Logo

Restore, Minimize and Close are not working

Recently, a number of users reported not being able to use the Restore, Minimize and Close buttons on their Windows 10 computers. This kind of issue can be quite annoying as you won’t be able to use your computer properly, especially when you navigate between programs and windows. In such cases, the buttons on the right side of the title bar won’t respond to any inputs which could be caused by a number of factors such as different input modes, corrupted system files, and many more. If you are one of the users who are currently facing this problem, worry not for this post will guide you on what you can do to resolve it.

There are several potential fixes you can check out to fix the issue. You can try to check if Tablet Mode is enabled and if it is, you have to disable it. You could also boot your computer in a Clean Boot State to check if a third-party program is the one that’s causing the problem. In addition, you could also reinstall the program where you experience the problem or run built-in utilities like System File Checker and DISM tool.

Option 1 – Make sure that you are not in Tablet Mode

Since Windows 10 is designed to work on both desktop and mobile devices, it could be that your computer has slipped into Tablet Mode which explains why you’re not seeing the Taskbar. To check if your computer is really in Tablet Mode, follow these steps:

  • Go to the Start menu and select Settings.
  • Next, select the System setting and from the left pane select the Tablet Mode.
  • From there, make sure that the buttons next to the options given below are set to the off position:
    • Hide app icons on the taskbar in tablet mode
    • Automatically hide the taskbar in tablet mode

Option 2 – Put your computer in a Clean Boot State

As pointed out, it is possible that some third-party program or service is the one that’s behind the problem. To isolate this possibility and to identify the culprit, you have to put your computer into a Clean Boot State. To do so, follow the steps below.

  • Log onto your PC as an administrator.
  • Type in MSConfig in the Start Search to open the System Configuration utility.
  • From there, go to the General tab and click “Selective startup”.
  • Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
  • Next, click the Services tab and select the “Hide All Microsoft Services” check box.
  • Click Disable all.
  • Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
  • Once your computer is in a Clean Boot State, try to open the program where the problem occurred.

Option 3 – Try reinstalling the program

If the first two options didn’t work, then you might want to consider uninstalling the program and then install it back with its latest version. This should resolve the problem.

Option 4 – Try to run System File Checker

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files to good system files that might be the cause why the Restore, Minimize and Close buttons don’t work. To run the SFC command, follow the steps given below.

  • Type “cmd” in the Start search and then right-click on the appropriate search result.
  • Next, select “Run as administrator” to open Command Prompt with admin privileges.
  • After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

  1. Windows Resource Protection did not find any integrity violations.
  2. Windows Resource Protection found corrupt files and successfully repaired them.
  3. Windows Resource Protection found corrupt files but was unable to fix some of them.
  • Now restart your computer and see if the problem is fixed or not.

Option 5 – Run the DISM tool

You can try running the Deployment Imaging and Servicing Management or DISM tool to fix the problem. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth”.

  • Open the Command Prompt with admin privileges.
  • Then type in the following commands and make sure to hit Enter right after you type each one of them:
    • Dism /Online /Cleanup-Image /CheckHealth
    • Dism /Online /Cleanup-Image /ScanHealth
    • exe /Online /Cleanup-image /Restorehealth
  • Do not close the window if the process takes a while as it will probably take a few minutes to finish. Once it’s done, restart your computer.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

Jzip PUP Easy Removal Tutorial

jZip is a software utility published by Bandoo Media and is classified as a Potentially Unwanted Program. The software is an archive tool that used to compress and extract files in the rar, zip, and other formats. The program is typically bundled upon installation with other unwanted applications and is itself often installed in co-bundles. As of publication time, over 40 AntiViruses have flagged jZip as malicious or potentially unwanted.

It injects itself in Windows shell, providing quick access to the program by right-clicking on any file. jZip displays it's advertising in your browser, instead of the default search results, to better do this, it collects information about your browsing history and your current browsing session, so it can better target ads. This software, upon install, defines an auto-start registry key in your system, this allows the software to launch every time your computer is rebooted, no matter what Windows account you log in to, it also adds Windows Tasks, to allow it to launch by itself at random times, even when closed.

About Potentially Unwanted Applications

If you have ever downloaded software programs from the internet (shareware, freeware, etc,), odds are high you’ve unintentionally installed unwanted programs on your personal computer. Potentially Unwanted Programs (PUP), also referred to as Potentially Unwanted Applications (PUA), are applications that you never wanted in the first place and quite often come bundled with freeware software. Once installed, most of these applications can be hard to remove and become more of a nuisance rather than a necessity. The idea of PUP was actually coined to define this crapware as something other than malware. The primary reason for this is that most PUPs get into users’ computers not because they exploit security vulnerabilities, for instance, but because the users grant consent to install it – unwittingly in many instances. Nevertheless, there isn’t any doubt that PUPs are still bad news for PC users as they could be incredibly damaging to the computer in lots of ways.

What do PUPs do on your computer, precisely?

The unwanted programs after installation display a lot of annoying pop-up advertisements create fake alerts, and quite often it even pushes the end-user to buy the software. PUPs which come as browser add-ons and toolbars are widely identifiable. Not just they needlessly take up space on your computer screen, toolbars could also manipulate search results, monitor your browsing activities, decrease your internet browser’s overall performance, and slow your net connection to a crawl. They might seem innocent but PUPs tend to be spyware. The worst part of setting up a PUP is the spyware, adware, and keystroke loggers that might lurk inside. Even if the PUPs aren’t inherently malicious, these programs still do absolutely nothing good on your PC – they will take valuable system resources, slow down your computer or laptop, weaken your device’s security, and make your PC more susceptible to trojans.

Some tips on protecting yourself from unwanted software

• Read the EULA meticulously. Look for clauses that say that you have to accept advertisements and pop-ups or bundled programs from the company. • Typically, when setting up a program you will get two options, ‘Standard Installation (recommended)’ and ‘Custom Installation’. Don’t pick ‘Standard’ as unwanted programs will automatically be installed that way! • Have a solid anti-virus program such as Safebytes Anti-Malware that will protect your personal machine from PUPs. Once you install this software, the defense against viruses and PUPs is already switched on. • Avoid installing freeware software you will not utilize. Turn off or get rid of toolbars and internet browser extensions you don’t really need. • Only download programs from the original providers’ websites. Avoid download portals since they use their own download manager to bundle extra programs along with the initial download.

Can't Install Safebytes Anti-malware because of a Virus? Do This!

Malware may cause several kinds of damage to computers, networks, and data. Some malware types alter browser settings by including a proxy server or change the computer’s DNS configuration settings. In such cases, you will be unable to visit some or all of the websites, and therefore unable to download or install the required security software to clear out the infection. So what to do if malicious software keeps you from downloading or installing Safebytes Anti-Malware? Follow the instructions below to eliminate malware in alternate ways.

Make use of Safe Mode to fix the issue

In Safe Mode, you are able to modify Windows settings, un-install or install some software, and eliminate hard-to-delete viruses. In case the virus is set to load immediately when the computer starts, switching to this particular mode may well prevent it from doing so. In order to get into Safe Mode or Safe Mode with Networking, press the F8 key while the system is booting up or run MSConfig and find the “Safe Boot” options in the “Boot” tab. After you restart the PC into Safe Mode with Networking, you may download, install, and update the anti-malware program from there. After installation, run the malware scanner to remove most standard infections.

Download the security program using an alternate internet browser

Web-based viruses can be environment-specific, aiming for a particular web browser or attacking particular versions of the browser. The most effective solution to avoid this issue is to opt for an internet browser that is known for its security measures. Firefox contains built-in Phishing and Malware Protection to help keep you safe online.

Create a portable USB antivirus for eliminating viruses

Another solution is to save and run an anti-malware software tool completely from a USB drive. Adopt these measures to employ a USB drive to clean your corrupted system. 1) Download Safebytes Anti-Malware or MS Windows Defender Offline onto a clean computer. 2) Plug the Flash drive into the uninfected computer. 3) Double-click the exe file to open the installation wizard. 4) When asked, choose the location of the USB drive as the place in which you want to store the software files. Follow the activation instructions. 5) Now, plug the thumb drive into the corrupted PC. 6) Run the Safebytes Anti-malware directly from the pen drive by double-clicking the icon. 7) Run Full System Scan to detect and clean-up up all kinds of malware.

SafeBytes Anti-Malware Features

These days, anti-malware software can protect your laptop or computer from different kinds of internet threats. But how to select the right one among several malware protection application that is available in the market? Perhaps you might be aware, there are many anti-malware companies and tools for you to consider. Some of them are good, some are decent, while some will ruin your computer themselves! You must pick one that is dependable, practical, and has a good reputation for its malware source protection. On the list of recommended software programs is SafeBytes Anti-Malware. SafeBytes carries a superb track record of top-quality service, and customers seem to be happy with it. Safebytes is one of the well-established PC solutions companies, which offer this comprehensive anti-malware program. Once you’ve got installed this software program, SafeByte's state-of-the-art protection system will ensure that absolutely no viruses or malicious software can seep through your computer. SafeBytes anti-malware comes with a myriad of enhanced features which sets it aside from all others. Here are a few typical features found in this application: Active Protection: SafeBytes provides real-time active monitoring service and protection against all known computer viruses and malware. This software will constantly monitor your PC for any suspicious activity and updates itself continuously to keep current with the newest threats. Most effective AntiMalware Protection: By using a critically acclaimed malware engine, SafeBytes offers multilayered protection that is designed to catch and remove viruses and malware which are concealed deep in your computer system. Safe Browsing: SafeBytes gives an instant safety rating about the web pages you are about to check out, automatically blocking harmful sites and make sure that you’re certain of your safety while browsing the world wide web. Fast Multithreaded Scanning: Safebytes Anti-Malware, using its enhanced scanning engine, gives super-fast scanning which can promptly target any active internet threat. Minimal CPU Usage: SafeBytes is a lightweight tool. It consumes a really small amount of processing power as it works in the background which means you won’t observe any computer performance issues. 24/7 Customer Support: You will get 24/7 technical support to quickly resolve any issue with your security application.

Technical Details and Manual Removal (Advanced Users)

If you wish to manually remove Jzip without the use of an automated tool, it may be possible to do so by removing the program from the Windows Add/Remove Programs menu, or in cases of browser extensions, going to the browsers AddOn/Extension manager and removing it. You will likely also want to reset your browser. To ensure the complete removal, manually check your hard drive and registry for all of the following and remove or reset the values accordingly. Please note that this is for advanced users only and may be difficult, with incorrect file removal causing additional PC errors. In addition, some malware is capable of replicating or preventing deletion. Doing this in Safe Mode is advised.

The following files, folders, and registry entries are created or modified by Jzip

Files: File APPDATAjziptoolbaruninstallIE.dat. File APPDATAMozillaExtensions1FD91A9C-410C-4090-BBCC-55D3450EF433. File COMMONDESKTOPEmoticons for your messenger!.url. File LOCALSETTINGSTempinstallhelper.dll. File LOCALSETTINGSTempnsb2.tmp.exe. File LOCALSETTINGSTempSetupDataMngr_jZip.exe. File PROGRAMFILESMozilla Firefoxextensions1FD91A9C-410C-4090-BBCC-55D3450EF433. File PROGRAMFILESMozilla FirefoxsearchpluginsjZipWebSearch.xml. Directory APPDATAjzipband. Directory APPDATAjziptoolbar. Directory APPDATAMozillaFirefoxProfilesENV(jZip_ff_profile)extensions1e48c56f-08cd-43aa-a6ef-c1ec891551ab. Directory APPDATAMozillaFirefoxProfilesENV(jZip_ff_profile)jziptoolbar. Directory PROGRAMFILESWindows jZip ToolbarDatamngr. Directory PROGRAMFILESWindows jZip ToolbarToolBar. Registry: Key in HKEY_CLASSES_ROOT named JzipIEHelper.DNSGuard.*, plus associated values. Key in HKEY_CLASSES_ROOT named JzipIEHelper.DNSGuard, plus associated values. Key 1e48c56f-08cd-43aa-a6ef-c1ec891551ab at HKEY_CLASSES_ROOTCLSID. Key 1e48c56f-08cd-43aa-a6ef-c1ec891551ab at HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects. Key 41C4AA37-1DDD-4345-B8DC-734E4B38414D at HKEY_CLASSES_ROOTCLSID. Key 41C4AA37-1DDD-4345-B8DC-734E4B38414D at HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects. Key 99D9640D-7DD9-4AB1-946C-AD779E1EABE0 at HKEY_CLASSES_ROOTTypeLib. Key jZipMediabarTb at HKEY_LOCAL_MACHINESOFTWARE. Key jziptoolbar at HKEY_CURRENT_USERSoftware. Value 1e48c56f-08cd-43aa-a6ef-c1ec891551ab at HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar. Value <$PROGRAMFILES>Windows jZip ToolbarToolBardtUser.exe at HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList. Value <$PROGRAMFILES>Windows jZip ToolbarToolBardtUser.exe at HKEY_LOCAL_MACHINESYSTEMControlSet002ServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList. Value <$PROGRAMFILES>Windows jZip ToolbarToolBardtUser.exe at HKEY_LOCAL_MACHINESYSTEMControlSet003ServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList. Value <$PROGRAMFILES>Windows jZip ToolbarToolBardtUser.exe at HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList. Remove <$PROGRAMFILES>WINDOW~4Datamngrdatamngr.dll <$PROGRAMFILES>WINDOW~4DatamngrIEBHO.dll from registry value AppInit_DLLs at HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows.
Read More
How to Remove PUP ExpressFiles Tutorial

ExpressFiles is a program developed by Express Solutions. A number of Anti-Virus programs have flagged this program as a Potentially Unwanted Application. In many instances, it is bundled with additional programs on installation.

The program claims it offers users easy to search for various currently popular search terms. During our testing, the software never displays any search results, no matter the search words. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times. The program defines an exception rule in Windows Firewall, allowing it to connect to the internet without limitations and auto-update itself.

About Browser Hijackers

Precisely what is a PUP?

If you’ve ever downloaded a free application or shareware, chances are high that the computer can get installed with a bunch of unwanted applications. A PUA / PUP (potentially unwanted application / potentially unwanted program) is a software program that comes bundled with free software and you consent to install it on your PC. These are programs you almost certainly don’t want on your computer simply because it doesn’t give any valuable service. Despite being regarded as very detrimental, PUPs aren’t always viruses or malware One simple difference between PUP and malware is distribution. Malware is normally dropped by silent installation vectors like drive-by downloads while PUP gets installed with the consent of the computer user, who purposefully or unknowingly approves the PUP installation on its PC. Having said that, there is no doubt that PUPs remain bad news for PC users as they can be incredibly damaging to the computer in numerous ways.

Exactly how do unwanted programs look like?

Potentially Unwanted Programs appear in different forms and varieties, however, in the majority of instances, they are adware programs that exhibit irritating pop-up ads and advertisements on websites you explore. In addition, the majority of free programs these days come with some unwanted add-ons; in most cases an internet browser toolbar or browser modification like a homepage hijacker. They’ll keep track of your online routines, redirect your search results to risky websites where viruses can be downloaded and installed, hijack your home page, and slow your browser down to a crawl. Potentially Unwanted Programs occasionally act quite much like computer viruses or spyware. They might carry keyloggers, dialers, browser hijackers, and tracking components that gather system details, or tracks customer habits and relays this information to third-party firms. Even if the PUPs really aren’t basically malicious, these software programs still do absolutely nothing good on your personal computer – they will take valuable system resources, slow down your PC, weaken your computer security, and make your system more susceptible to trojans.

How do you avoid PUPs?

• Read cautiously before accepting the license agreement as it may have a clause about PUPs. • Always opt for the custom if you’re presented an option between “Custom” and “Recommended” Installations – never click Next, Next, Next blindly. • Have a top-notch antivirus program like Safebytes Anti-Malware which can protect your computer from PUPs. As soon as you install this software, protection from malware and PUPs is already switched on. • Think carefully before you download any kind of shareware or freeware. Disable or get rid of toolbars and browser extensions you don’t really need. • Only use official product websites for downloading programs. Stay away from download portals altogether as most websites compel users to download the software using their own download manager, which is often bundled up with some sort of PUPs.

What To Do If You Cannot Install Any Anti-Malware?

All malware is bad, but certain types of malicious software do a lot more damage to your computer than others. Some malware types modify browser settings by adding a proxy server or modify the PC’s DNS settings. In these instances, you will be unable to visit some or all of the websites, and therefore not able to download or install the required security software to remove the infection. If you are reading this right now, you have perhaps recognized that a malware infection is a reason for your blocked web connectivity. So how to proceed when you want to install an anti-malware application like Safebytes? Follow the instructions below to eliminate malware by alternative methods.

Install in Safe Mode

The Windows-based PC comes with a special mode called “Safe Mode” where just the bare minimum required applications and services are loaded. If the malware is set to load immediately when the computer starts, shifting to this mode may well prevent it from doing so. In order to enter into Safe Mode or Safe Mode with Networking, press the F8 key while the PC is starting up or run MSConfig and locate the “Safe Boot” options under the “Boot” tab. As soon as you restart the PC into Safe Mode with Networking, you could download, install, and update anti-malware software from there. Right after installation, run the malware scanner to get rid of standard infections.

Utilize an alternate internet browser to download antivirus software

Web-based malware could be environment-specific, targeting a specific web browser or attacking particular versions of the web browser. If you’re not able to download the anti-virus application using Internet Explorer, this means the virus is targeting IE’s vulnerabilities. Here, you need to switch to a different web browser such as Chrome or Firefox to download the Safebytes Anti-malware program.

Install and run antivirus from a Thumb drive

Here’s yet another solution which is creating a portable USB anti-virus software that can scan your computer for malware without the need for installation. Try these simple actions to clean up your infected computer using portable anti-malware. 1) Download Safebytes Anti-Malware or Microsoft Windows Defender Offline onto a clean PC. 2) Mount the pen drive on the same PC. 3) Run the setup program by double-clicking the executable file of the downloaded software, which has a .exe file extension. 4) Select the drive letter of the USB drive as the location when the wizard asks you exactly where you would like to install the anti-malware. Follow activation instructions. 5) Now, insert the thumb drive into the corrupted PC. 6) Run the Safebytes Anti-malware directly from the pen drive by double-clicking the icon. 7) Click the “Scan” button to run a full computer scan and remove viruses automatically.

Overview of SafeBytes Anti-Malware

If you are looking to download the anti-malware program for your computer, there are lots of tools in the market to consider nonetheless, you just cannot trust blindly anyone, irrespective of whether it is free or paid software. A few of them do a great job in removing threats while some will ruin your PC by themselves. You need to pick a company that develops industry-best antimalware and has achieved a reputation as trustworthy. When considering commercial tool options, most people opt for well-known brands, such as SafeBytes, and they are quite happy with it. SafeBytes anti-malware is really a powerful, very effective protection software made to help users of all levels of computer literacy in detecting and removing malicious threats out of their computer. Using its outstanding protection system, this utility will quickly detect and get rid of the majority of the security threats, which include adware, viruses, browser hijackers, ransomware, PUPs, and trojans. SafeBytes anti-malware takes computer protection to a totally new level with its advanced features. Here are a few typical features present in this software: Live Protection: SafeBytes offers complete and real-time security for your laptop or computer. It’ll regularly monitor your computer for hacker activity and also gives end-users superior firewall protection. Most Reliable AntiMalware Protection: With its enhanced and sophisticated algorithm, this malware elimination tool can find and eliminate the malware threats hiding in your PC effectively. “Fast Scan” Features: SafeBytes’s high-speed malware scanning engine minimizes scanning times and extends battery life. Simultaneously, it will effectively identify and remove infected computer files or any online threat. Web Protection: SafeBytes checks and gives a unique safety ranking to each and every website you visit and block access to webpages considered to be phishing sites, thus safeguarding you from identity theft, or known to contain malicious software. Low CPU/Memory Usage: SafeBytes is well known for its low effect on computer resources and great detection rate of diverse threats. It runs quietly and efficiently in the background so you’re free to use your PC at full power all of the time. 24/7 Premium Support: SafeBytes gives you 24/7 technical support, automatic maintenance, and upgrades for the best user experience.

Technical Details and Manual Removal (Advanced Users)

If you wish to manually remove ExpressFiles without the use of an automated tool, it may be possible to do so by removing the program from the Windows Add/Remove Programs menu, or in cases of browser extensions, going to the browsers AddOn/Extension manager and removing it. You will likely also want to reset your browser. To ensure the complete removal, manually check your hard drive and registry for all of the following and remove or reset the values accordingly. Please note that this is for advanced users only and may be difficult, with incorrect file removal causing additional PC errors. In addition, some malware is capable of replicating or preventing deletion. Doing this in Safe Mode is advised.

The following files, folders, and registry entries are created or modified by ExpressFiles

Files: %APPDATAExpressFilescurrent-cloud.html %COMMONDESKTOPExpressFiles.lnk %COMMONSTARTMENUExpressFilesExpressFiles.lnk %COMMONSTARTMENUExpressFilesUninstall.lnk %PROGRAMFILESExpressFilescurrent-cloud.de.html %PROGRAMFILESExpressFilescurrent-cloud.en.html %PROGRAMFILESExpressFilescurrent-cloud.fr.html %PROGRAMFILESExpressFilescurrent-cloud.ru.html %PROGRAMFILESExpressFilesEFupdater.exe %PROGRAMFILESExpressFilesExpressDL.exe %PROGRAMFILESExpressFilesExpressFiles.exe %PROGRAMFILESExpressFilesuninstall.exe %WINDIRTasksExpress Files Updater.job %APPDATAExpressFiles %COMMONSTARTMENUExpressFiles %PROGRAMFILESExpressFileslanguage %PROGRAMFILESExpressFiles Registry: key ExpressFiles.exe at HKEY_LOCAL_MACHINESOFTWAREConduitAppPaths. key ExpressFiles at HKEY_CURRENT_USERSoftware. key ExpressFiles at HKEY_LOCAL_MACHINESOFTWARE. key ExpressFiles at HKEY_USERS.DEFAULTSoftware. HKEY_CLASSES_ROOTMagnetsshellopencommand value $PROGRAMFILESExpressFilesExpressDL.exe at HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList. value $PROGRAMFILESExpressFilesExpressDL.exe at HKEY_LOCAL_MACHINESYSTEMControlSet002ServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList. value $PROGRAMFILESExpressFilesExpressDL.exe at HKEY_LOCAL_MACHINESYSTEMControlSet003ServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList. value $PROGRAMFILESExpressFilesExpressFiles.exe at HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList. value $PROGRAMFILESExpressFilesExpressFiles.exe at HKEY_LOCAL_MACHINESYSTEMControlSet002ServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList. value $PROGRAMFILESExpressFilesExpressFiles.exe at HKEY_LOCAL_MACHINESYSTEMControlSet003ServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList.
Read More
Hive ransomware on Exchange servers

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

hive ransomware

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.

Read More
Intel & MS fixed DRM issue with alder lake
Due to its hybrid core technology, the Alder Lake line of processors had some DRM issues with some game titles where DRM protection software detected hybrid core design switching via manager as a hack attempt and prevented the game from working properly. Over 50 titles were affected by this issue, now only 3 remain still affected but it is being worked on them so that can be also resolved. alder lake drmIntel says that the remedy to the issue for these games is the scroll lock fix which can be done so by enabling Legacy Game Compatibility mode from the BIOS of your motherboard. When running the said games, you can press scroll lock to park the E-cores on Intel's Alder Lake Desktop CPUs to get rid of DRM issues. Certain motherboard manufacturers such as MSI and Gigabyte have made this even easier through software tools with which you don't have to access the BIOS. All you need to do is select a button in the tool which works on both Windows 11 and Windows 10 operating systems and you will enable compatibility mode.
Read More
Windows Update Keeps Turning Off in Windows
Keeping your system updated is a must and Windows updates are definitely a great way to do that. These updates are essential since they provide important security and various fixes for bugs in your Windows 10 computer. However, there are plenty of instances when you encounter issues with Windows Updates and one of them is when the Windows Updates turn off automatically at random times. Some users reported that they saw a notification about Windows Updates being turned off. Note that the issue is not with the update itself since many users turned on the Windows Update and the system was properly updated. The issue is that the Windows Updates turned off all by itself. There could be several reasons why the Windows Updates turned off by themselves. It could be due to the antivirus program installed on your computer. Antivirus programs are known to cause issues with other programs, Windows updates components included. This can occur due to false positives as well as odd compatibility issues. Aside from antivirus programs, the Windows Update service itself could also be the root cause of the problem. There could be a corrupted file in the Windows Update folder or it could be that the Windows Update service wasn’t started properly. Any of these issues can be resolved by following the troubleshooting options given below. Make sure to follow each one of them carefully for better results.

Option 1 – Try to disable your antivirus program

Disabling the antivirus program or any security software installed in your computer is always a good idea you can try when the Windows Update process does not go smoothly. So before you try updating your computer again, make sure to disable the antivirus or security program and once the Windows Update is done, don’t forget to enable the antivirus program back again.

Option 2 – Try to make some changes in the Registry

  • Tap the Wins key once and type in “command prompt” in the field.
  • From the search results, right-click on Command Prompt and select the “Run as administrator” option to run it with admin privileges.
  • Next, type the following command and tap Enter:
reg add "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto Update" /v AUOptions /t REG_DWORD /d 0 /f
  • After that, type the following command and hit Enter again:
sc config wuauserv start= auto
 The command you entered will set the Windows Update to auto so you should be good to go.

Option 3 – Try to reset the Windows Update components

If by any chance that the second option didn’t work, resetting the Windows Update components could also help you resolve the problem. How? Refer to the following steps:
  • Open Command Prompt with admin privileges.
  • After that, type each one of the following commands and hit Enter after you key in one after the other.
    • net stop wuauserv
    • net stop cryptsvc
    • net stop bits
    • net stop msiserver
Note: The commands you entered will stop the Windows Update components such as Windows Update service, Cryptographic services, BITS, and MSI Installer.
  • After disabling WU components, you need to rename both the SoftwareDistribution and Catroot2 folders. To do that, type each one of the following commands below, and don’t forget to hit Enter after you type one command after the other.
    • ren C:WindowsSoftwareDistribution SoftwareDistribution.old
    • ren C:WindowsSystem32catroot2 Catroot2.old
  • Next, restart the services you’ve stopped by entering another series of commands. Don’t forget to hit Enter after you key in one command after the other.
    • net start wuauserv
    • net start cryptsvc
    • net start bits
    • net start msiserver
  • Close Command Prompt and reboot your PC.

Option 4 – Run the Windows Update Troubleshooter

Running the built-in Windows Update troubleshooter is one of the things you can first check out as it is known to automatically resolve any Windows Update errors. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.
Read More
Run Windows Updates from Command Line
As you know, one of the most highlighted features of Windows 10 is Windows Updates. It was offered to the customers as a service rather than a product with the release of Windows 10 under the scenario of Software as a Service which led to Windows Updates being set by default on Windows 10 and without an option for any users to disable it. Although not all users are happy with what Microsoft did, this is an ultimate step towards the greater good of all its customers since Windows Updates helps users in keeping their computers secured against all kinds of threats as well as provide them with the greatest and latest updates from Microsoft. So if you are one of those users who approved of the Windows Updates service, then read on as this post will guide you in running Windows Updates from Command Line either via Command Prompt or Windows PowerShell. For the complete set of instructions, refer to the options given below.

Option 1 – Run Windows Update via Command Prompt

Command Prompt in the Windows operating system exists for a very long time now compared to the comparatively new Windows PowerShell. That’s why it has similar capabilities to run Windows Updates. However, the highlighting point here is that you don’t have to download any module for Windows Updates. To get started running Windows Updates using Command Prompt, refer to the steps below.
  • First, type “cmd” in the Cortana search box, and from the search results, right-click on Command Prompt and select the Run as Administrator option to open it with Administrator privileges.
  • If a User Account or UAC prompt appears, just click on Yes to proceed.
  • Next, type in the commands listed below, and don’t forget to tap Enter right after you type each one of them.
    • UsoClient StartScan – use this command to start checking for updates.
    • UsoClient StartDownload – use this command to start downloading updates.
    • UsoClient StartInstall – use this command to start installing the downloaded updates.
    • UsoClient RestartDevice – use this command to restart your computer after you install.
    • UsoClient ScanInstallWait – use this command to check, download and install updates.
Note: Keep in mind that the commands in Command Prompt listed above are only meant for Windows 10. On the other hand, if you are using an older Windows version, you can try using the following commands instead:
  • wuauclt /detectnow – use this command to start checking for updates.
  • wuauclt /updatenow – use this command to start installing the updates detected.
  • wuauclt /detectnow /updatenow – use this command to check, download and install updates.

Option 2 – Run Windows Updates via Windows PowerShell

If you run Windows Updates in the Windows PowerShell, it will require you to install the Windows Update module manually. Hence, you have to get the Windows Updates downloaded and install Windows Updates.
  • Search for PowerShell in the Cortana search box and then run it with administrator privileges.
  • Once you’ve opened the Windows PowerShell, type the following command and hit Enter.
    • Install-Module PSWindowsUpdate – use this command to install the Windows Update module for Windows PowerShell.
    • Get-WindowsUpdate – use this command to connect to the servers of Windows Update and download the updates if found.
    • Install-WindowsUpdate – use this command to install the Windows Updates you’ve downloaded to your computer.
Read More
Fix Windows Updates Error code 0x80246007
Downloading Windows Updates does not always go smoothly as you can encounter several issues like the “Some updates did not finish downloading, We will keep trying, Error code 0x80246007” error. In fact, this error can also occur on other Windows applications like OneNote. According to security experts, this error happens for many reasons. For one, it could be that the Windows Update database is corrupted. It could also be that there is another process that’s in conflict with the Windows Update components or there might be some issue with the Background Intelligent Transfer Service (BITS). Whichever the cause may be, you can fix it by following the solutions given below.

Option 1 – Delete the contents in the Temporary folder

You can also try deleting the contents in the Temporary folder – all the downloaded, pending, or failed Windows 10 updates. You can do that using the simple and easy steps below.
  • Tap the Win + R keys to open the Run dialog box.
  • Then type “%temp%” in the field and press Enter to open the Temporary folder.
  • After that, select all the folders and files within the Temp folder and delete all of them.

Option 2 – Try running the Windows Update Troubleshooter

Running the built-in Windows Update troubleshooter is one of the things you can first check out as it is known to automatically resolve any Windows Update errors like Error code 0x80246007. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.

Option 3 – Try renaming or removing the pending .xml file

The problem might be due to some pending .xml file so you need to rename or remove it. To do so, just go to C:/Windows/WinSxS folder. From there, look for a pending .xml file – you can either rename it or delete it. This will allow the Windows Update to delete any pending tasks and build a new and fresh update check.

Option 4 – Restart the Background Intelligent Transfer Service (BITS)

The Background Intelligent Transfer Service or BITS is a part of the Windows Update service that manages the background download of Windows Update, as well as scans for new updates and so on. Thus, if your Windows Update fails a couple of times, you might want to restart BITS. For you to do that, make sure that you have admin privileges.
  • Press the Win + R keys to open the Run dialog box.
  • Then type “msc” in the field and hit Enter to open Services.
  • After opening Services, look for the Background Intelligent Transfer Service from the list of services and then double click on it to open Properties.
  • Next, set the Startup type to Manual and click on the Start button. If it doesn’t help, you can try setting it to Automatic (Delayed) and then reboot your PC.

Option 5 – Run the DISM tool

Running the DISM Tool helps in repairing the Windows System Image as well as the Windows Component Store in Windows 10. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth”.
  • Open the Command Prompt with admin privileges.
  • Then type in the following commands and make sure to hit Enter right after you type each one of them:
    • Dism /Online /Cleanup-Image /CheckHealth
    • Dism /Online /Cleanup-Image /ScanHealth
    • exe /Online /Cleanup-image /Restorehealth
  • Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 6 – Delete the files from the Software Distribution folder

The downloaded Windows Updates are placed in a folder called “SoftwareDistribution”. The files downloaded in this folder are automatically deleted once the installation is completed. However, if the files are not clean up or if the installation is still pending, you can delete all the files in this folder after you pause the Windows Update service. For complete instructions, refer to the steps below.
  • Open the WinX Menu.
  • From there, open Command Prompt as admin.
  • Then type in the following command – don’t forget to hit Enter right after typing each one of them.
net stop wuauserv net start cryptSvc net start bits net start msiserver
  • After entering these commands, it will stop the Windows Update Service, Background Intelligent Transfer Service (BITS), Cryptographic, and the MSI Installer
  • Next, go to the C:/Windows/SoftwareDistribution folder and get rid of all the folders and files thereby tapping the Ctrl + A keys to select them all and then click on Delete. Note that if the files are in use, you won’t be able to delete them.

Option 7 – Reset the Catroot2 folder

After resetting the SoftwareDistribution folder, you need to reset the Catroot2 folder to restart the services you just stopped. To do that, follow these steps:
  • Type each one of the following commands.
net start wuauserv net start cryptSvc net start bits net start msiserver
  • After that, exit Command Prompt and restart your computer, and then try to run Windows Update once more.
Read More
How to Fix Error 0x00000643

Error 0x00000643 - What is it?

This is a Windows Vista printer error. It occurs when you try to use the plug-and-play service to install a WSD printer on your PC. WSD is the abbreviation for Web Services for Devices. It is a Microsoft API to simply programming connections to web service enabled devices such as printers, file shares and scanners.  The error 0x00000643 code is displayed in the following format:
“Operation could not be completed (error 0x00000643)”

Solution

Restoro box imageError Causes

The error 0x00000643 may occur due to multiple reasons, including:
  • No suitable driver installed for your printer
  • A firewall or other security program is too restrictive
  • Registry file has invalid entries
  • Virus and Trojan
  • Outdated system drivers

Further Information and Manual Repair

To resolve this error code on your PC, you don’t have to hire a professional technician and spend hundreds of dollars to perform system repair. You can resolve it all by yourself, even if you are not a computer programmer or lack technical expertise. Here are some of the easiest and proven methods to fix the error 0x00000643 on your PC:

1. Update Outdated Drivers

This can be done by accessing the ‘Device Manager’. All you have to do is, go to the start menu and type Device Manager in the start search box. Then click on the Device Manager in the list. On the action menu, click the scan for hardware changes or update the driver.

2. Delete the WSD Port to Resolve Error

Go to the start menu and type printers in the search box. Click printers in the given program list and then click the option add a new printer. After that, select the existing WSD port and any printer driver. Now delete the printer. The WSD will be deleted automatically. Once this is done, connect the printer to your computer. You will see the plug-and-play service will begin to install the printer again. This process is most likely to resolve the issue and reinstall your printer.

3. Disable Firewall

Sometimes the error may occur if the security programs are too restrictive such as the Firewall. To fix the problem simply disable Firewall.

4. Viral Infection

If the underlying cause of the error is a viral infection, then download a powerful antivirus and run it on your PC. Scan for viruses and delete them.

5. Registry Invalid Entries

If you don’t clean the registry regularly, this overloads with unnecessary, redundant and obsolete files like cookies, internet history, junk files, bad registry keys and invalid entries. This damages the registry and generates such error codes. Although you can resolve and repair the registry manually, but that method is slight tricky and time consuming. It may require technical expertise. However, another quick and easy way to clean and restore the registry and resolve error 0x00000643 on your system is to download Restoro. This is a next-generation, advanced, and highly functional PC Repair Tool. It is deployed with an intuitive algorithm and multiple utilities such as a smart registry cleaner, a powerful antivirus, and a system optimizer. The registry cleaning utility detects all registry issues on your PC, removes invalid entries cluttering the registry, and repairs it right away thereby resolving error 0x00000643. The antivirus simultaneously detects malware on your PC and removes them while the system optimizer boosts the speed of your computer significantly. Restoro is bug-free, safe, and efficient. It has simple navigations and a user-friendly interface. This software is compatible with all Windows versions including Vista. To fix error 0x00000643 on your system in seconds, click here to download Restoro now!
Read More
How to Fix the File Too Large Error in Windows 10
If you are trying to copy large files that are over 4GB to a USB flash drive or SD card, but you suddenly get an error message saying, “File Too Large, The file is too large for the destination file system”, read on as this post will help you fix this problem. A user recently reported that while trying to copy a 4.8GB zipped file from a Windows 10 PC to a new 8GB USB drive but only got the File Too Large error message instead. If you share the same problem with this user and you know that there is more than enough available space for the file in your USB drive or SD card, continue reading until you get to the instructions provided in this post so that you will be able to copy the file successfully. It is most likely that the USB drive has been FAT32 formatted which is why you’re unable to copy the file and got an error. The FAT32 file system has a built-in limitation on the size of the individual file that it may contain. For instance, it’s 4GB so even though collectively, it may have files or even 1TB individually it shouldn’t be more than 4GB. Thus, you need to change the file system from FAT32 to NTFS. To do that, carefully follow the instructions provided below.
  • Step 1: Connect the USB drive and open the Windows File Explorer.
  • Step 2: Afterwards, right-click on the USB drive letter and select Format from the context menu.
  • Step 3: Next, select NTFS instead of FAT32 the instant a dialog box appears from the drop-down menu for the file system.
  • Step 4: Now click on the Quick Format option and then click the Start button to reformat the USB drive.
Note: There is also another way you can change the file system. In this alternative way, you need to open an elevated Command Prompt and type the convert X: /fs:ntfs /nosecurity command, and hit Enter to execute it. Remember that in this command, “X” is the letter of your USB drive so whatever the letter of your drive is, you need to make sure to put it instead of “X”. Once the process is completed, try copying the file again.
Read More
Fix STOP 0XC000021A, error in Windows 10
Upgrading your Windows computer may not always go as expected as you could end up getting some error messages along the way. One of the error messages you can encounter is the “STOP 0XC000021A or STATUS_SYSTEM_PROCESS_TERMINATED” error. This error indicates that is some security issue within the Windows operating system. It could be that the system files have an issue and they have been modified incorrectly. Although this does not necessarily mean that malware is behind the modification, one of the applications you installed recently might have something to do with the problem. The application might have modified or corrupted some of the core system files. When you encounter this error, you will see a blue screen along with the following error message:
“Your PC ran into a problem and needs to restart. We’re just collecting some error info, and then we’ll restart for you. (0% complete) If you’d like to know more, you can search online later for this error: 0xc000021a”
This error pops up when a user-mode subsystem like the WinLogon or the Client Server Run-Time Subsystem or CSRSS has been compromised fatally and security can no longer be guaranteed in the system. Thus, the operating system switches to kernel mode, and Windows won’t be able to run without the WinLogon or the Client Server Run-Time Subsystem. This is why it’s one of the few cases where the failure of a user-mode service can shut down the system. To resolve the issue, here are some fixes that might help.

Option 1 – Uninstall programs you installed lately

  • In the search box, type in “control” and then click on Control Panel (desktop app) among the search results.
  • After that, select Programs and Features from the list which will give you a list of all the programs installed on your computer.
  • From there, look for the concerned program and select it and then uninstall it.
Note: If you have downloaded the app from the Windows Store, you can simply right-click on it from the application list and then uninstall it.

Option 2 – Perform System Restore

Performing System Restore can also help you fix the “STOP 0XC000021A or STATUS_SYSTEM_PROCESS_TERMINATED” error. You can do this option either by booting into Safe Mode or in System Restore. If you are already in the Advanced Startup Options, just directly select System Restore and proceed with the next steps. And if you have just booted your PC into Safe Mode, refer to the steps below.
  • Tap the Win + R keys to open the Run dialog box.
  • After that, type in “sysdm.cpl” in the field and tap Enter.
  • Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
  • After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.

Option 3 – Run the System File Checker or SFC scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files to good system files that might be the cause why you’re getting the “STOP 0XC000021A or STATUS_SYSTEM_PROCESS_TERMINATED” error. To run the SFC command, follow the steps given below.
  • Tap Win + R to launch Run.
  • Type in cmd in the field and tap Enter.
  • After opening Command Prompt, type in sfc /scannow
The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:
  1. Windows Resource Protection did not find any integrity violations.
  2. Windows Resource Protection found corrupt files and successfully repaired them.
  3. Windows Resource Protection found corrupt files but was unable to fix some of them.

Option 4 – Rebuild the BCD and fix MBR

Rebuilding the BCD can help you in fixing the “STOP 0XC000021A or STATUS_SYSTEM_PROCESS_TERMINATED” error.
  • You can start by booting into the installation environment for Windows 10 from an installation media.
  • After that, click on Repair your computer and on the blue screen, select Troubleshoot and then select the Advanced options menu.
  • Next, select Command Prompt and type in the commands below one by one, and tap Enter right after you do so.
  • exe /FixMbr
  • exe /FixBoot
    • exe /RebuildBcd
The commands you entered should rebuild the BCD and repair MBR.

Option 5 – Run the CHKDSK utility

You can also run the Chkdsk utility to resolve the problem. If your hard drive has issues with integrity, the update will really fail as the system will think that it’s not healthy and that’s where the Chkdsk utility comes in. The Chkdsk utility repairs hard drive errors that might be causing the problem.
  • Open Command Prompt with admin privileges.
  • After opening Command Prompt, execute the commands listed below, and don’t forget to hit Enter right after you type in each one of them.
  • chkntfs /t
  • chkntfs /t:10
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status