DISM Archives

Winsage

February 26, 2026

Windows Update KB5077241 February 2026 Issues Nvidia GPU Bugs Task Manager Errors and ViVeTool Guide

Windows Update KB5077241, released in February 2026, is a 4.5GB feature update for the 24H2 and 25H2 versions. It poses significant performance risks for older hardware, particularly laptops and desktops without a Neural Processing Unit (NPU). Users with outdated Nvidia graphics cards, specifically the 900 Series (Maxwell) and 1000 Series (Pascal), report issues such as game stuttering, screen flickering, and system boot failures. The update also contains a flaw that inaccurately displays CPU usage in Task Manager, showing 0% utilization even under load. Many users face installation issues, encountering Error 0x800F0983, requiring them to delete update cache files and run repair tools. The update introduces features like a Taskbar Speed Test, Sysmon Security, improved Sleep/Wake functionality, and WebP wallpaper support, but many remain locked. Users can enable these features using ViVeTool with specific commands. Overall, the update is advised against for those with older Nvidia GPUs due to potential conflicts and performance issues.

Tech Optimizer

February 25, 2026

Fix “kernel security check failure”: Step-by-step guide

The "kernel security check failure" error on Windows indicates corruption in critical system memory or internal data structures, triggering a bug check to prevent further damage. It is marked by the Blue Screen of Death (BSOD) displaying the message “KERNELSECURITYCHECK_FAILURE” and stop code 0x139. Causes include outdated or incompatible drivers, corrupted system files, faulty RAM, disk errors, third-party software conflicts, faulty Windows updates, overclocking, and malware threats. Common fixes involve updating Windows and drivers, scanning for corrupted files, using Check Disk (CHKDSK), running Windows Memory Diagnostic, and performing System Restore. If unresolved, a clean installation of Windows may be necessary. Regular updates and avoiding unnecessary software installations can help prevent future occurrences.

Winsage

February 18, 2026

Releasing Windows 11 Builds 26100.7918 and 26200.7918 to the Release Preview Channel

Windows 11 Builds 26100.7918 and 26200.7918 (KB5077241) have been released for Insiders in the Release Preview Channel, covering versions 24H2 and 25H2. The update features a gradual rollout method for updates and includes various new features and enhancements: - Emoji 16.0 introduces a selection of new emojis. - Windows Backup for Organizations now includes a first sign-in restore experience. - Quick Machine Recovery (QMR) is activated for non-domain joined Windows Professional devices. - A built-in network speed test is accessible from the taskbar. - Taskbar improvements enhance the visual experience of the overflow area. - A new entry point in the account menu directs users to the Microsoft account benefits page. - Windows supports Microsoft Entra ID group and role SID resolution. - Users can control pan and tilt for supported cameras in the Settings app. - Sysmon functionality is now included natively in Windows for capturing system events. - Widget Settings now opens as a full-page experience in the Widgets app. - Users can set .webp image files as their desktop background. - The search process icon in Task Manager has been updated. - Storage Settings dialogs have been modernized, and performance for scanning temporary files has improved. - Enhancements have been made to Windows Update Settings for better responsiveness. - Reliability improvements have been implemented for the login screen and Nearby Sharing. - The Windows print service has been optimized for smoother performance during high-volume tasks. - File Explorer has received several improvements, including an extract all option for non-ZIP archive folders and enhanced reliability for displaying devices on the Network page. - Performance enhancements have been made to reduce resume-from-sleep time on heavily loaded systems. - Minor visual issues related to the taskbar, Windows Security pop-up credential fields, and the print dialog have been addressed.

Winsage

February 11, 2026

Users Solve Windows 11 Issues With Four Settings Checks

To address slowdowns and glitches in Windows 11, users should verify several settings before considering a complete reinstallation. Key actions include: 1. Check for Windows Updates: Navigate to Settings > Windows Update to install patches and update device drivers. Uninstall problematic updates if necessary. 2. Manage Startup Applications: Use Task Manager (Ctrl+Shift+Esc) or Settings > Apps > Startup to disable unnecessary auto-starting applications to improve boot speed. 3. Pause OneDrive Syncing: Temporarily pause OneDrive syncing during resource-intensive tasks to prevent performance degradation. 4. Adjust Visual Effects: Disable Transparency effects and Animation effects in Settings > Personalization > Colors and Settings > Accessibility > Visual effects, respectively, to reduce GPU strain. 5. Limit Notifications: Turn off notifications in Settings > System > Notifications to minimize interruptions. 6. Restrict Background Activity: Set background app permissions to "Never" for infrequently used applications to conserve memory and disk usage. 7. Run Security Scans: Use Windows Security to perform a Quick scan and ensure that real-time protection features are enabled to detect malware and adware. 8. Browser Maintenance: Reset browser settings, remove unknown extensions, and enable tracking protection to improve resource management. If issues persist, further steps include running System File Checker, testing memory, checking storage health, or performing a repair install of Windows.

Winsage

January 4, 2026

How to Install Windows Configuration Designer Using Winget Command

The Windows Configuration Designer is a tool from Microsoft that allows users to create provisioning packages for automating the setup of Windows devices. These packages, saved as .ppkg files, can pre-configure settings such as network configurations, user accounts, and device names. The tool is not pre-installed on Windows systems and is primarily intended for IT administrators. It can be downloaded from the Microsoft Store or installed via the command-line tool winget, which requires the package name to be enclosed in double quotes for proper recognition. The installation process involves opening a terminal as an administrator, checking for winget availability, and executing the installation command. The download size is approximately 30 to 50 MB, and installation typically completes in under a minute. Users can verify the installation by searching for the application or using winget commands. Alternative installation methods include using the Microsoft Store or the Windows Assessment and Deployment Kit (ADK). The tool is free and does not require a Microsoft account for winget installations.

Winsage

November 17, 2025

Windows 11 KB5068861 won’t install, File Explorer SMB search not working on network shares, and other issues

Windows 11 users are facing installation issues with the KB5068861 update from the November 2025 Patch Tuesday release, which addresses 63 critical security vulnerabilities. Errors reported include 0x80070306, 0x800f0983, and 0x800f081f. Affected users can wait for an optional release or use the Media Creation Tool, which downloads the same patch. Some users have reported a malfunctioning SMB search feature after the update. The installation errors have prompted reports of specific error codes, and attempts to resolve them through SFC scans or health checks have been largely ineffective. Downloading the .msu package from the Microsoft Update Catalog is recommended, followed by an installation attempt. If unsuccessful, the Media Creation Tool can be used while retaining user data. The November 2025 Update includes enhancements like a revamped Start menu, improved battery icons, and performance improvements, particularly for gamers. However, some users have encountered Bluetooth connectivity issues, especially on AMD PCs, with a temporary fix involving adjustments in Device Manager. The KB5068861 update has also caused a bug affecting search functionality over shared networks, leading to slower search results or empty listings for businesses. This issue arises from a breakdown in communication between the Windows client and the server’s search index. Users can restore functionality by restarting the Windows Search service or rebuilding the index. Additionally, the remote search functionality over SMB is compromised, preventing the Windows client from utilizing the server’s index. Users may need to uninstall the update to restore functionality, which requires disabling the Sandbox feature first. Specific DISM commands can be used to identify and remove the update, or it can be uninstalled through the Settings menu.

Tech Optimizer

November 5, 2025

Hackers Are Using Linux Malware to Invisibly Bypass Windows Security

Hackers are refining tactics to evade detection by EDR systems and antivirus software, with a notable strategy being the use of Linux malware to infiltrate Windows systems. Investigations by Bitdefender and CERT-GE revealed a campaign by the Russian hacker group Curly COMrades, which exploits the Hyper-V virtualization platform on Windows 10 to create covert access channels. They utilize Alpine Linux for lightweight virtual machines that are difficult to detect, requiring only 120 MB of disk space and 256 MB of RAM. The attackers maintain persistent access using tools like Resocks and Stunnel, starting their activities in early July 2024 by activating Hyper-V on compromised systems and deploying misleading virtual machines labeled “WSL.” They introduced custom malware, CurlyShell and CurlCat, for communication and remote access. This trend of using Linux malware against Windows systems is growing, as seen in recent Qilin ransomware attacks documented by Trend Micro.

Winsage

November 4, 2025

Russian Hackers Abuse Hyper-V to Hide Malware and Evade Endpoint Detection

A Russian-linked hacking group, Curly COMrades, is using Microsoft’s Hyper-V to conceal malware within compromised Windows systems. They install a small Alpine Linux virtual machine (VM) to run custom malware, evading endpoint detection and response (EDR) software since July. The group exploits Hyper-V's native features, enabling it on victim systems while disabling management clients to avoid detection. The VM, named “WSL,” hosts two C++ tools: ‘CurlyShell,’ a reverse shell, and ‘CurlCat,’ a reverse proxy, both designed to maintain persistence and obfuscate their activities. The VM occupies only 120MB of disk space and uses Hyper-V’s Default Switch for network traffic, making malicious communication appear to originate from the legitimate host. Additionally, Curly COMrades employs malicious PowerShell scripts for persistence and lateral movement, including creating local user accounts and using a modified TicketInjector for authentication across networks.

Winsage

September 29, 2025

I used DISM to create a Windows installer with all my apps, and here’s how it works

To back up a Windows 11 image, start with a fresh installation and use the Sysprep tool to generalize the system, avoiding Microsoft Store apps to prevent Sysprep failure. Prepare two external drives: one for storing the Windows image (minimum 8GB) and another bootable drive configured with Windows Preinstallation Environment (Windows PE). Download the Windows Assessment and Deployment Kit (ADK) and the Windows PE add-on to create the bootable USB drive. Enter Audit Mode by pressing Ctrl+Shift+F3 at the out-of-box experience screen, disable app updates, and install desired applications for the entire system. Use Sysprep to enter Out of Box Experience (OOBE), check Generalize, and select Shutdown. Boot from the Windows PE drive, use diskpart to identify drive letters, and capture the image with the DISM command. To apply the image on a new PC, create a diskpart script for partitioning and a batch script for applying the image. Boot the new PC from the Windows PE drive, run the diskpart script to create partitions, and execute the batch script to apply the image. This method is efficient for deploying consistent applications across multiple PCs.

Winsage

September 24, 2025

Microsoft releases out-of-band Windows 11 update to fix Office problems

Microsoft has issued an unscheduled update for Windows 11, designated as KB5068221, to address issues with Microsoft Office applications in virtualized environments. The update also provides a workaround for connectivity problems related to the deprecated Server Message Block (SMB) v1 protocol. The update is cumulative, including all security fixes from the earlier KB5065426 update. The specific issue fixed by the update involves a failure in Microsoft Office applications running in Microsoft Application Virtualization (App-V) environments due to a double handle closure in system components. Additionally, after installing the September 2025 Windows update, users may experience connectivity issues with SMB v1 on NetBIOS over TCP/IP. Microsoft suggests allowing network traffic on TCP port 445 as a workaround to switch the connection to TCP. The KB5068221 update is available for download from the Microsoft Update Catalog and requires installation of MSU files in a specific sequence. Instructions for installation include using Deployment Image Servicing and Management (DISM) commands for both running Windows PCs and Windows installation media.