Logo

Your Windows license will expire soon

If you suddenly get a message telling you that “Your Windows license will expire soon, You need to activate Windows in Settings” on your Windows 10 computer but you know that your Windows 10 is already activated. Worry not for this post will help you get rid of that error message right away. Before you get started, make sure that you have the Windows product key with you. If you don’t, you can get it by running the following command in an elevated Command Prompt:

wmic path SoftwareLicensingService get OA3xOriginalProductKey

Take note of the product key and then proceed to the options given below.

Option 1 – Try activating Windows 10 again or use another product key

  • If you’re sure that you have the correct product key, click the Go to the Settings button.
  • After that, click the Activate button once again.
  • If you have another license key, you can also use that as well, just simply click on the Change product key.
  • Then enter the new product key and click on Activate. That should fix the problem, if it doesn’t, refer to the next option below.

Option 2 – Try to reset the licensing status

  • Click the Start button and then type “cmd” in the Search box and then tap Ctrl + Shift + Enter to open an elevated Command Prompt.
  • Next, type the “slmgr –rearm” and hit Enter to reset the licensing status.
  • Restart your computer and check if the error is now gone or not.

Option 3 – Try uninstalling the product key and re-enter it once more.

  • The first thing you have to do to uninstall the product key is to know the Activation ID of your Windows installation. To do so, open an elevated Command Prompt and type this command, and hit Enter – vbs /dlv
  • After you enter the command, you should see the licensing status and Activation ID. And to get all the Activation IDs of all the installed Windows versions, key in this command and hit Enter – vbs /dlv all

Note: The “/dlv” parameter will give you the license information for the installed operating system.

  • After you enter the second command, you should see a Windows Script Host window with all the Windows licensing and activation status. Take note of the Activation ID.
  • Next, in the same elevated Command Prompt, type this command – slmgr /upk <Activation ID>

Note: In the third given command, “/upk” stands for “uninstall product key”. This parameter uninstalls the product key of the current Windows edition.

  • Restart your PC. After that, your computer will be in an unlicensed state so you need to re-enter the product key again.

Option 4 – Try rebuilding the Tokens.dat file.

The issue might be caused by a corrupted Tokens.dat file. The Tokens.dat file is a digitally signed file that stores most of the Windows Activation files so if it is corrupted then no wonder you’re having activation issues. To rebuild the Tokens.dat file, refer to these steps:

  • From the WinX Menu, open an elevated Command Prompt.
  • After opening Command Prompt, you need to type each one of the following commands and after you type each command, hit Enter.
    • net stop sppsvc
    • cd %windir%ServiceProfilesLocalServiceAppDataLocalMicrosoftWSLicense
    • ren tokens.dat tokens.bar
    • net start sppsvc
    • exe %windir%system32slmgr.vbs /rilc
  • Now restart your computer.

Option 5 – Try running the Windows 10 Activation Troubleshooter

  • Go to Settings and then select Activation.
  • After that, click on the Windows Activation and then troubleshoot. This will help you address most of the commonly found activation issues in Windows devices.

Option 6 – Try activating Windows 10 via mobile phone

Activating Windows 10 can also be done using your phone. Just note that you have to call Microsoft to do so.

  • In the Start Search box, type in “Slui 4” and tap Enter.
  • Next, select your country and click on Next.
  • Keep the window open and call the toll-free number of the country you’re from.
  • Afterward, a confirmation ID should be given by the automated system which you must take a note of.
  • Finally, in the box on the window, type in the confirmation ID and click on the Activate button. That should do it.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

Best Free Stock Photo WEB sites of 2021
The Internet has become an essential human right as stated in many countries around the world. Among many benefits that the internet offers are various sites selling Stock photographs for all of your needs. No matter are you working in the design industry or just want to make something for yourself there is a high chance that you will eventually need some photos for your work. Stock photo workIn this article we are going to go through the best Stock Photo sites BUT, we will focus on ones that give you royalty-free Photos, so no paying stuff here, just the best of the free world.

Adobe Stock free collection

https://tracker.tradedoubler.com In the last year of 2020, Adobe has made more than 70000 photos, videos, illustrations, and templates completely free. You are free to use provided material for personal, commercial, and creative work. Since this is adobe’s collection, well part of it, all of the given material is of high quality. You can also upload pictures to do a visual search to find similar ones.

Unsplash

https://unsplash.com/ Unsplash is a place where you will go if you want to find free-quality pictures. Since a lot of photographers are donating their selected work there you will find always consistently high-quality work there. Unsplash also has applications for Android and iOS so you can go through their stock on your mobile device as well. Photos are organized into categories that make searching much easier.

Pixabay

https://pixabay.com/ Pixabay is maybe well known due to its huge collection of both images and illustrations. There are tons and tons of stuff in there all royalty-free for use. The bad side is due to its strongest one, since there are so many images on its site, quality is not always top-notch like on Unsplash for comparison but you might find stuff here that you will not be able to do it anywhere else.

Pexels

https://www.pexels.com/ This is a great choice for web or app developers since you can find various UI ideas and designs on it. Many UI ideas ready for implementation will be found here and a decent amount of photos as well. The overall site is great for that purpose but please do read the license on each image since some of them are limited in use and cannot be used in commercial projects.

Pikwizard Stock

https://www.pikwizard.com/ Stock photography from Pikwizard is a place where you will go if you need high-quality pictures of people. There are a lot of images of people in natural poses doing things, nothing cheesy or unnatural, just pure and great-looking ones. Among other things is also a vast selection of cityscapes. Sadly as in the case of Pexels, not all pictures have the the same license so make sure to check terms of use before using one.

Gratisography Stock photos

http://gratisography.com/ Last on our list is a Stock site with a strange name and if you visit it you will see that it is not just the name that is strange. Gratisography is a stock site that aims to provide you with high-quality photographs but in different take from another site. These images are more artistic and surreal than other competitor sites. Images are uploaded almost on daily basis but since thematic is somewhat niche collection itself is relatively small.

Conclusion

That’s it, we hope that we have helped you in any way to find some material for your next project and I hope to see you soon back on errortools.com. Take care and all the best.
Read More
A Quick Guide to Fixing Error Code 17

Error Code 17 - What is it?

Code 17 is a typical Spotify error code. Spotify is a music streaming service. Through this software, PC users can browse songs and search by artist, album, and playlist. Simply put, it is an audio player available for BlackBerry, iOS, and Microsoft Windows desktop. You may experience error code 17 if the process fails when downloading Spotify from the internet. The error message is displayed in any one of the following formats:
Error 17: Spotify has encountered a problem and needs to close. We are sorry for the inconvenience. Spotify could not be started (Error code 17)
Some of the symptoms of this error code are program crash, slow Windows performance, and periodic system freeze.

Solution

Restoro box imageError Causes

Error 17 may be triggered by several reasons such as:
  • Viral infection
  • Incomplete installation of Spotify software
  • Corrupt download
  • Registry corruption
  • Windows Installer service terminated
To use the audio player Spotify successfully on your PC, it is advisable to fix error 17 right away on your system. Delay may cause inconvenience and limit your access to your desired program.

Further Information and Manual Repair

To repair this error code on your PC, you don’t have to hire a professional or be a technical whiz yourself. The good news is that this error is quite easy to fix. You don’t need to be technically sound to resolve it. Here are some proven methods for you to fix error code 17 on your system. So let’s get started:

Method 1 - Make sure that the Windows Installer is running

Sometimes Spotify error 17 may occur if the Windows Installer service is terminated. Therefore before you download, make sure the Windows Installer is running. This is a good way to ensure the error code 17 messages don’t pop up on your PC again. For this here’s what you need to do, first quit all programs. Now go to the start menu and in the search box type RUN, and press enter. In the Open Box, type msiexec /unregister and then press OK to confirm. After that, perform the same steps again, and now in the Open Box type msiexec /regserver and press OK to save. Reboot your PC and try downloading Spotify again. If the program successfully downloads on your system, then this means error 17 is resolved. However, if the error code still persists, then try other methods given below.

Method 2 - Use System Restore to Undo Recent Changes

Another reason for the cause of error 17 is the improper or incomplete installation of Spotify. Improper installations can configure settings and also leave bad entries in the registries. To resolve, use System Restore utility built-in Windows. By using this system tool, you can undo recent changes and resume your computer to its previous condition as it was before the proper installation was attempted. To do this, go to the start menu, then in the search box type System Restore and press enter. Go to System Restore and choose a restore point. Once you’ve selected the point, reboot your PC to activate changes.

Method 3 - Remove Viruses

Viruses can enter and damage your PC if you download software programs from unknown websites. These not only damage your PC but also hinder your ability to install desired programs successfully in this case audio player Spotify. In such an event, simply use an antivirus to remove all viruses infecting your system. After they are removed, make sure you download and install Spotify software from a trusted website.

Method 4 - Repair the Registry

Another cause of error 17 is registry corruption. This occurs due to bad entries, invalid and junk files saved in the registry. To fix the corrupt registry simply download Restoro. This is a user-friendly PC Fixer embedded with a powerful registry cleaner. This software is compatible with all Windows versions. The registry cleaner detects all registry issues, removes all file corrupting the registry, and cleans it immediately in just a few clicks. Click here to download Restoro on your PC and resolve Error 17.
Read More
How to remove "program" from startup

Instaling and removing applications from your Windows can sometimes leave some traces that are unpleasant and can cause annoyances. One of these annoyances is the program in the startup section of the task manager.

If you ever opened task manager and went into the startup section trying to disable some of the startup items on your Windows boot there might be a chance that you have experienced and seen a program without any icon or information about it just sitting there.

Program inside task manager

This is due to some applications being removed from the system but for some reason, it still shows itself in startup and it is quite annoying. So here we will show you how to get rid of this annoyance so your startup is clean again without junk in it.

Removing a program from startup

Locating the source of the issue

The first thing of course is to open the task manager itself and navigate to the startup tab. Inside the startup tab right-click on the column header and tick or enable Startup type and command line. Now you will see the location of the supposed file (that is missing or you could just go there by right-clicking on the item, but here it is greyed).

program in task manager with details

99% of the time startup type will be registry since the file is missing, if it was a file fix would be just to simply delete the file in the folder but since it was installed and not properly removed registry key is still present but the file cannot be found. After confirmation that the file is indeed missing and that the startup type is registry open the registry editor by typing Regedit in search and pressing enter.

Removing the key from registry

Inside Registry editor navigate to: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Inside on right part, you will see all auto-start entries added by installed applications.

regirsty editor

Locate one that is causing issues by comparing its path with the path inside the task manager command line and delete the key. Once the key is deleted right-click on RUN on the left part and choose HKEY_LOCAL_MACHINE to quickly jump on that key location and repeat the process of key deletion if needed. HKEY_LOCAL_MACHINE will delete startup entry for all users and sometimes entry will not be present here since the application is not installed for all users or there are no other users on the machine.

After the procedure is finished, reboot your systems in order to apply changes.

Read More
Fix Unknown USB Device error message
USB devices are one of the commonly used devices every day – from plugging mobile devices for charging using pen drives, you are making use of USB drives. However, there are times when you might encounter an error message saying, “Unknown USB Device” as you plug your USB device on your Windows 10 computer. So if you encounter this kind of error message followed by either of the following explanations, read on as this post will give you a couple of suggestions you can check out to resolve the issue.
  • Device Descriptor Request Failed
  • Port reset failed
  • The device failed enumeration
  • Set address failed
  • Error code 43
You can fix this error using several ways. You can try changing the Power Options, update or roll back the USB drivers, turn off Fast Startup, or run the USB troubleshooter. Follow the options given below for more details.

Option 1 – Try to change the Power Options

  • Tap the Win + R keys to open the Run utility.
  • Then type “powercfg.cpl” and tap Enter to open the Power Options window.
  • Next, go to your selected power plan and click the “Change plan settings” option to open a new page.
  • From there, click on the “Change advanced power settings” option. This will open a new window where you can see various power consumption options.
  • Now look for the USB Settings option and expand it.
  • Then set the USB selective suspend setting to “Disabled” for both scenarios: On Battery and Plugged in.
  • After that, click on OK and restart your computer to apply the changes made.

Option 2 – Update or reinstall the Universal Serial Bus Controller driver

Since it could be a driver issue, you can try to update or reinstall the Universal Serial Bus Controller drivers using the Device Manager. Refer to the following steps:
  • First, click the Start button and type “device manager”.
  • Then click on the “Device Manager” from the search results to open it.
  • From there, look for the “Universal Serial Bus controllers” option and then right-click on each one of the USB drivers and select the Update Driver from the menu.
Note: If it is a regular USB drive, then it will be listed as a USB Mass Storage Device but if you have a USB 3.0 device, then look for a USB 3.0 Extensible Host Controller.
  • Restart your PC and then click the “Search automatically for updated driver software” option.
Note: If updating the USB Controller drivers didn’t work, you can try to reinstall them instead.

Option 3 – Try turning off Fast Startup

  • Tap the Win + R keys to open the Run dialog box and type in “control” to open the Control Panel.
  • Next, click on the Hardware and Sound section and click on Power Options.
  • Afterwards, select the “Choose what the power buttons do” option from the left side menu pane.
  • Now click on Change settings that are currently unavailable and uncheck the entry that says, “Turn on fast startup (Recommended).
  • Then click on Save Changes and restart your computer and see if it has fixed the problem or not.

Option 4 – Run the Hardware and Devices Troubleshooters

  • The first thing you need to do is click on Start and then on the gear-like icon to pull up the window for Settings.
  • After opening Settings, look for the Update and Security option and select it.
  • From there, go to the Troubleshoot option located on the left-hand side of the list.
  • Next, select Hardware and Devices from the list and open the Troubleshooter and run it. Once it is doing its job, wait for it to complete the process and then restart the system.
  • After the system restarts, check if the problem’s now fixed. If not, refer to the next option given below.
Read More
World of Warcraft lost connection to server
World of Warcraft had been released on November 23, 2004, and even today it is the most successful MMORPG ever made. Some say that it was the right timing, others say it was Blizzard's history and its fans, it is even spoken that marketing team has responsibility for WOW's success. Whatever the reason may be, the fact remains that WOW is a really fun game to play. In this article we will cover the annoying issue of World of Warcraft's lost connection to the game server and how can you fix it. Please be aware that before you try any fixes go to the official World of Warcraft website and check to see if the server maintenance is not underway. If this is the case, you will have to wait for servers to come back online after the maintenance. Keep reading and try provided solutions as they are presented to fix this issue and continue gaming.
Read More
Razer unveils their first internal PC hardware
razer pc hardware componentsRazer is a well-known brand among PC gamers and users, it started as a peripheral manufacturer focused on keyboards and mouse but after years passed Razer expanded its inventory offerings. It soon started offering headphones and lately has branched into wider product lines like gaming chairs and protection masks. It is not a big surprise that Razer is expanding into other branches of the PC industry. This time, however, it has revealed not one but three new hardware for your PC. Case fans, all in one liquid cooler and power supply. There are not many details about the products themselves but one thing is one hundred percent confirmed, they come with Razer Chroma, all of them, even the fans.

Katana Chroma ATX PSU

razer power supplyMost interesting for me personally is Razers Katana, the power supply unit. It is a modular power supply ranging from 750W to 1200W with the additional option of Titanium rated one with an impressive 1600W of power. Power supply will start shipping in early 2022 and at the time of writing this article no price range has been released.

Razer Hanbo AIO

razer water coolingHanbo liquid cooler will feature an optimized intake design so it can ensure greater heat transfer and fluid dynamic for improved reliability and silent operation. Radiator comes in 240mm size with two fans and a larger one of 360mm with three fans. The pump will be able to rotate in any direction of full 360 degrees so it can fit in any case. Hanbo will be released in November this year but no pricing has been released so far.

Razer Kunai Chroma case fans

razer case fansKunai fans will boast high static pressure performance with lowered noise. They will go as far as 2200rpm for the 120mm version where the 140mm version will go up to 1600rpm. They will come with addressable LEDs and up to eight fans will be able to be connected to Razer’s PWM fan controller that will come with a magnet at the back for easy attachment to any steel part of PC casing. PWM will use Razer’s Synapse software to customize pulse width modulation in order to improve airflow and noise. PWM will be priced at $49.99 in the Razer Store and it is available for preorder. Fans are priced at $44.99 for one 120mm or $129.99 for a three-pack of 120mm. One 140mm will go for $49.99 and a three-pack will be $129.99.
Read More
Fix Generic PnP monitor driver issue
Universal PnP or plug-and-play monitors use a generic PnP Windows driver. Whenever a user plugs a USB device or monitor into a PC the system will automatically identify the device and it will install the proper driver for smooth running. Generic PnP Monitor in Windows 10 means that Windows 10 installed a monitor driver as the PNP did not recognize the device. This generic PnP monitor driver may not work perfectly like the manufacturer’s one. It can lead to issues like unable to set the best monitor resolution and the screen refresh rate. Therefore, it is important to fix this issue. All of that being said let us fix your PnP display driver issue.
  1. Reconnect monitor

    Always try this first, just by unplugging the monitor and then plugging it back may resolve the issue, if the monitor was not detected properly the first time, there are very high chances that this method will resolve the issue.
  2. Check if the Device Manager is reporting an error and update the driver

    If the hardware is functioning properly then the issue might be in Windows not detecting device or driver malfunction. In any case, the Device Manager will be the one who will report this problem. In order to check to see if the driver is properly working press ⊞ WINDOWS + X to open the hidden start menu. keyboard with windows and x marked Once it opens, click on Device Manager to open it, If you have a driver device error inside Windows, you should see it immediately when entering the Device Manager, it will have a yellow exclamation mark beside it. Right-click on it and choose update driver.
  3. Reinstall driver

    If driver update failed or you already have the latest drivers, reinstalling them could fix the issue since drivers might have corrupted during installation of some update or application. Follow steps from point 3 to get to the driver in Device Manager, then right-click on it but instead of update choose to uninstall. Reboot Windows once the driver is uninstalled and Windows will install a new one automatically. If you do not want to update drivers automatically install the latest driver for your device, then reboot.
  4. Check Windows update

    Check to see if the latest Windows update is installed, update your Windows if needed
  5. Fix driver issue with DRIVERFIX

    If everything else fails, get DRIVERFIX, a premium solution for your PC issues, and fix driver errors.
Read More
Choosing default browser in Windows 11
Default applications in previous Windows versions were a pretty straightforward process. The user went to the settings application and picked for each category which application he would like to choose from the list of installed ones. In Windows 11 things are little changed. In this article, we will show you how to choose the default internet browser inside Windows 11, and sadly it is a more tedious task than in previous versions.

windows 11 default browserChoosing default browser in settings

As in previous versions of the Windows operating system you will need to use the settings application in order to change your default Internet browser. Previously, in Windows 10, a variety of general categories like email, web browser, and photo viewer were all listed under the Default Apps section of the Settings panel. It was easy to click on one of those categories and click on the option you like best from the small pop-up suggestion window. In the Windows 11 Insider Build, you’ll see a gauche list of an individual file or link types that you’ll need to specify your preferred browser for. The types include: HTM, HTML, PDF, SHTML, SVG, WEBP, SHT, FTP, HTTP, and HTTPS. There are additional optional types you can specify your preferred browser for as well. The issue here is in order to use a single browser which most users do you will have to go through each file type and set your preferred one. I am really not sure why this was introduced or why it has to be this way, all I can do is hope that in the final release of Windows 11 this feature will be rolled back as it used to be and that you could set your default browser in just one simple click.
Read More
Step-by-Step Guide to Patching Error Code 24

Code 24 - What is it?

You may experience error code 24 when you try to use a device on your PC that is not properly installed or its driver is corrupted. Code 24 is a Device Manager error and it pops up on your computer screen in the following format:

“This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)”

Solution

driverfix boxError Causes

Error code 24 may be triggered due to several reasons. However, the most common causes for this error code include:

  • Incorrect device installation
  • Hardware failure/ conflict
  • Corrupted or outdated driver
  • Device prepared for removal

It is recommended to resolve the error code to ensure your PC works at its optimal performance. Error code 24 can lower the device functionality and PC performance dramatically.

Further Information and Manual Repair

Since this error code can mean several different things, troubleshooting it can be quite tricky but to make it simple to resolve, we have listed down some easy methods to repair error code 24.

Try these methods to fix error 24 on your PC and ensure your system works at its optimal pace. Let’s get started….

Method 1 - Update the BIOS on Your Motherboard

Problems with BIOS, the controlling software in the PC motherboard, can sometimes trigger hardware conflicts resulting in Device Manager error code pop-ups.

In such a scenario, it is advisable to update BIOS. To update, go to your PC motherboard manufacturer’s website. Here you will be able to find instructions on updating BIOS.

Follow the instructions carefully to resolve error code 24 on your system. If the error code still persists, then try other methods discussed below.

Method 2 - Remove New Devices

If you experienced code 24 on your PC after installing new devices, then it is advisable to remove them to resolve the error code.

If the device is attached to your computer, then simply disconnect and remove it immediately. Once you disconnect it, reboot your system to activate changes.

Method 3 - Update Drivers

If device removal does not resolve the problem, then consider updating the device driver. Code 24 is also related to driver problems.

It can occur if a device driver is corrupted or outdated. In such an event, it is advisable to update the driver by installing the new and latest device driver version on your PC.

For doing this, simply download the latest device driver version from the manufacturer’s website and update it.

Method 4 - Install DriverFIX for Both Device Driver Update and Safe Device Removal

Finding problematic drivers and the latest device driver versions to update them, however, can be time-consuming and sometimes even frustrating. To avoid being in this situation, it is advisable to download DriverFIX.

DriverFIX is a cutting-edge, user-friendly and an innovative program exclusively designed to resolve device driver related issues and problems on computer systems

It is integrated with the newest technology and intelligent programming system that enables and empowers PC users like you to repair device driver error codes in seconds.

Once you install this software on your PC, simply run it. The software program instantly detects all problematic drivers and updates them with their latest versions available on the internet.

All this is done in mere seconds and it’s not time-consuming at all. Moreover, device driver updates are performed frequently to ensure that you don’t experience any driver problems again.

  • With this software on your PC, you don’t have to worry about updating drivers regularly.
  • In addition to this, as we discussed above, driver code 24 can also occur due to new plugged-in devices. If that’s the reason, then DriverFIX can help you resolve this problem too.
  • It can help you manage and unplug USB devices safely from your PC. After installing DriverFIX, unplugging USB devices is easy and you don’t have to worry about data corruption or drive damage.
  • DriverFIX manages USB devices smoothly by making the ejecting process easy and safely removes hardware from your PC, thereby resolving error code 24 in no time.
  • DriverFIX is easy to install and use and is compatible with all Windows versions.

Click here to download DriverFIX and repair Device Manager error code 24 right away.

Read More
Android malware spies while posing as a Update
New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:
  • Stealing instant messenger messages;
  • Stealing instant messenger database files (if the root is available);
  • Inspecting the default browser's bookmarks and searches;
  • Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
  • Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
  • Inspecting the clipboard data;
  • Inspecting the content of the notifications;
  • Recording audio;
  • Recording phone calls;
  • Periodically take pictures (either through the front or back cameras);
  • Listing of the installed applications;
  • Stealing images and videos;
  • Monitoring the GPS location;
  • Stealing SMS messages;
  • Stealing phone contacts;
  • Stealing call logs;
  • Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status