How to Resolve Internal Error 2753

Error Code 0x80070057 – What is it?

Error code 0x80070057 occurs when Windows users are having problems installing updates on their machines. The error code may result due to issues affecting Windows Update, for instance, problems with system files or settings that can be accessed or modified using the registry in Windows. Error code 0x80070057 affects multiple versions of the Windows operating system including Windows 10. Common symptoms manifested when this error code and other update error codes occur include the following:

• Inability to complete the installation of updates via Windows Update
• Presence of error code message box

Error Causes

Update error codes like error code 0x80070057 occur when there are issues related to system files, programs or malicious software is present on one’s machine. To combat these issues, users may need to implement manual repair procedures, depending on the specific error code present on their device.

Solution

Further Information and Manual Repair

Windows users can fix error code 0x80070057 by manually repairing or deleting subkeys and values within the Windows registry. This enables Windows Update to function as the proper modification of settings and other information present in the registry can fix problems associated with certain error codes.

The manual repair procedures also enable users to address specific problems on the devices that may not be fixed through the use of other methods.

Method One: Back-Up Registry in Windows

The Windows registry contains information regarding applications installed on the version of Windows you use on your device. This information as well as settings related to hardware are all accessible to users and can be useful when combating problems like error code 0x80070057.

However, users will need to be very careful when making modifications within the registry in Windows. This is due to the fact that errors made while accessing the registry can lead to serious issues on your PC. Backing up your registry before you modify it is crucial since it will provide protection against any problems that may arise if you make an error. This is the first step in resolving error code 0x80070057. Follow the steps below to back up your registry properly.

• Step one: Type regedit.exe in the search box near the Start button.
• Step two: Type the appropriate password or provide confirmation if you are prompted to do so
• Step three:  Locate Registry Editor
• Step four: Select registry key or subkey that you want to back up
• Step five: Click File > Export
• Step six:  In the Export Registry File dialog box, choose a location where you will save the backup copy
• Step seven: Name the backup file then select Save.

In the case of fixing error code 0x80070057, the registry file or subkey you will need to back up relates to this: HKEY_LOCAL_MACHINE. This contains configuration details or information related to your machine regardless of the user. Also note that the registry, once you have created a backup file, will be protected, thus enabling you to move to the manual method mentioned below.

Method Two: Make Changes to the Windows Registry

The execution of modifications to the registry can be a complex procedure, especially if you are an average Windows 10 user who lacks technical knowledge. Thankfully, even non-technical users can access the solutions they need by simply following the instructions provided in this article.

You may also contact a Windows repair technician as well, in case you have trouble implementing the steps mentioned for modifying your Windows registry or if other problems arise while you are proceeding with these instructions.

Step one: Access the Windows Registry Editor by typing regedit.exe in the search box near the Start button.

Step two: Type the appropriate password or provide confirmation if you are prompted to do so

Step three:  Locate Registry Editor

Step four: Enter the following:

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsUpdateUX] "IsConvergedUpdateStackEnabled"=dword:00000000

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsUpdateUXSettings] "UxOption"=dword:00000000

After making these modifications in the Windows registry, restart your machine. You can then check Windows Update to see if the problem has been resolved. If the modifications to the registry have proven successful, you will no longer see the error code 0x80070057 message box. You will also be able to complete all updates via Windows Update.

Method Three: Download an Automated Tool

If you wish to always have at your disposal a utility tool to fix these Windows 8 and other related issues when they do arise, download and install a powerful automated tool.

As you know, Microsoft’s consumer cloud storage platform is none other than OneDrive. It is where users can save any of their files albeit it’s mostly used to store common files like documents and photos. However, there are times when you might encounter some problems when saving these files. Recently, some users reported that they had problems saving Word documents to OneDrive and if you experience the same issue, then you’ve come to the right place as this post will guide you on how to resolve it. According to users who encountered the problem, when they try to save Word documents on OneDrive, an error message appears instead stating, “This is not a valid file name”. This kind of error only occurs when the file is opened from within OneDrive for saving in a different folder. In other words, if the file is saved in the same folder, the error won’t pop up but if it is saved in a separate folder, that’s when the error appears. Worry not though for fixing this error is not complicated and won’t take too long. It seems that this error is due to the 259-character limitation when creating and saving files as far as the Office products are concerned. To resolve it, there are several workarounds you can check out. Before you proceed with these workarounds, make sure that you have a stable internet connection.

Option 1 – Try renaming the file with a shorter name

The first thing you can do to fix the problem is to rename the file with a shorter name. Just right-click on the file and select the Rename option from the menu and then type in the new name and click OK or tap Enter to rename the file.

Option 2 – Try renaming the folders where the file is located

Like what you did in the first given option, all it takes is a right-click but this time on a folder. Rename the folder with a different name and save the changes made and then check if you can now save the Word document on OneDrive.

Option 3 – Try moving the file to a folder with a shorter path

If the first two options didn’t work, you can try moving the file to a folder with a shorter path. Note that it is not the same as doing it locally on a Windows 10 computer so you have to right-click on the file and select the “Move to” option. After that, locate the folder where you want to move the file and select it and then click on the Move button to complete the task.

Option 4 – Try making some changes in the document

You could also try to make some modifications to the document. Once you’ve done that, click the File tab and select the Save As option and then go to the folder where you want to save the file and tap enter.

Installing a Windows 10 upgrade is definitely not an easy task since the process is not always smooth sailing and you could encounter some errors when doing so. This isn’t unusual since there are various software configurations and hardware configurations as well as services it depends on in order to properly work. So if any of them malfunctions or becomes corrupted, it will affect the process which will result in errors like the error code 0x80300002. When you encounter this kind of Windows Update error, you will see the following error message on your screen:

“We couldn’t install Windows in the location you choose. Please check your media drive. Here’s more info about what happened: 0x80300002”

You can encounter this kind of error if there is corruption in the partition table of the drive where the installation is in progress. In addition, corruption on the Media device could also cause this problem. So if you encounter this error when running Windows Setup, read on as this post will guide you in fixing it. There are several ways to resolve this issue. The first thing you can do is to verify the compatibility between the BIOS and the installation media. You could also try recreating all the partitions as well as recreating the bootable USB drive. For more detailed information, follow the given options below.

Option 1 – Check if the BIOS is compatible with the installation media

The first thing you can do to fix the error is to check if there are any compatibility issues between the BIOS and the installation media you’re using. This is actually one of the most likely reasons why you’re getting the error since this is a complicated point for the Windows installation process. If the installation media is based on GPT, then your BIOS must be based on UEFI. So if you have your bootable media with the MBR partitioning, you need to set your BIOS to Legacy.

• In the Windows Search box, type “command prompt” and from the search results that appear, right-click on Command Prompt and select the “Run as administrator” option.
• After that, execute this command: exe /convert /allowfullOS
• Now, wait until the process is completed since you can track its process on your screen.
• Once it’s done, go to Settings > Update & Security > Advanced Startup options and from there, click on Restart Now. This will restart your computer and give you advanced options.
• Next, select Troubleshoot > Advanced Options where you will see further options including System Restore, Startup Repair, Go back to the previous version, Command Prompt, System Image Recovery, and UEFI Firmware Settings.
• Now select the “Legacy” option. This will take you to the BIOS. Boot Mode is typically available under Boot > Boot Configuration. Once you’re there, set it to Legacy and then save the changes you’ve made. After that, your computer will restart.

Option 2 – Try recreating a new bootable drive

• Insert your USB drive into your PC.
• Tap the Win + R keys to open the Run dialog box and type in “cmd” and tap Enter to open the Command Prompt. Alternatively, you can also search for “cmd” in the Cortana search box to open Command Prompt.
• Once you’ve opened CMD, type in this command to open the DISPART utility – diskpart
• After that, you should see a new black and white window that would say, “DISKPART>”.
• Next, type in “list disk” in the command line and tap Enter to see the list of all the Storage devices as well as your hard disk connected to your PC. Here, you have to identify your disk’s number.
• Type in this command where “X” is the disk number you have identified and then tap Enter – disk X
• Type in this command and hit Enter to clear the table records and all the visible data on the drive – clean
• Now you have to recreate a new primary partition of the drive so you’ll have to type in this command and tap Enter right after – create part pri
• A new primary partition has been created so you have to select it by typing this command and tapping Enter – select part 1
• Now you have to format it to make it visible to normal users by typing – format fs=ntfs quick

Note: If your platform supports the Unified Extensible Firmware Interface or UEFI, replace the “NTFS” with “FAT32” in the command on Step 10.

• After that, type in this command and tap Enter after – active
• Finally, type this command and hit Enter to exit the utility – exit
• After you prepare the image for the operating system, save it to the root of your USB Storage device.

Option 3 – Try to recreate all the partitions

If none of the first two options given above worked, then you can try to recreate all the partitions instead. All you have to do is restart the Windows installation process and wait until you get to the part that says, “Where do you want to install Windows?”. From there, you will see options like delete, format, extend, create new partitions, and many more. Now you have to select the Delete all the partitions options and then use the “New” button to create new partitions. Just make sure that you have one primary partition at least where you can install Windows 10. After that, continue the installation of Windows on the new partition. Keep in mind that when you create a new partition, it also recreates the partition table configuration which means that the chances of getting an error are very unlikely.

The microphone has become from exclusive niche hardware to everyday requirements. In today's world when we live in a pandemic most of the work has shifted from office to home where people need working computers with microphones, working microphones. So what do we do when the microphone stops working? Keep reading on to find out and hopefully, we will fix this as fast as possible.

Check Microphone Privacy Settings

In 2019, Microsoft introduced new privacy features to Windows that give you more granular control over which apps are accessing your microphone. The side effect of this is that certain apps may be blocked from using your microphone without you even knowing. To find out if this is the issue, go to Settings > Privacy > Microphone. Click Change and make sure the slider is set to On. This will broadly mean that the mic is now enabled on your PC. Next, make sure the slider under Allow apps to access your microphone is set to On, then look through the list of Microsoft Store apps to make sure the apps you want to use are selected. You’re likely to be using many apps, not from the Microsoft Store, so to make sure these are enabled, scroll down even further and set the Allow desktop apps … slider to On.

Check Microphone Driver

The outdated or corrupted driver could be the issue for the microphone not working in Windows 10. To check the driver status, follow these steps:

1. In your Start menu search for Device Manager
2. In the device manager window search for sound and expand it.
3. Once expanded, you should see your audio drivers. Note that the names of these will vary depending on the manufacturer.
4. On Audio, right-click, and select properties. On the General tab, check to see if the device is working properly.
5. If it is not working properly, click on the driver tab and select the update option.
6. Repeat for the other audio drivers.
7. Restart the computer.

Check the Sounds setting

1. In the taskbar, right-click on the speaker icon at the far-right corner and select the sound option.
2. On the Recording tab, click on the microphone and select the Properties option.
3. Select the levels tabs and increase the volume for both microphone and microphone boost.
4. Go to the Enhancement tab of the same pop-up and make sure that the immediate mode checkbox is checked.
5. Click Ok and restart the computer.

The sound troubleshooter

1. Right-click on the sound icon at the far-right corner of the taskbar and select troubleshoot sound problems.
2. The computer will detect any fault that exists with your audio and recommend fixes for you. You just need to read through the prompts and click the options that you think will work for you.

Try microphone on another computer

If previous steps have not produced results, try the microphone on another computer, if it is not working there then it is a hardware malfunction

Update and Shutdown/Restart is not working. As you have probably noticed, every time a new update is released and is downloaded on your Windows 10 computer, the operating system replaces the Restart and Shut down button with “Update and Restart” as well as “Update and Shut down”. This is most likely done so that you won’t miss the update. However, some users noticed that there are times when these buttons still continue to display the same message even if they’ve already performed the required operations such as shutting down or restarting their PCs. Cases like this happen when an update wasn’t installed properly or has failed which is why your computer keeps on prompting you to Update and Shutdown every time. To fix this dilemma, follow the options laid out below.

Option 1 – Try restarting the File Explorer

Restarting the File Explorer can definitely help you fix lots of issues especially when there is some issue with the user interface including this one.

• On the right side of the Taskbar, right-click on any open spot.
• Then click on Task Manager.
• Next, scroll down until you see Windows Explorer.
• After that, right-click on it and select Restart.
• If you are able to kill its process, you have to tap the Win + R keys to open the Run dialog box and type “explorer.exe” in the field, and hit Enter to launch the Windows Explorer.

Option 2 – Try running the Windows Update Troubleshooter

As you know, Windows 10 has various auto-repair built-in tools to help users fix small issues which used to get fixed manually. And in this case, you will need the Windows Update Troubleshooter to fix the issue.

• Go to Settings and click on Update and Security.
• From there, click Troubleshoot and click on Windows Update and then click the “Run the troubleshooter” option.
• After that, it will try to detect and automatically fix common issues in the Windows Updates which can be resolved by Windows itself. Note that the process may take several minutes before it completes so you need to wait until it’s done. Once it’s done, in case you have some pending update that wasn’t realized by the system early on, it will apply the fix right away and restart the Windows Update service.

Option 3 – Try setting the Power button to Shut down

In case the first two options didn’t work out, you can try changing what the power button does. To do that, refer to these steps:

• Go to Control Panel > Power Options.
• From there, select the “Choose what the power buttons do” option from the left side.
• Then set the Power button setting the “When I press the power button” option to “Shut down”. After that, it will shut your computer down without installing the updates but obviously, this is only a temporary fix.

Option 4 – Turn off your PC instantly without updating it

• Tap the Win + R keys to open the Run dialog box.
• Type in “shutdown -s -f -t 0” in the field and hit Enter if you really want to turn off your computer without any delay.
• You could also tap the Ctrl + Alt + Del keys and select Shut down from the bottom right menu.

Just like the third option, this is also only a temporary fix.

Option 5 – Try running the Windows Module Installer

The Windows Module Installer is a built-in service in Windows 10 that allows you to fix the stuck Windows Updates in your computer. To use it, follow these steps:

• In the Cortana search box, type in “cmd” and from the search results that appear, right-click on Command Prompt and select the “Run as administrator” option from the context menu.
• Once you’ve opened Command Prompt as admin, type the SC config trustedinstaller start=auto command and tap Enter.
• After the command is executed, you will see the “[SC] ChangeServiceConfig SUCCESS” message displayed on the Command Prompt console.
• Now exit Command Prompt and then check if the buttons are now back to normal.

Option 6 – Put your PC in a Clean Boot State

• Log onto your PC as an administrator.
• Type in MSConfig in the Start Search to open the System Configuration utility.
• From there, go to the General tab and click “Selective startup”.
• Clear the “Load Startup items” checkbox and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
• Next, click the Services tab and select the “Hide All Microsoft Services” check box.
• Click Disable all.
• Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)

After putting your PC in a Clean Boot State, try creating a system restore point and see if the problem still occurs. Clean Boot troubleshooting is designed to help you isolate the problem. For you to execute a clean boot troubleshooting, you must do a couple of actions (the steps are given above) and then restart your PC after every action. You might have to disable one third-party app after the other to really isolate the issue. And once you’ve narrowed down the problem, you can either disable the third-party app that’s causing the problem or remove it. Note that you must switch your PC back into the Normal Startup mode after you’re done troubleshooting the problem. Here’s how you can do it:

• From the “Start” menu, go to System Configuration.
• After that, switch to the General tab and click the option for “Normal Startup”.
• Next, go to the Services tab and clear the checkbox for “Hide all Microsoft services”.
• Then find and click “Enable all” and if prompted, you have to confirm.
• Afterward, go to the Task Manager and enable all the Startup programs and confirm the action.
• Restart your PC when prompted.

Each time when you press WINDOWS + PrtScn key on your keyboard a screenshot is taken and saved on your Hard drive, to be more precise, it is saved in a specific folder which is in c:\Users\Your user name\Pictures\Screenshots. Now, this specific location is not anything that's bad but it is a little deep and not so user-friendly for quick access.

Luckily this default location can be changed into any folder that you like.

Changing location

First thing is to open File Explorer and then navigate to your PC. Once you go to your PC, go to Pictures, and inside right-click on the Screenshots folder. If there is no screenshots folder inside, this means that since Windows was installed no screenshots were taken with WINDOWS + PrtScn key combination. Please note that just by pressing PrtScn you will create a screenshot but you will place it inside the clipboard ready to be pasted somewhere, with WINDOWS + PrtScn you are saving the screenshot directly in a file on your hard drive.

So once you clicked on the Screenshots folder, go to the bottom and click on properties. Inside properties go to the Location tab. In the location, tab clicks on MOVE and browse to your new location where you would like screenshots to be saved. Once you select the folder for screenshots, click on the Select Folder button and confirm with OK. After this, Windows will ask you would you like to move existing screenshots into the chosen folder. Click YES or NO, depending on your preference.

After this easy setup, all of your new screenshots will be placed now inside the chosen folder.

Thank you for reading and I hope to see you tomorrow. Take care.

RocketDock is one of the most popular app launchers as it has been used excessively back in several windows versions. This was modeled based on the Mac OS X launch bar and offers an animated response when you hover the mouse over the apps gathered on the Dock. This is perched at the top of your screen, and you can easily drag your favorite app icons to have them in one place. The dock keeps all your most favorite shortcuts intact for faster and easy access. Like other apps, you can easily customize the dock with skins and other add-ons. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.

There are times when you may find it hard to kill a particular process in the Windows Task Manager and every time you try to do so, you will only get an error message saying, “Unable to terminate the process, The operation could not be completed, Access is denied”. If you are one of the users who is constantly getting this error, read on as this post will provide you with a couple of options you can try to resolve the problem. Refer to the given instructions below if you are unable to terminate a process in the Task Manager but before you proceed you need to restart your PC and then try killing the process again, if you’re still not able to do it, you need to follow the options laid out below.

Option 1 – Try using Taskkill

• Open the Command Prompt as admin from the WinX Menu.
• After opening Command Prompt, type in the following command and tap Enter to execute it:

taskkill /IM "processname" /T /F processname – it is the name of the process which you can see on the Details tab of the Windows Task Manager. /IM – it is the one that specifies the image name of the process, which follows, that is to be terminated. /T – it is the one that kills not just the main process but also the child process. /F – it is the one that terminates the process forcefully.

Option 2 – Try using the WMIC

• Open Command Prompt as admin from the WinX Menu.
• From the Command Prompt window that opens, type in the following command and hit Enter to execute it:

wmic process where name='processname.exe' delete

Note: In the given command, you need to replace “processname.exe” with the name of the particular process you want to terminate which is found in the Details tab of the Windows Task Manager.

Option 3 – Try using PowerShell

• The first thing you have to do is open an elevated PowerShell prompt.
• From there, type in the following command and hit Enter to execute it:

kill -id pid

Note: In the given command above, “pid” is the Process ID number of the process you want to terminate. And for you to identify this number, you need to open the Details tab of the Windows Task Manager once again and take note of the number against the process you want to get rid of. Alternatively, you can also run the following command in the PowerShell prompt that you’ve pulled up to get the process ID number:

Get-Process

For example, “5364” is the process ID number for the DimScreen.exe process which is the process you want to terminate. In order for you to kill this process, you need to type in this command:

kill -id 5364

If you encounter a Recovery Error code 0xc000000e, “Your PC needs to be repaired” error on your Windows 10 computer, then it means that there is some hardware failure or an incorrect drive configuration. Apart from the error, it may be accompanied by different error message such as:

• A required device is inaccessible
• The selected entry could not be loaded
• A required device isn’t connected or cannot be accessed
• The selected entry could not be loaded because the application is missing or corrupt
• The boot selection failed because a required device is inaccessible.

As mentioned, the error code 0xc000000e or STATUS_NO_SUCH_DEVICE error indicates that there is a hardware failure or an incorrect drive configuration and to fix it, you have to check your cables as well as check the drive with the diagnostic utility available from the manufacturer of the drive. And if you are using older PATA (IDE) drives, then this kind of error also indicates an incorrect master/subordinate drive configuration. There could be different causes for this error. It could be that the winload.exe file is not accessible or is corrupted or that the boot location for the operating system cannot be found. Thus, for you to boot into and access the operating system, you can try the suggestions given below.

Option 1 – Try rebuilding the Boot Configuration Data (BCD) file

• Once you get to the Welcome Screen part, click on Next.
• Afterward, click on the Repair your computer option located on the bottom-left part of the window.
• Then click on Troubleshoot.
• Next, select the Advanced Options and then Command Prompt.
• Once Command Prompt has been pulled up, the following command to rebuild BCD files.

bootrec /rebuildbcd

• Once the command line is successful in finding out a Windows installation, hit Y to let it boot from the list which will successfully rebuild BCD.
• Now type “exit” to close Command Prompt and then restart your computer to successfully apply the changes made.

Option 2 – Try to run the Automatic Repair Utility

You might also want to use Automatic Repair in fixing the error code 0xC000000E. To do so, follow the steps below.

• You can start by creating and booting from a bootable Windows 10 USB Stick.
• After that, click on Repair your computer located in the bottom left corner when you are on the initial Windows Startup screen.
• Next, click on Troubleshoot, and then on the other screen, click the Startup Repair option.
• Now select the operating system you want to repair. Once you do that, it will start to repair your operating system. Wait until the process is completed and then check if the problem’s now fixed.

Option 3 – Try checking the physical device connections

You might also want to try checking if there are other devices that are connected to your PC. This is because of the configuration of the BIOS or UEFI might be configured in a way that any external device connected to the computer has a higher boot priority compared to the hard disk.  And if it’s really the case, the externally attached disk might be the drive your computer is trying to boot into and not the hard disk. In such cases, Pen Drives, USB storage devices, CDs, DVDs, and so on, are included in this category of physical device connections.

Option 4 – Try updating the BIOS

As you know, the BIOS is a sensitive part of a computer. Even though it is a software component, the functioning of the hardware depends on it largely. Thus, you must be careful when modifying something in the BIOS. So if you don’t know much about it, it’s best if you skip on this option and try the other ones instead. However, if you are well-versed in navigating the BIOS, then follow the steps below.

• Tap the Win + R keys to open the Run dialog box.
• Next, type “msinfo32” in the field and press Enter to open System Information.
• From there, you should find a search field on the bottom where you have to search for the BIOS version and then press Enter.
• After that, you should see the developer and version of the BIOS installed on your PC.
• Go to your manufacturer’s website and then download the latest version of BIOS on your computer.
• If you are using a laptop, make sure that you keep it plugged in until you have updated the BIOS.
• Now double click on the downloaded file and install the new BIOS version on your computer.
• Now restart your computer to apply the changes made.

Option 5 – Try resetting the BIOS/UEFI configuration

You might also want to reset the BIOS configuration which will lead to arranging the boot configuration since it is intended by the manufacturer. Note that this will get rid of any blockage in the boot process.

Option 6 – Try marking your Disk as Online

Marking your Disk as Online can also help in resolving the error code 0xC000000E. To do so, follow the steps below.

• You need to first create a bootable Windows 10 Media and then boot from it.
• After that, click on Repair your computer on the first window of the Windows 10 installation setup.
• Now, choose the operating system partition from the options and click on Next.
• Then select Command Prompt from the System Recovery Options box.
• Next, type in “diskpart” and hit Enter to initiate the Diskpart utility inside the Command Prompt.
• Now type in either “list disk” or “list volume” and hit Enter. Either of these commands will help you in listing all the Disk connects or all the partitions on those disks formed. So you have to select one command depending on the list command you entered.
• Afterward, type in “select disk #” or “select volume #” and hit Enter to select the Disk or Partition you want to select.
• Now type in “online disk #” or “online volume #” and press Enter to mark the disk you selected as Online.

New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:

• Stealing instant messenger messages;
• Stealing instant messenger database files (if the root is available);
• Inspecting the default browser's bookmarks and searches;
• Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
• Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
• Inspecting the clipboard data;
• Inspecting the content of the notifications;
• Recording audio;
• Recording phone calls;
• Periodically take pictures (either through the front or back cameras);
• Listing of the installed applications;
• Stealing images and videos;
• Monitoring the GPS location;
• Stealing SMS messages;
• Stealing phone contacts;
• Stealing call logs;
• Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.