Command Prompt Archives

Winsage

April 30, 2025

A mysterious new Windows 11 folder appeared – and now there’s a new exploit

Windows 11 users encountered the "inetpub" folder after the April 2023 update (KB5055523), which is a crucial component for addressing the security vulnerability CVE-2025-21204. Microsoft stated that the folder should not be removed, as it helps manage Windows Update security vulnerabilities by preventing unauthorized control through symbolic links. However, cybersecurity expert Kevin Beaumont revealed that the same patch introduced a new vulnerability that could allow remote exploitation, prompting Microsoft to acknowledge this issue with a "Moderate" status and indicate that a fix is forthcoming. Users are advised to keep their systems updated and not delete the "inetpub" folder. If the folder is deleted, it can be restored by enabling Internet Information Services in the Control Panel.

Winsage

April 29, 2025

This App Is the Easiest Way to Find, Install, and Update Software on Windows

Installing software on Windows can be tedious, requiring navigation through the Microsoft Store or manual downloads from official websites, which poses security risks due to potential malware downloads. Linux users benefit from streamlined software installation via package managers. Windows users can utilize a package manager called Winget for command-line installations, but UniGetUI offers a user-friendly visual interface for Winget and other package managers. UniGetUI allows users to search for and install applications easily, supports multiple package managers, and provides a Software Updates tab for managing updates across all sources. It also enables users to create and share bundles of applications for easy reinstallation.

Winsage

April 25, 2025

Microsoft’s Patch for Symlink Vulnerability Introduces New Windows Denial-of-Service Flaw

In early April 2025, Microsoft addressed a security vulnerability (CVE-2025-21204) related to symbolic links in the Windows servicing stack, specifically affecting the c:inetpub directory used by Internet Information Services (IIS). The updates created the c:inetpub folder with appropriate permissions to mitigate risks. However, this fix introduced a new denial-of-service (DoS) vulnerability, allowing non-administrative users to create junction points on the c: drive, disrupting the Windows Update mechanism. A command such as "mklink /j c:inetpub c:windowssystem32notepad.exe" could be used to exploit this flaw, preventing systems from receiving future security patches. As of April 25, Microsoft had not released a patch or acknowledged the issue, leaving systems vulnerable and emphasizing the need for monitoring user permissions and manually removing suspicious symlinks.

Winsage

April 25, 2025

Speed up your Windows 11 PC: 12 must-do tweaks and tips

Users transitioning from Windows 10 to Windows 11 often accumulate unnecessary files, creating an opportunity for digital cleanup to reclaim storage space. It is recommended to use Windows' built-in tools for this process. To start, users can launch the Disk Cleanup application to select and delete various categories of files, such as Lifetime Optimization Files from Windows Update. The Downloads folder should also be checked for large, unneeded files, which can be sorted by size for easier identification and removal. Additionally, outdated components can be removed via the command prompt using the commands: 1. dism.exe /online /cleanup-image /AnalyzeComponentStore 2. dism /online /cleanup-image /startcomponentcleanup This method can free up significant space, with reports of nearly five gigabytes reclaimed even on fresh installations. While third-party software is generally discouraged, programs like Wiztree are exceptions, as they efficiently scan disks and display files by size, aiding in the cleanup process. Users should avoid deleting files from critical folders and verify any uncertain files through web searches.

Winsage

April 24, 2025

An empty folder in Windows that «cannot be deleted» can permanently block OS updates

The inetpub folder, introduced in the April update of Windows 11 (version 24H2) as part of a fix for the CVE-2025-21204 vulnerability, has raised concerns among security researchers. It can be manipulated to block Windows updates without administrative rights by creating a symbolic link to notepad.exe, which can lead to a rollback of patches and leave the system vulnerable. Microsoft has not yet responded to this issue, and the possibility of a patch to address the new vulnerability is still open.

Winsage

April 24, 2025

Windows 11’s mysterious ‘inetpub’ folder might be more dangerous than we thought

Windows 11 users have been warned about a potential vulnerability associated with the inetpub folder, introduced in the April 2025 security update. Security researcher Kevin Beaumont raised concerns that hackers could exploit this folder to disable essential security updates by creating "junction points" within the system's directory. This could lead to installation errors or force a rollback to previous system states due to a denial of service (DoS) vulnerability in the Windows servicing stack. Microsoft stated that the inetpub folder is part of a security patch (CVE-2025-21204) and advised against deleting it, claiming that removal would not impact system performance.

Winsage

April 23, 2025

I tried installing Windows on an ReFS drive, and I actually don’t hate it

Microsoft has been developing a new file system called ReFS (Resilient File System) to eventually replace NTFS. Users can boot Windows 11 from an ReFS drive, but the setup process is complex and requires formatting the drive using the Command Prompt. After installation, Windows 11 operates normally on ReFS, offering advantages in data resiliency and durability, especially for virtual hard disks and Storage Spaces. However, performance tests show that ReFS is slower than NTFS across various metrics, indicating it may not provide speed enhancements for general use. ReFS is seen as a promising alternative to NTFS, with potential future improvements in performance, particularly for specialized workloads.

Winsage

April 19, 2025

Your Windows 11 Calendar flyout finally knows what time it is but only if you do this

Windows 11 has reintroduced the clock feature in the Calendar flyout, which was removed in a previous update. This feature is currently available only to users on Insider build 22635.5240 (23H2) within the Beta Channel, and is not accessible to those on stable versions of Windows 11. To enable the clock, users must use a tool called ViveTool, execute a command in the Command Prompt, and adjust settings in the Date & time settings page.

Winsage

April 18, 2025

How to Set Up Windows Terminal with WSL, PowerShell, and CMD for Maximum Productivity

Windows Terminal is a unified interface that allows users to access multiple command-line environments, such as Command Prompt, PowerShell, and Windows Subsystem for Linux (WSL), from a single application. It features a tabbed interface for running multiple sessions and supports split panes for side-by-side work. Windows Terminal is pre-installed on Windows 11 version 22H2 or later, while Windows 10 users can download it from the Microsoft Store. Users can add profiles for different shells, customize themes and appearance, configure startup actions, and define custom keybindings. The application enhances productivity by consolidating command-line tools and providing an organized workspace.

Tech Optimizer

April 16, 2025

Transition a pivot query that includes dynamic columns from SQL Server to PostgreSQL

The text discusses the process of migrating workloads from SQL Server to PostgreSQL, specifically focusing on the implementation of the PIVOT function. It highlights the limitations of using CASE WHEN statements in SQL Server for dynamic reports and introduces the crosstab function from PostgreSQL’s tablefunc extension as a more flexible alternative. The solution involves creating a PostgreSQL function called get_dynamic_pivot_data that utilizes crosstab to dynamically generate columns based on query results. To test the function, users need to provision either Amazon Aurora PostgreSQL or Amazon RDS for PostgreSQL and install a PostgreSQL client tool. For those using C#, .NET SDK 8 and Visual Studio Code must be installed. The text provides detailed steps for creating sample tables and stored procedures in SQL Server, along with the equivalent setup in PostgreSQL, including the use of the crosstab function and cursor management. It emphasizes the need for security measures, such as storing database credentials in AWS Secrets Manager. The author encourages sharing experiences related to implementing PIVOT functionality in PostgreSQL.