User account control notifications in Windows

Valve has released a big update to its online store and distribution platform Steam. Among typical bugs fixing and making the user experience a little more fluid, we have received some major updates as well. Please take note that you need to update Steam itself to the latest version in order to get new features.

Storage management Page update

The storage management page has received a complete redesign and UX overhaul and it is now much easier to manage your game libraries and create new ones. The page itself looks and feels a little console more like but thanks to that it offers a much easier and clearer look and feel. Another thing with the Steam store management page is the ability to move installation files from one location to another. Let’s say that you have two or more hard disk drivers in your machine and that you have SSD that you use for running stuff since it is fast and larger and slower one for storage. Now you can easily and quickly move one installation from one to another in order to take advantage of your faster SSD for quicker LOAD game times without making a new installation.

Steam Download page improvements

The download page has also received some love from Valve by enabling us to now see the installation progress. So far on the download page of Steam, you would only get download progress but it has been updated to show installation progress after download as well now making it more straightforward and giving you a general idea of how much more time there is to wait in order to start gaming. Also, you can now drag and drop items in the download bracket to reorder download orders or place them as active downloads to start downloading right away.

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

There is one service in the Windows operating system that is responsible for managing all the print jobs as well as handles the interaction with the printer. This service is known as the Print Spooler service. However, if it stops running, then you won’t be able to print anything on your computer. In such a case, you can try to restart the Print Spooler service, and to do that, you have to open the Windows Services Manager and look for the Print Spooler Service. Once you found it, right-click on it and select Restart. If it isn’t running, select Start and if the Service starts working again, then good but if not and you got an error message instead that says, “Windows could not start the Print Spooler service on Local Computer, Error 1068, The dependency service or group failed to start”, then read on as this post will give you a couple of suggestions you can try to resolve the issue. The reason why you could not start the service is most likely because the Print Spooler service is dependent on other services which might not be properly running. If the following services are not running then it’s no wonder why you’re getting the error.

• HTTP Service
• Remote Procedure Control (RPC) Service

You might not see the RPC service which means that the Print Spooler Service does not recognize its dependency on the RPC service. In such a case, you have to manually configure the dependency by following the options given below.

Option 1 – Try configuring the dependency via CMD

The first thing you have to do is to configure the dependency using CMD. Refer to the steps below to do so:

• Open an elevated Command Prompt.
• Then type in “sc config spooler depend= RPCSS” and hit Enter.
• After the command has been executed, restart your computer and then check if it fixed the problem. If not, proceed to the next given option below.

Option 2 – Fix dependency via the Registry Editor

You can also resolve dependency using the Registry Editor. How? Refer to these steps:

• Tap the Win + R keys to open the Run dialog box.
• Then type “Regedit” in the field and hit Enter to open the Registry Editor.
• After that, navigate to this key: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSpooler
• Next, right-click on the “DependOnService” entry located on the right pane and select Modify.
• Now change its value data to “RPCSS” and click OK to save the changes made and then exit the Registry Editor.
• Reboot your computer and see if the issue is resolved.

Option 3 – Try running the Printer Troubleshooter

Another option you can check out is the Printer Troubleshooter. This built-in troubleshooter in Windows 10 can help you fix most print issues. It checks if you have the latest printer drivers and then tries to fix and update them automatically. Aside from that, it also checks if you have connectivity issues or if the Print Spooler and the required Services are running fine. To run it, follow the steps below.

• Tap the Win + R keys to open the Run dialog box.
• Next, type “exe /id PrinterDiagnostic” in the field and click OK or hit Enter to open the Printer Troubleshooter.
• Then click the Next button and follow the next on-screen instructions to fix the issue with the printer.

A lot of programs in Windows utilize the helper processes to ensure that they can get the job done as early as possible. And one of the programs that use these processes is Microsoft Edge. This built-in browser uses a process called the Edge Content process. The moment you start your computer, these system processes are loaded which makes the Edge browser load faster. To be specific, these are the three processes that are related to Microsoft Edge:

• MicrosoftEdge.exe
• MicrosoftEdgeCP.exe
• MicrosoftEdgeSH.exe

The process that ends with the “CP.exe” is the content process in Edge. However, when this process stopped working, this can affect the Edge browser. In such cases, when you check the Reliability Monitor, you will see that the state of the “Microsoft Edge Content Process” is “Stopped working” which keeps on appearing. To resolve this issue, you can try to clear the browsing data of Microsoft Edge or repair or reset it. You can also try re-registering Edge via Windows PowerShell as well as check your security programs that might be causing interference with the process.

Option 1 – Clear the browsing data of Microsoft Edge

• Open Microsoft Edge.
• Then click on the three horizontal dots to open the menu.
• From there, click on Settings. And under Settings, click the “Choose what to clear” button under the Clear browsing data section.
• Next, check all the checkboxes and then click the Clear button to clear the browsing data in the Edge browser.
• Restart Edge.

Option 2 – Try to reset, repair or reinstall Edge via Settings

You can reset, repair or reinstall the Edge browser through Settings. If none of it helped, you can try the following:

• Open File Explorer and then go to this path – C:/Users/YourUsername/AppData/Local/Packages

Note: Before you type in the path in the Address bar, make sure that you put your user account name in place with the “YourUsername”.

• Tap Enter to proceed.
• Next, look for the folder named “MicrosoftEdge_8wekyb3d8bbwe” then right-click on it.
• Click on Properties and uncheck the option “Read-only” under the General tab in the Properties window.
• Click on Apply and then OK to save the changes made.
• After that, look for the MicrosoftEdge_8wekyb3d8bbwe folder again and delete it. And if a prompt stating “Folder Access Denied” appears on your screen, just click on the Continue button to proceed – doing so will delete most of the content inside the folder except for the folder named “AC”.
• Restart your computer

Option 3 – Re-register Edge via Windows PowerShell

• In the Start Menu, search “Windows PowerShell”.
• Right-click on Windows PowerShell from the search results and select the “Run as administrator” option.
• Type in this command in the PowerShell windows and tap Enter – Cd C:/Users/YourUsername
• After that, type in this command and tap Enter – Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)AppXManifest.xml" -Verbose}
• Restart your PC.

Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)AppXManifest.xml” -Verbose}

Option 4 – Try to check your security program

It is possible that a security program installed in your computer is the one that’s causing the problem which is why you have to check it. According to security experts, there are some security programs that could be detecting the Edge’s content process as suspicious, blocking or terminating it as a result. Thus, you need to modify your security program’s settings to fix the problem.

When we initiate the copy or move files command we get a dialog that shows us the progress of the current operation, under that bar we can click on the little arrow to expand the bar into so-called more details view where we get more information like which file is being copied, more detailed graph, etc. Windows will remember the last option we had and next time when we start the same process it will open the last view. But what if we want to only have one view always open as default, even if we change it? Let's say that we always want to have a detailed view opened always as our default even if we switch to a minimal one? Well with some tweaks in the registry of Windows we can. Note that this guide will require changing things in the registry of Windows itself, it is always smart and recommended to make a safe backup of your registry, just in case.

FOR ALWAYS SHOW MORE DETAILS FOLLOW THIS GUIDE:

open notepad and paste the following code inside: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager] "EnthusiastMode"=dword:00000001 Go to File > Save as... and once the file save dialog opens choose at the bottom all files under file type. Save the file with extension .REG naming it whatever you want. Right-click on file and choose Merge, confirm with YES and you are done, now each time when you start copy or move operation details view will be open.

FOR ALWAYS SHOW FEWER DETAILS FOLLOW THIS GUIDE:

open notepad and paste the following code inside: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager] "EnthusiastMode"=dword:00000000 Go to File > Save as... and once the file save dialog opens choose at the bottom all files under file type. Save the file with extension .REG naming it whatever you want. Right-click on file and choose Merge, confirm with YES and you are done, now each time when you start copy or move operation minimal details view will be open.

As you know, Windows allows you to share files between systems that are on the same network even though they are not connected physically. All you have to do is to make sure that the folder administrator allows access to the intended use and that your computer should be connected to the internet. Once you meet these conditions, you can share files between systems. However, recently a number of users reported that despite fulfilling these conditions, they end up getting errors instead when they try to access the shared drive. The error states:

“Error code: 0x80070035. The network path was not found.”

One of the common causes of this error is the antivirus program or the Firewall installed on your computer. It could also be that the drive is not shared in the first place or there are some issues with your network drivers. Whichever the case is, here are some potential fixes you need to check out to fix the Error code: 0x80070035.

Option 1 – Try to temporarily disable anti-virus and Windows Defender Firewall

As mentioned, the error could be due to the antivirus program or the Windows Defender Firewall installed on your computer. Thus, disabling them or any security software installed in your computer is always a good idea you can try when you’re not able to access the shared drive on your computer. There are times when you encounter problems like Error code: 0x80070035 due to interference of antivirus or security programs. Thus, you have to disable both your antivirus program and Windows Defender Firewall for the meantime and check if it fixes the error or not.

Option 2 – Check if the drive is shared

Before you further troubleshoot the problem, make sure that the drive you are trying to access is shared first. To do so, follow these steps:

• Right-click on the folder and select Properties.
• Go to the Sharing tab and check the status of the Network File and Folder Sharing.
• And if the status is “Not Shared”, you need to select Share.
• Next, select the intended Network User for sharing the file and choose the permission level for the user.
• After that, click on the Apply and OK buttons to save the changes made. You or the intended user should now be able to access the shared folder or file.

Option 3 – Try to ping the IP address of the targeted computer

Even though the shared folder or file is shared correctly, it is possible that the network channel is not connected properly which is why you have to test it by pinging the IP address of the targeted computer from the primary computer.

• Tap the Win + R keys to launch the Run dialog box.
• Type “cmd” in the field and tap Enter to open Command Prompt.
• Next, type the “ipconfig/all” command and tap Enter to execute it. This will populate various details.
• From the given details, take note of the IPv4 address.
• Afterward, open Command Prompt on the primary computer and then type the “ping <IPv4 address of the target computer>” command and hit Enter.
• Now check if you get 4 confirmation replies or not. If not, you can try to access the Network Adapter Troubleshooter.

To run the Network Troubleshooter, refer to these steps:

• Open the Search bar on your computer and type in “troubleshoot” to open the Troubleshoot settings.
• Next, scroll down and select the “Network Adapter” option from the right pane.
• Then click on the Run Troubleshooter” button.
• After that, your computer will check for any possible errors and will pinpoint the root cause of the problem if possible.
• Restart your computer.

Option 4 – Verify if Network Discovery is enabled

All you have to do is go to Start > Settings > Network & Internet and from there, click on the “Change connection properties” option and shift the radio button for Network profile to Private. After that, check if folder sharing is now working.

Option 5 – Try to modify the Network Security settings

There are times when the Network Security settings interfere with the folder or file sharing process. And if that’s the case, you can modify it to resolve the problem. How? Refer to these steps:

• Tap the Win + R keys to open the Run dialog box.
• Then type “secpol.msc” in the field and tap Enter to open the Local Security Policy manager window.
• After that, go to Local Policies > Security Options located on the left pane.
• Next, double click on Network security: LAN Manager authentication level in the right pane to open its Properties.
• And then select the “Send LM & NTLM-use NTLMv2 session security if negotiated” option from the drop-down menu.
• Now click on Apply and OK buttons to save the changes made.
• Reboot your computer.

Option 6 – Try to enable NetBIOS over TCP/IP

• Tap the Win + R keys to open the Run dialog box.
• Then type “ncpa.cpl” in the field and tap Enter to open the Network Connections window.
• After that, right-click on your network and select Properties.
• Next, double click on Internet Protocol Version 4 and click on the Advanced button.
• From there, go to the WINS tab and shift the radio button to Enable NetBIOS over TCP/IP.
• Now click OK to save the changes made and then restart your computer.

Option 7 – Update the Network Adapter drivers

You might also want to update the Network Adapter drivers by following these steps:

• Tap the Win + R keys to launch the Run window and then type in the “MSC” command and hit Enter to open the Device Manager window.
• Under the Device Manager, you will see a list of drivers. From there, look for the Network Adapters and expand it.
• Then right-click on each one of the Network drivers and update them all.
• Restart your PC and see if it helped in fixing the BSOD error.

Note: If updating the network drivers didn’t help in fixing Error code: 0x80070035, you can also try to uninstall the very same drivers and restart your Windows 10 PC. After that, the system itself will reinstall the drivers you just uninstalled. Alternatively, you can also download and install the drivers from the manufacturer’s website directly. To reinstall the network adapter driver, refer to these steps:

• Open the Devices Manager from the Win X Menu.
• Then locate the device drivers and right-click on them to open the Properties.
• After that, switch to the Driver tab and click on the Uninstall Device button.
• Follow the screen option to completely uninstall it.
• Finally, restart your computer. It will just reinstall the device drivers automatically.

HWiNFO (Hardware Information) is a professional hardware information and diagnostic tool supporting the latest components, industry technologies, and standards. It's targeted to recognize and extract the most possible amount of information about computer hardware which makes it suitable for users searching for driver updates, computer manufactures, system integrators, and technical experts too. Retrieved information is presented in a logical and easily understandable form and can be exported into various types of reports. System health monitoring and basic benchmarking available too. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.

Today most people have Facebook accounts where they keep in touch with friends and family. But large Facebook network of users is also very interesting to another party as well, hackers. There are many ways hackers can steal your data via direct hacks, trickery, and social engineering in order to get your credentials, emails, and many other things using them to wreak further havoc. Once a hacker has needed information it is very difficult to minimize impact and all of your information could be compromised from a list of friends to credit card numbers. Keep on reading to learn how can you protect yourself against these attacks and learn about common practices that hackers use in order to steal your data.

Stealing Facebook data via email

A couple of years ago there was a lot of talk about not opening suspicious emails. Well, it still holds today. The difference is that today’s fake emails have become very difficult to differentiate from official ones since hackers put the effort into creating them copying fonts and layout, making them identical to original ones. So if emails look and feel like original ones how do you know if it is fake? Very simple, you do not click anything in it. If Facebook or for that matter any company wants to contact you they will do via their platform. Clicking inside a hacker's email will lead you probably to a fake Facebook website replica where you will have to type in your username and password providing an attacker with your login credentials, etc. If you receive this kind of mail where there are threats about terminating an account, missing payments, etc. it is always the best thing to go directly to Facebook and see if you have any kind of notifications there. Do not trust any emails that ask for account information, request money, or threaten to suspend your account.

Phishing attacks

As stated previously if you click on the link inside fake mail it will probably lead you to a website replica of the original. Although hackers can pretty much copy all things from an original website like layout, fonts, colors, etc. There is one thing that he cannot, web address. Take a good look into your browser address bar to see if there is a typo or anything strange in the address of a website. Also, make sure to check for the secure icon in the web address before signing in.

Fake Facebook buttons

If by any chance and for whatever reason, you end up on a fake Facebook site be vary careful about like and other buttons since buttons themselves behave and act like links inside your browser. IF when you click on like you get a prompt to sign in, it is almost 100% that you ended up on a phishing fake website.

Password brute force attack

Having complex and long passwords is a must. If your Facebook password is 12345 there is a very high chance that if a hacker wants he can easily guess it via trying out the most used and simple passwords via simple guessing. To avoid being hacked just for having poor passwords try to think of something longer, combine letters and numerical characters, place special characters inside it or just simply as the best solution use a password manager and create passwords with it.

Password grab outside Facebook

If you use the same password for multiple accounts which is a big no-no and you should not do it then hackers can use passwords from other services and login into your Facebook in order to steal data. Avoid these situations by having different passwords for different accounts or use a password manager to keep everything in order.

Hacking via key logger

Some time ago we have made an article which explained in detail everything you need to know about key loggers here: https://errortools.com/windows/how-to-know-if-you-have-keylogger-in-windows/ Anyway, this is a more advanced hacking technique in order for hackers to steal your data and it includes placing malicious applications into your system that records your keystrokes and sends them directly to hackers. Since this is an application best protection against this type of attack is to have a security suite installed and active on your PC or device you use to go to Facebook.

Connecting and surfing on an unsecured network

Using no password and unsecured WI FI or any other type of network is risky at least. You can have all protection installed on your device and have a strong password but hackers also logged in to the same network can track all outgoing stuff going through mentioned network leaving you again exposed to attacks. It is better to connect to your mobile operator network than on free WI FI, at least there is some level of security in your operator network while free WI FI is completely unsecured. Getting a virtual private network or VPN is also one thing you could think about for protection since almost all VPN services will encrypt your data thus providing you with a security layer even on unsecured Wi-FI.

Conclusion

Hacking and stealing have come a long way from their infant stages and in today’s world when we use a lot of gadgets and have plenty of online presence taking some steps for security is a must. I hope that you have found anything here informational and helpful so you can avoid getting your data compromised.

The latest security vulnerability was discovered inside both Windows 10 and Windows 11 letting any user access admin privileges inside the operating system. This can, of course, be used by a potential attacker to get full control of the system. The problem lies in Microsoft's security rules assigned to the Windows Registry and the Security Account Manager. Both for some reason have reduced restrictions allowing any local user to fully access the files without administrator privileges. The problem is even more amplified if we think about Security Account Manager which includes all account data including the passwords of all users using the same PC. This can provide a potential attacker with all information and let them log on into the administrator account for full control. Microsoft is aware of the matter and is tracking it with code CVE-2021-36934, and includes a complete workaround for the issue, which includes restricting access to  %windir%\system32\config and deleting any restore points or Shadow volumes that were created before that point until the hole is plugged with an official security patch.

One of the most useful utilities on a Windows 10 computer is the Windows File Explorer. It is undeniably one of the File Managers out there full of features on all the platforms. However, it is not without its issues and one of the most common ones most users encounter is when you are trying to open a folder or a location on File Explorer and it displays a message saying, “Working on it…” as it tries to load the content of that location or folder. This kind of issue mainly occurs to computers that run on an HDD although that doesn’t mean that it can’t happen to other computers that run an SDD. And so if the File Explorer on your Windows 10 computer keeps getting stuck on the “Working on it…” message along with a green animation bar moving very slowly while loading the contents of the folder, then it’s best if you follow the options given below to resolve this problem.

Option 1 – Try deleting the contents of the Automatic Destinations folder

• Tap the Win + R keys on your keyboard to open the Run utility.
• And then type “%AppData%MicrosoftWindowsRecentAutomaticDestinations” and hit Enter to open this location.
• From there, select all the files and tap the Shift + Delete key combination.
• After that, you will get a prompt that will ask you if you want to delete all the files permanently, just click on Yes. This will delete all the Quick Access cache.
• Now check if you can now open a folder or a location without the “Working on it…” message.

Option 2 – Try to rebuild the Search Index

• First, open the Indexing Options using the Search bar.
• Next, click on the appropriate listing, e.g. Users folder.
• After that, click on the Advanced button. This will open a mini-sized window and from there, go to the Index Settings tab.
• Then click on the “Rebuild” option under the Troubleshooting section.
• Now click on OK after the rebuilding is completed. This should rebuild the search index for all the files and thus, fix the File Explorer stuck on the “Working on it…” message.

Option 3 – Try to optimize the folder for General Items

You might also want to try optimizing the folder for General Items as it can help the File Explorer to load the contents faster.

• Just right click on the folder that takes time to load the contents in it and is showing the “Working on it…” message.
• After that, click on Properties to open the Properties mini window.
• From there, go to the Customize tab and click on the drop-down menu to “Optimize this folder for” under the “What kind of folder do you want?” section and then select General Items.
• Then check the checkbox with a label that says, “Also apply this template to all subfolders” and click on the OK button to save the changes.
• Restart File Explorer and check if the problem is now fixed or not.

Option 4 – Try performing a System Restore

Running System Restore can also help you resolve whatever issue that’s causing the “Working on it…” message. You can do this option either by booting into Safe Mode or in System Restore. If you are already in the Advanced Startup Options, just directly select System Restore and proceed with the next steps. And if you have just booted your PC into Safe Mode, refer to the steps below.

• Tap the Win + R keys to open the Run dialog box.
• After that, type in “sysdm.cpl” in the field and tap Enter.
• Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
• After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.