add Fonts New
Read More
How to Fix Htmlayout.dll Error

What Is Htmlayout.dll Error?

Htmlayout.dll is a linked library which is also known as HTMLayout. In simple words, it is an embeddable HTML layout and rendering component. htmlayout.dll is generally associated with Avast Internet Security, Bit Defender Internet Security 2011, and other similar programs. If you’re noticing that a continuous popup that reads:-
‘HTMLayout.dll cannot be loaded to properly start GUI. Therefore process cannot continue’, ‘Htmlayout.dll not found’, ‘The file htmlayout.dll is missing’,
and so on, then your system may be exposed to serious privacy and security threats.

Solution

Restoro box imageError Causes

To begin with, DLL files are shared files, and they can and do exist outside the software applications. While these files do provide benefits to software developers, once they are separated, they can only spell trouble. Hence, you start seeing the HTMLayout error, which will most probably occur at system startup, program startup, or when trying to use specific functions in a program. There are a number of reasons why the HTMLayout errors occur, and some of the common ones include:
  • The file is missing because it was accidentally deleted from the system.
  • The file was damaged by a virus and as a result, your system cannot access it.
  • The file was related to the registry and is now corrupt or obsolete.
  • The program that was related to the file was not uninstalled properly.
  • The file was overwritten by a corrupt or outdated version.
  • The spyware or malware deleted the original file and disguised it as the HTMLayout.

Further Information and Manual Repair

While the HTMLayout DLL error may sound like too much trouble, it is rather easy to resolve with a few steps. If you are getting the error because of a specific program or file, then you should reinstall to make sure the error does not pertain. For that, follow these steps:
  1. Go to Start and select the Control Panel.
  2. Click on the Add/Remove Programs icon and select the programs that show the error on the list.
  3. Select Remove/Uninstall to safely remove the program from your system.
  4. Restart the system and reinstall the program again.
This is the easy way out if the HTMLayout DLL error is occurring as a result of the file missing. However, there can be cases when the file has been tampered with by virus or registry issues. For that, the safest bet is to download Restoro. Restoro is not just another registry cleaner. Instead, it is a multi-functional PC Fixes that works as an antivirus, registry cleaner, system optimizer, and much more. What’s more interesting about Restoro is that it provides real-time results as opposed to other registry cleaners. In other words, you will actually feel a difference in PC performance and security after installing and using the program. The software is compatible with all Windows versions. So just click here and download Restoro to get rid of HTMLayout error and other issues in your system!
Read More
How to Fix Error 0x80070057

Error Code 0x80070057 - What is it?

Error 0x80070057 is a typical Windows 7 error code. It may occur when you try to back up files by using Windows Backup on Windows 7 and the backup fails.  The error message is often displayed as the following:

“An internal error has occurred: The parameter is incorrect: (0x80070057)”

Besides this, you may also experience this error message when you format a hard disk drive to install Windows 7.

Solution

Restoro box imageError Causes

The error 0x8007005 occurs due to multiple reasons. However, the most common causes for this error code include:
  • The partition that is reserved for the system is damaged
  • Misconfigured registry keys
  • Misconfigured decimal symbol settings

Further Information and Manual Repair

Here are some of the best and easy DIY methods to resolve the error 0x80070057 on your PC.

Solution 1: Change the Decimal Symbol Setting

As mentioned above the error 0x80070057 sometimes can be triggered by misconfigured decimal symbol settings. Therefore, try changing the settings to fix the problem. The error is likely to occur if the decimal symbol is not set to ‘.’ (dot). This is common in languages and locales other than English such as German. Here’s what you need to do to change the decimal symbol setting:
  • First, open the Control Panel, click the clock, then language, and then region.
  • Now click the formats tab and go to the additional settings menu.
  • Here you will find the decimal symbol field, now type "." (dot) and then click OK twice.
  • After that, you must restart your PC to activate the changes.

Solution 2: Create a New Partition and Reinstall Windows 7

If the error 0x80070057 is linked to partition damage, then this method is the best way to resolve it. Here’s what you need to do:
  • Insert the Windows 7 DVD and start the installation.
  • Select your language preference to install. Here you will see a screen of the Microsoft License Agreement. Click on the I accept option to proceed with the installation process.
Then click next.
  • Choose a custom advance option and select the Disk O partition 1 option.
  • Once selected, click delete. When you do this you will be prompted if you want to confirm the deletion, click OK to continue.
  • Now repeat the same however now select Disk O partition 2.
Delete this partition as well. Now click New to create a new partition. Here define the disk size and then click apply. Please note, the size of the default value is the maximum size of the disk. After doing so, select disk 0 partition 2 and then click the formatting tab. Once the formatting is complete, click next to continue Now you will be able to complete the installation of Windows 7 on your PC without any problem.

Solution 3: Add a Registry Key Value

If the underlying cause of the error 0x80070057 is a registry issue, then it is serious as such issues can put your PC at serious risks like system failure, crash, and data loss. To resolve this error and add a registry key value here’s what you need to do: Go to the start menu and type Regedit.exe in the search bar and then press enter. Locate and click the following registry sub-key: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftSystem. Once you locate it, now go to the edit menu and point to new, and then click DWORD Value. After that, type CopyFileBufferedSynchronousIo and press enter again. Right-click now on the text you just typed and then click Modify. In the Value data box, type 1 and then click ok and exit the registry editor. This will fix the error on a temporary basis but not permanently. However, a long-term solution is to clean and repair the registry.

Solution 4: Restoro

The registry gets cluttered with unnecessary and redundant files like junk files, cookies, internet history, and bad registry keys. If these are not removed timely, they can damage the registry and corrupt DLL files. It often leads to disk fragmentation (disk partition) too. To remove these files immediately, clean and restore the registry and repair the corrupt files, it is advisable to download Restoro.

Why Restoro

  • This is an advanced and highly functional Registry Cleaner. It is deployed with a cutting-edge and intuitive algorithm that scans your entire PC to detect all registry issues in seconds. It cleans the cluttered disk and restores the registry back to normal.
  • It is safe, bug-free, and efficient. This software is easy to use and compatible with all Windows versions.
  • In addition to this, it is also deployed with several other powerful utilities like an antivirus that detects all malicious software and removes them right away. It also functions as a system optimizer and boosts the speed of your PC significantly.
Click here to download Restoro and resolve error 0x80070057 now!
Read More
UNMOUNTABLE_BOOT_VOLUME
One of the worst Blue Screen of Death errors you can encounter is the UNMOUNTABLE_BOOT_VOLUME BSOD on Windows 10. In this BSOD error, your computer won’t be able to properly boot. Meaning to say, even if you want to reinstall Windows, you won’t be able to back up your important files. Thus, it wouldn’t be really feasible to fix the system files, and besides, reinstalling Windows 10 would take a lot of time, not to mention resources. The UNMOUNTABLE BOOT VOLUME error is the kind of BSOD error that occurs if Windows is not able to access the volume that contains the boot files. Resolving this BSOD error won’t be easy but you will surely manage by following the suggestions laid out below but before you go on, make sure to create a System Restore Point.

Option 1 – Try checking the hardware

If you got the UNMOUNTABLE BOOT VOLUME BSOD error while trying to update your computer to a higher version of Windows, then you need to check if you have the compatible drivers for the disk controller as well as re-check the drive cabling and make sure that it is properly configured. And if you’re reusing either ATA-100 or ATA-66 drivers, ensure that you have an 80-connector cable and not the standard 40-connector IDE cable.

Option 2 – Try using Automatic Repair

You might also want to use Automatic Repair in fixing the BSOD error. To do so, follow the steps below.
  • You can start by creating and booting from a bootable Windows 10 USB Stick.
  • After that, click on Repair your computer located in the bottom left corner when you are on the initial Windows Startup screen.
  • Next, click on Troubleshoot, and then on the other screen, click the Startup Repair option.
  • Now select the operating system you want to repair. Once you do that, it will start to repair your operating system. Wait until the process is completed and then check if the problem’s now fixed.

Option 3 – Try fixing the Master Boot Record or MBR

The MBR or Master Boot Record is the location and is where the architecture of the operating system is installed. Thus, if either the location or the architecture has tampered with, it can cause lots of BSOD errors like the UNMOUNTABLE BOOT VOLUME error.
  • Boot your computer into Safe mode with Networking using the Advanced startup options which you can access by tapping the F2 or F8 key. Once you’ve accessed the Advanced startup options.
  • After you access the Advanced Startup options, select Command Prompt by using the arrow keys on your keyboard.
  • After opening Command Prompt, execute the following command and hit Enter:
bootrec /fixboot
  • After entering the command, wait until the process is completed and then restart your computer to apply the changes made successfully.

Option 4 – Run the CHKDSK command to repair hard disk errors

Running the Chkdsk utility could help you fix the UNMOUNTABLE BOOT VOLUME error. If your hard drive has issues with integrity, the update will really fail as the system will think that it’s not healthy and that’s where the Chkdsk utility comes in. The Chkdsk utility repairs hard drive errors that might be causing the problem.
  • After you access the Advanced Startup options, select Command Prompt by using the arrow keys on your keyboard.
  • After opening Command Prompt, execute the following command and hit Enter:
chkdsk /f /r
  • The command you entered will scan the hard disk for any errors and will automatically fix it if it finds some issues. Wait for the process to be completed and then reboot your PC.
Read More
MS Mariner, new OS for servers based on Linux
mariner installerWell if anyone told me just a few years ago that I will see the day when Microsoft releases a new OS based on Linux I would be very amused, but that day has come. Mariner is the newest OS out of nowhere. Microsoft’s new Linux Distro, dubbed Common Base Linux (CBL)-Mariner, isn’t the type of distro you’d want to install directly on any old machine. It’s primarily meant for cloud infrastructure and edge products. Specifically Microsoft’s Cloud and Edge products. But if you are curious, it’s possible to run. Juan Manuel Rey, a Microsoft Senior Program Manager for Azure VMware, recently published a guide to ISO CBL-Mariner image. With that, you can easily get it up and running. And you can build CBL-Mariner on an Ubuntu 18.04 desktop. So you can try it out since it is free. You can get it from here: https://github.com/microsoft/CBL-Mariner It is obvious that Microsoft aims to set itself as a leader in enterprise server environments with this move and it is very likely that it may succeed or at least give a good shake to its competitors, mainly red hat and Suse which are two dominant distros in that field. Many believe that they can win over by providing regular updates and package delivery via their already established system and that feature could be a turning point for some. In any case, time will tell and we shall see.
Read More
Could not configure one or more components
If you are trying to install or upgrade your Windows 10 computer but suddenly encountered an error message saying, “Windows could not configure one or more system components”, read on as this post will show you how you can fix the problem. You are not alone in experiencing this problem as other users also reported having the same scenario. Some of them reported getting the following error message:
“Windows could not configure one or more system components. To install Windows restart the computer with error code 0xc1900101-0x30018.”
When you check on the Windows 10 rollback log, you will see a part with the “iisetup.exe” that’s related to the abort. Usually, the upgrade process completes over 50% and gets stuck and then rolls back later on and generates the error logs. This kind of error, in most cases, appears during the upgrade of Windows 10 and is related with the Internet Information Services or IIS in Windows 10. For some unknown reason, it restricts the installation or the upgrade which causes the error to appear. To fix the “Windows could not configure one or more system components” error, you can try to remove the IIS from the Windows Features or rename the “inetsrv” folder. You could also move all the folders related to IIS to another drive. For more details, refer to the options provided below.

Option 1 – Try to remove the IIS from Windows Features

The IIS is installed from the Windows Features and you can find it at Control Panel > Programs. From there, uncheck the checkbox for the Internet Information Services. Once done, click on the OK button to save the changes. Note that this process will get rid of all the related programs, services, and folders from Windows 10. So if you want to, you can just install them later on or use an offline installer from the official site of Microsoft.

Option 2 – Try renaming the inetsrv folder

The next option you can check out to resolve the problem is to rename the “inetsrv” folder. If you have uninstalled IIS from the Windows Features, this should remove the folders as well, however, it didn’t remove the folder then you have to delete the folders that are related to the IIS by following these steps:
  • First, you have to boot into the Advanced Recovery Mode and from there, open Command Prompt.
  • Next, execute this command to rename the folder from this location, C:Windowssystem32inetsrv: rename C:/Windows/system32/inetsrv/inetsrv.old
  • Once done, boot into your computer normally and try to upgrade Windows 10 again, and check if the problem is fixed or not.

Option 3 – Try to move the folders related to IIS to a different drive

  • Tap the Win + R keys to launch the Run utility and type “services.msc” in the field and hit Enter to open the Windows Services Manager.
  • Next, look for the Application Host Helper Service from the list of services and stop it.
  • Once done, take ownership of the “WinSxS” folder and then move the *windows-iis*.*” folders to another drive. You can just search using the “*windows-iis*.*” keyword in the Start Search.
  • Next, tap the Ctrl + X keys and paste the folders to another drive.
  • After that, start the update process for Windows 10 again.
Read More
Android malware spies while posing as a Update
New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:
  • Stealing instant messenger messages;
  • Stealing instant messenger database files (if the root is available);
  • Inspecting the default browser's bookmarks and searches;
  • Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
  • Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
  • Inspecting the clipboard data;
  • Inspecting the content of the notifications;
  • Recording audio;
  • Recording phone calls;
  • Periodically take pictures (either through the front or back cameras);
  • Listing of the installed applications;
  • Stealing images and videos;
  • Monitoring the GPS location;
  • Stealing SMS messages;
  • Stealing phone contacts;
  • Stealing call logs;
  • Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.
Read More
Fix Unsupported video type/invalid file path
The MP4 MIME-type is a video type that is mainly configured in IIS or Internet Information console. It is the one that instructs a web browser to use the default video application when running MP4 files from websites. MIME which stands for Multipurpose Internet Mail Extensions which offers a way to identify files on the Internet-based on their format and nature. For example, when a content-type header value like MP4 is defined in an HTTP response, the browser can be configured to open the file with the proper plugin. However, there are some servers that don’t have an associated MIME type to support MP4 files and so they fail to play these files. In such cases, you will encounter the “Unsupported video type or invalid file path” error, especially when you use the Internet Explorer browser in Windows 10. To fix this problem, you may have to configure the MP4 MIME type in IIS but you might find that IIS is not enabled in Windows 10 which is why you need to turn it on or enable it first. For more details, refer to the following instructions below.

Step 1 – Enable IIS:

  • Open Control Panel and go to Programs > Programs and Features.
  • From there, select “Turn Windows features on or off” to mark its checkbox.
  • After that, select “Web Management Tools” and expand its menu and look for “IIS Management Console”.
  • Click the OK button and then wait for a couple of seconds to allow Windows to successfully apply the changes made.

Step 2 – Configure the MP4 MIME type in IIS:

  • Go to Control Panel and from there, access Administrative Tools.
  • Next, click “Internet Information Services Manager” from the list of given options.
  • Once confirmed, it will open the IIS console where you have to click the name of your IIS Server located on the left panel. This will enable several options in the central details section.
  • Now double click on the icon with the label “MIME Types”.
  • After that, you should see an “Add” link option on the right panel. Click on the link to open a configuration dialog box.
  • Then type “.mp4” in the File Name Extension field and enter “video/mp4” in the textbox of the MIME Type.
  • Click the OK button to save the changes made. This should fix the “Unsupported video type or invalid file path” error on your Windows 10 computer.

Step 3 – Reset your browsers:

Mozilla Firefox

  • Open Firefox and click the icon that looks like three stacked lines located at the top-right section of the browser.
  • Next, select the question mark icon from the drop-down menu.
  • Then select “Troubleshooting information” from the slide-out menu.
  • After that, click on the “Reset Firefox” button located at the top-right section of the newly opened web page.
  • Now select “Reset Firefox” in the confirmation pop-up window that appears.

Google Chrome

  • Open Google Chrome, then tap the Alt + F keys.
  • After that, click on Settings.
  • Next, scroll down until you see the Advanced option, once you see it, click on it.
  • After clicking the Advanced option, go to the “Restore and clean up option and click on the “Restore settings to their original defaults” option to reset Google Chrome.
  • Now restart Google Chrome.

Internet Explorer

  • Launch Internet Explorer.
  • Next, click the wrench icon for Settings.
  • Then click Internet Options.
  • After that, go to the Advanced tab.
  • From there, click the Reset button. This will reset Internet Explorer’s settings to their default condition.
  • Now click OK to save the changes made.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status