background Archives

Winsage

July 12, 2026

This unofficial PowerShell script for improving Windows 11 gets a useful driver feature

This weekend, discussions emerged reflecting user frustration with Windows 11 and Microsoft products, particularly regarding updates. A recent cumulative update introduced a customizable Start menu but also fixed a bug that was consuming users' storage. Microsoft has mandated that users cannot ignore these updates, contributing to dissatisfaction. Many users are opting for third-party applications like Files and Win11Debloat as alternatives to the native Explorer app. The latest version of Win11Debloat, released on July 11, 2026, includes features to prevent automatic installation of unwanted OEM apps with drivers, a reboot warning for certain functions, and various fixes and enhancements. Notable additions include support for WhatIf in Get.ps1, disabling Windows Notifications, and improvements in handling registry-backup load failures. The app is available on its official GitHub repository or through the Neowin software stories page.

Winsage

July 12, 2026

Microsoft Confirms Windows GDID Device Identifier That Cannot Be Disabled, Documented in FBI Case Filing

Microsoft has confirmed the existence of the Global Device Identifier (GDID), a unique identifier assigned to Windows installations, in a federal complaint against an alleged member of the Scattered Spider hacking group. The GDID is generated when a Windows system is set up with a Microsoft Account and remains active through various Windows updates. Disabling the GDID could disrupt Windows activation and access to Microsoft Store applications. The GDID is described as "a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device." It is created during the provisioning of Windows with a Microsoft Account and is stored in the Windows registry under HKCUSOFTWAREMicrosoftIdentityCRLExtendedProperties. The GDID remains persistent through Windows updates but is not retained after a clean reinstall. A single user can possess multiple GDIDs linked through their account, OneDrive, and activation history. The FBI used the GDID to track Peter Stokes, an alleged member of the Scattered Spider group, across various VPN connections and proxy servers. The GDID was recorded visiting specific websites and was linked to Stokes's accounts on platforms like Snapchat and Facebook. Concerns have been raised regarding user privacy, as the GDID is assigned without user consent and cannot be disabled without compromising essential Windows features. Microsoft has not committed to providing user-facing controls or comprehensive documentation for everyday users regarding the GDID. Legal requests can compel Microsoft to disclose GDID activity data to law enforcement. The GDID is linked to the Microsoft Account rather than the device itself, meaning reinstalling the operating system does not sever this connection.

Tech Optimizer

July 11, 2026

ESET NOD32 antivirus just dropped a 1-year subscription to $20

ESET NOD32 Antivirus offers a one-year subscription for .99, reduced from the regular price of .99. It utilizes AI-powered analysis for real-time threat detection, including viruses, spyware, rootkits, and zero-day exploits. The software features a Ransomware Shield, anti-phishing measures, and Intel Threat Detection Technology for enhanced security. It includes a multithread scanning feature to optimize performance and a Gamer Mode that suspends notifications during full-screen applications. The ESET HOME app allows users to monitor licenses and security reports via mobile devices.

Winsage

July 11, 2026

This Windows feature has been eating users’ RAM for years, Microsoft still hasn’t fixed it

Memory leaks have been reported with the Phone Link feature in Windows 11, specifically the Cross Device Service, which is consuming excessive amounts of RAM. Users have noted that this service can use between 15 to 30GB of RAM, leading to significant system slowdowns and reduced internet speeds. Complaints about this issue have been ongoing since early 2023, with users often needing to manually intervene via Task Manager to restore system performance. The Cross Device Service is intended to facilitate features like clipboard sharing and notification syncing but appears to malfunction and enter a loop that increases memory usage. Microsoft has not officially acknowledged the problem, and while generic troubleshooting steps have been suggested, they may not resolve the issue for all users. Disabling the Phone Link feature has been proposed as a potential solution to mitigate memory consumption.

Tech Optimizer

July 11, 2026

Norton 360 Deluxe by Gen Digital Inc. – multi-device security with VPN bundled

Norton 360 Deluxe is a subscription service from Gen Digital that combines antivirus, firewall, VPN, and password management tools, covering up to five devices across various platforms. It includes features such as Norton Secure VPN, cloud backup for Windows PCs (up to 50 GB), Norton Password Manager, a smart firewall, and real-time malware scanning. The service is priced at €34.99 for the first year in Germany and around .99 in the U.S., with higher renewal prices. It is designed for households and small offices, providing multi-device coverage and ease of use. Norton 360 Deluxe is available through Norton’s website and retailers like Amazon, and it is recommended by review platforms for its comprehensive security features.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

Winsage

July 10, 2026

Microsoft’s new Windows 11 recovery tool is the ultimate Undo button

On July 19, 2024, at 12:09 AM EDT, 8.5 million Windows PCs, including devices from half of the Fortune 500 companies and the leading U.S. cybersecurity agency, experienced a catastrophic failure due to the Blue Screen of Death, leading to reboot loops. IT teams had to physically access each machine to resolve the issue by removing a problematic CrowdStrike file. CrowdStrike released an automated remediation tool three days later, on July 22. Microsoft pledged to improve Windows' resilience, introducing Quick Machine Recovery nearly a year later. Microsoft unveiled a new recovery feature called Point-in-time Restore, which allows users to revert their PCs to a previous state when functioning correctly. This feature generates daily snapshots of the entire system using the Volume Shadow Copy Service, retaining the three most recent snapshots and consuming minimal disk space (typically 2% of the system drive). Users can access the restore point through the Windows Recovery Environment after three failed startups, with the restoration process taking 30 to 45 minutes. Point-in-time Restore differs from System Restore, which creates less comprehensive snapshots and preserves document files. Point-in-time Restore is automatically enabled for systems with at least 200 GB drives in retail or OEM editions of Windows Home or Pro, while it must be manually activated for smaller drives. In Windows 11 Enterprise edition, it is disabled by default and may require administrative approval to activate. The feature intelligently manages disk usage, discarding older snapshots as needed, but users must enter a BitLocker recovery key if their system drive is encrypted. Users are warned about the risk of losing unsaved work when applying a restore snapshot, and reversing the operation is not straightforward.

Tech Optimizer

July 10, 2026

Your Antivirus Has A Blind Spot, And Advanced Persistent Threats (APTs) Know Where It Is

Advanced Persistent Threats (APTs) are a type of cyber threat characterized by long-term infiltration aimed at stealing sensitive data or surveilling communications, often orchestrated by well-funded groups. Unlike traditional malware, which seeks immediate disruption, APTs employ a methodical approach, spending weeks mapping out networks and identifying valuable credentials. Traditional antivirus solutions often fail to detect APTs because they rely on signature-based detection, which is ineffective against custom malware. APTs frequently use legitimate tools already present on systems, making detection challenging, and some forms of APTs operate directly from memory without writing to disk, evading traditional scans. To combat APTs, a multifaceted strategy is recommended, including behavioral detection, network monitoring for unusual patterns, and a mindset of skepticism towards all network activities.

Tech Optimizer

July 9, 2026

As phishing attacks evolve, demand is growing for sophisticated antivirus software

ESET NOD32 Antivirus is designed for Windows users, providing protection against various digital threats such as viruses, spyware, rootkits, phishing attacks, and ransomware. It features a lightweight architecture that minimizes CPU and memory usage, allowing for seamless background operation and real-time threat detection without system sluggishness. The software employs machine learning, behavioral analysis, and cloud-based intelligence for advanced threat detection, enabling it to recognize both established and emerging cyber threats.

Tech Optimizer

July 9, 2026

This antivirus doesn’t slow your PC down — it quietly keeps it safe for $19.99

ESET NOD32 Antivirus for Windows is available for .99 for a one-year subscription. It operates in the background, providing protection against malware, phishing, and ransomware without causing noticeable slowdowns. Key features include a Ransomware Shield, Anti-phishing Protection, Gamer Mode, and AI-assisted Threat Detection. It is designed for users who multitask, stream, or game, allowing for uninterrupted productivity.