commands Archives

Winsage

August 23, 2026

“Sort of a feature,” Microsoft on why Ctrl+C fails on Windows 11 due to a design choice

Microsoft's clipboard history service operates asynchronously, which can cause issues when executing multiple copy commands quickly. This design choice can lead to scenarios where the clipboard is locked by another program, preventing new content from being copied. Common culprits include the Remote Desktop clipboard redirector and various background utilities like Intel Arc Control and HP Smart. The clipboard may fail to register rapid Ctrl+C presses, often only storing the last copied item due to the way the Clipboard history service notifies programs of changes. Developers can manage clipboard changes more effectively by using the Clipboard.HistoryChanged event from the WinRT clipboard API. Additionally, some applications may experience delayed rendering, leading to outdated or empty clipboard history. These clipboard issues have been present in earlier versions of Windows as well.

AppWizard

August 23, 2026

Red Dead Redemption 2 gets new lease of life with Mafia inspired expansion

Rockstar Games is not currently pursuing a new-gen update for Red Dead Redemption 2, leaving fans uncertain about the game's future. Meanwhile, a mod called 'Mafia 1899' has been created by NexusMods user M8Tmods, which enhances the game with new features and activities inspired by the Mafia franchise. This mod includes 13 mission types, such as protection rackets, wagon robberies, and assassinations, with several missions directly inspired by Mafia 1: Definitive Edition. Notable missions include the 'Police Files Heist,' 'Booze Wagon Heist,' 'Church of Holy Heist,' and 'Warehouse Heist.' The mod has received positive feedback from the community, with players expressing excitement and nostalgia for the new content. It integrates with the existing storylines of Arthur and John, and some players have suggested developing it into a standalone mode.

Winsage

August 23, 2026

I think Microsoft is finally fixing the customization problems that held Windows 11 back

Windows 11 is evolving into a more user-centric operating system, with recent updates enhancing customization options like moving and resizing the Taskbar and improving Start menu control. This change is part of Microsoft's Windows K2 initiative, which aims to boost performance and user experience. Initially, Windows 11's design aimed for simplicity but reduced user choices, leading to frustration. The context menu was simplified but became cluttered again, prompting updates that allow users to customize its organization. Microsoft recognizes that users have varied preferences for interacting with the OS, and the flexibility in Taskbar positioning enhances satisfaction. While the updates are positive, there is criticism that Microsoft should not be overly praised for restoring previously removed features. The goal is to maintain a modern interface while enhancing user experience without sacrificing functionality. Recent changes reflect an understanding that the issues with Windows 11 arose from removing options rather than having too many choices, guiding future updates to balance user-friendliness with customization.

Winsage

August 22, 2026

Hackers abuse FTP server banners to deliver new Windows malware

Threat actors are exploiting FTP banners to conceal commands for deploying two undocumented remote access trojans (RATs), E4del and PINHOLE. This method was first observed by MalwareHunterTeam in July 2026, using shortcut files (.LNK) and FTP server banners as dead-drop resolvers to retrieve malicious commands. SOCRadar confirmed that this technique has been weaponized since early July 2026 and remains active, with new infrastructure identified as recently as August 2026. The attacks typically start with a ZIP archive leading to an LNK-based infection chain, likely initiated through phishing tactics. E4del is a Node.js-based RAT disguised within a digitally signed Electron application mimicking Discord, capable of executing commands, capturing screenshots, streaming desktops, and downloading additional payloads. It also includes a module for privilege escalation. PINHOLE retrieves its command and control configuration from Pinterest and SurveyMonkey, designed to leave a minimal footprint and employing shellcode fluctuation. It supports 14 commands, including file management and credential theft, but had only recorded 11 execution events at the time of analysis. SOCRadar notes that while using FTP banners is a novel approach, it is less stealthy than traditional web-based dead-drop resolvers. They provide indicators of compromise to help identify malicious infrastructure and infected machines.

Winsage

August 22, 2026

Someone discovered that Windows 11 nukes your GPU drivers if you leave your laptop in eco mode

A user on the Zephyrus G14 subreddit discovered that using the eco power mode on Windows 11 for 15 consecutive days leads to the automatic deletion of GPU drivers. The eco mode power-gates the discrete GPU off the PCIe bus, causing Windows to treat it as disconnected. After 15 days of inactivity, Windows performs a cleanup and removes the GPU driver package. When switching back to standard power mode, the GPU is identified as a "Basic Display Adapter." Users can check if their GPU drivers have been removed using specific command prompt commands. To prevent driver cleanup, users can either switch to a non-eco power plan occasionally or modify the registry to set Autorun (DWORD) = 0.

Winsage

August 22, 2026

Researchers find way to weaponize Windows Defender’s own driver

Check Point Research revealed a technique that uses the boot-time remediation driver BTR.sys, part of Windows Defender, to execute kernel-level operations on Windows systems from Windows 7 to Windows 11 25H2. This method does not exploit software vulnerabilities but leverages BTR.sys, which is designed to remove locked malware components. Researchers reverse-engineered its undocumented protocol, leading to the creation of a proof-of-concept tool, BTR_CLI, that can install the driver as a service without standard management protocols. Once operational, BTR.sys can delete or move files, modify registry entries, and remove security binaries, including parts of Defender, during a specific period when the file system is writable. To exploit this technique, an attacker needs administrator privileges, specifically SeLoadDriverPrivilege. Although Microsoft does not consider this a critical issue due to the requirement of pre-existing administrative access, it highlights a significant potential vulnerability. There have been no documented real-world attacks using this technique.

AppWizard

August 21, 2026

New Android Malware Spotted Infecting Cars Via Software Updates

A new strain of Android malware has emerged, targeting automotive head units responsible for infotainment, connectivity, and navigation in vehicles. Discovered by Kaspersky in June, this is the first documented instance of malware affecting car head units, specifically within the firmware updaters of Android-based software developed by DoFun, a Hong Kong company. The malware, disguised as an application called JarService, infiltrates devices without user awareness. It is delivered through a legitimate system application called TWCore, which collects analytics and updates software. The malware aims to convert the head unit into a botnet, equipped with commands to download and execute code and display advertisements, potentially for online ad fraud. Kaspersky notified DoFun, which addressed the vulnerabilities, and noted similarities between this malware and a previous threat called BadBox, which affected various Android devices.

AppWizard

August 21, 2026

The latest Windows 11 update is borking some multiplayer games, but Arc Raiders’ developer has a quick workaround

Microsoft is investigating game crashes following the Windows update released on or after August 11. Symptoms include unresponsive game applications, unexpected closures, the error message "EXCEPTIONACCESSVIOLATION," and unexpected device restarts. Confirmed crashes have been reported in games such as Arc Raiders, Marvel Tōkon: Fighting Souls, and The Finals. Users can provide feedback through the Feedback Hub app. A temporary workaround suggested by Embark Studios involves commands in Command Prompt to stop and delete "inpoutx64" and its associated file. The update KB5121003 includes over 400 security updates, but it is unclear if they are responsible for the gaming issues. Some users have experienced graphical corruption in games like Valorant and Roblox, and uninstalling KB5121003 has resolved black screen issues for some. To revert Windows updates, users can search for Windows Update in the Start menu, click on Update history, select Uninstall updates, and uninstall update KB5120708.

AppWizard

August 21, 2026

Are your PC games crashing after the latest Windows 11 update? Microsoft is investigating whether a nasty new bug is the cause

Windows 11's latest update has caused significant issues for various PC games, with Microsoft acknowledging that some games have become unresponsive following the August patch. Affected titles include Arc Raiders, Marvel Tokon: Fighting Souls, and The Finals. Microsoft is investigating potential links to peripherals or internal components with RGB lighting, which may have problematic drivers like inpoutx64. Discussions suggest that tightened kernel handle validation in the update has exposed driver glitches, leading to game crashes. Players who have not installed the August update may remain unaffected. Suggested workarounds include removing the inpoutx64 driver file by using Command Prompt commands to stop and delete the driver, followed by deleting any instances of the file in the system directory. Many gamers are expressing frustration on social media, with some suggesting alternatives like Linux for a more stable gaming experience. Microsoft is currently investigating the situation.

AppWizard

August 21, 2026

How a Decade-Old Samsung Laser Printer Became a Minecraft Host Server

A Samsung C410W printer has been repurposed by a maker named vimpo to host a Minecraft server, leveraging its debug serial port and LAN Test Protocol. The printer, despite being from the mid-2010s, features Wi-Fi connectivity and has 23 megabytes of RAM. Vimpo crafted a payload to redirect execution to activate the printer's status lights, allowing the lightweight UCraft server to run. This server, with a binary size of about 46 kilobytes, enables basic gameplay for a single player but has limitations in processing power, leading to lag when multiple players connect. The exploit and server code are publicly available for others to replicate this project.