reinstall Archives

Winsage

July 16, 2026

Windows 11 has more recovery options than ever, and here’s exactly when I would use each one to fix a broken PC

Microsoft has enhanced Windows 11 with various recovery tools that allow users to address system issues without needing to perform a complete reinstall. Key features include: - Reset This PC: Offers two options: "Keep my files" (reinstalls Windows while retaining personal files) and "Remove everything" (wipes the computer before reinstalling). Users can choose between a Local reinstall or Cloud download. - Cloud Rebuild: Accessible via the Windows Recovery Environment (WinRE), it reformats the OS partition, downloads a fresh Windows image, and restores the original setup without relying on local recovery images. - Go Back (Rollback): Allows users to revert to a previous installation after an upgrade if issues arise, utilizing the Windows.old folder, but is time-sensitive (files purged after about ten days). - Uninstall Updates: Enables users to remove recent updates that may cause problems without a full system reset. - System Restore: Creates restore points to revert to a stable state without affecting personal files. - Startup Repair: A tool in WinRE that scans for and fixes common startup issues. - Safe Mode: Starts Windows with essential drivers and services to troubleshoot problems. - Quick Machine Recovery: Automatically connects to Microsoft's recovery service to download fixes if Windows fails to start due to a faulty update or driver. - Point-in-Time Restore: Automatically reverts the system to a previous working state when updates fail. Other tools include the Windows Recovery Environment (WinRE), Recovery Drive for bootable USB access, Command Prompt, Startup Settings, and the Windows Backup app for restoring settings and files. The legacy Backup and Restore (Windows 7) tool is still available for creating backups and full system images.

Tech Optimizer

July 15, 2026

Can Chromebooks Get Viruses? How to Protect Your Device

Chromebooks are designed with robust security features, including sandboxing, Verified Boot, automatic updates, data encryption, and Recovery Mode, which collectively reduce the risk of malware infections. However, they are still vulnerable to threats such as malicious Chrome extensions, scam Android apps from third-party stores, phishing attacks, and risks associated with using Developer Mode and cloud storage. Users can identify potential malware through signs like slow performance, unexpected pop-ups, and unusual battery drain. To remove malware, users should eliminate suspicious extensions, uninstall dubious apps, run antivirus scans, enable Google Play Protect, or perform a Powerwash to reset the device. To protect their Chromebooks, users should avoid Developer Mode, check app permissions, use two-factor authentication, verify website URLs, and use a VPN on public Wi-Fi.

Winsage

July 12, 2026

Microsoft Confirms Windows GDID Device Identifier That Cannot Be Disabled, Documented in FBI Case Filing

Microsoft has confirmed the existence of the Global Device Identifier (GDID), a unique identifier assigned to Windows installations, in a federal complaint against an alleged member of the Scattered Spider hacking group. The GDID is generated when a Windows system is set up with a Microsoft Account and remains active through various Windows updates. Disabling the GDID could disrupt Windows activation and access to Microsoft Store applications. The GDID is described as "a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device." It is created during the provisioning of Windows with a Microsoft Account and is stored in the Windows registry under HKCUSOFTWAREMicrosoftIdentityCRLExtendedProperties. The GDID remains persistent through Windows updates but is not retained after a clean reinstall. A single user can possess multiple GDIDs linked through their account, OneDrive, and activation history. The FBI used the GDID to track Peter Stokes, an alleged member of the Scattered Spider group, across various VPN connections and proxy servers. The GDID was recorded visiting specific websites and was linked to Stokes's accounts on platforms like Snapchat and Facebook. Concerns have been raised regarding user privacy, as the GDID is assigned without user consent and cannot be disabled without compromising essential Windows features. Microsoft has not committed to providing user-facing controls or comprehensive documentation for everyday users regarding the GDID. Legal requests can compel Microsoft to disclose GDID activity data to law enforcement. The GDID is linked to the Microsoft Account rather than the device itself, meaning reinstalling the operating system does not sever this connection.

Winsage

July 11, 2026

Windows 11 Has a Hidden Tracker – Here’s How to Limit It

Peter Stokes allegedly used sophisticated methods to obscure his identity during a breach at a luxury retailer, but the FBI uncovered his identity through a Global Device Identifier (GDID) linked to his Windows installation. GDID is a persistent device-level identifier that uniquely identifies a Windows installation and remains unchanged through operating system updates, only resetting upon complete reinstallation. Users cannot disable GDID, and attempts to remove it may disrupt Windows activation. To minimize data associated with GDID, users can opt for a local account, limit diagnostic telemetry, disable Activity history, and be cautious during reinstallation. VPNs do not prevent Microsoft from logging GDID, IP addresses, and URLs, making them ineffective for privacy on Windows. GDID has been described as a covert tracking beacon, and security experts advise against using Windows for sensitive tasks, suggesting alternatives like Linux.

Winsage

July 10, 2026

Windows 11 Has a Hidden Tracker – Here’s How to Limit It

Peter Stokes is involved in a breach with a luxury retailer, using tactics like VPNs and rotating IP addresses to hide his digital activity. The FBI discovered a Global Device Identifier (GDID) linked to his Windows installation, which is a persistent device-level identifier that uniquely identifies Windows installations. GDID remains unchanged through operating system updates but resets with a full reinstallation. Disabling GDID is not possible, as attempts to do so would disrupt Windows activation. Users can minimize data linked to GDID by using a local account, reducing diagnostic telemetry, disabling Activity history, and carefully managing reinstalls. VPNs do not prevent Microsoft from logging GDID, IP address, and URL data. Privacy researchers view GDID as a covert tracking mechanism, and Windows lacks user-facing options to reset this identifier, unlike Apple and Google.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

Tech Optimizer

July 9, 2026

LG Monitors Allegedly Install Software Without User Consent

Certain LG monitors are reportedly installing software on Windows PCs without user consent, including unsolicited advertisements for McAfee antivirus. This was discovered by a Reddit user who found the "LG Monitor App Installer" in their Windows event log. The application may install itself automatically via the Microsoft Store or Windows Update and is difficult to remove. Users can disable the app's automatic startup or uninstall it, but it may reinstall in the future. Windows Pro users can use the Group Policy Editor to prevent automatic installations of manufacturer-specific applications. The incident raises concerns about user control and transparency regarding unsolicited software installations.

Winsage

July 9, 2026

GDID Windows – Cut the tracker that follows you even through a VPN

In April 2026, the FBI apprehended an individual associated with the Scattered Spider group, who had concealed his online activities using a VPN. His efforts were thwarted by the GDID, a 64-bit Persistent Unique Identifier assigned by Microsoft upon logging into Windows. The GDID is stored in plain text in the registry and is linked to Microsoft’s servers, remaining unaffected by changes to IP addresses or attempts to delete it. Disabling Windows telemetry does not prevent the GDID from being accessed, as it operates through other services. To mitigate its transmission, users can disable certain services and modify the hosts file, although the GDID itself remains stored on Microsoft’s servers. Scripts are available on GitHub to audit and implement changes regarding the GDID. Transitioning to a local account does not guarantee anonymity, and for sensitive activities, using a live Linux system is recommended for better data control.

Winsage

July 8, 2026

Windows 11’s new Cloud Rebuild can fix your PC even when it won’t boot

Microsoft has introduced a new recovery feature for Windows 11 called Cloud Rebuild, aimed at simplifying the restoration of non-booting PCs without the need for physical recovery drives. Announced at the Ignite 2025 conference, it is available in the Windows 11 Insider Experimental Preview Build 26300.8772. Cloud Rebuild allows users to restore their PCs to a clean state by performing a full OS reinstall, downloading the necessary Windows image and drivers directly from Windows Update. This feature is designed for recovery scenarios and can be accessed even when the system is unresponsive. It may first attempt a Quick Machine Recovery, and if that fails, it will transition to a cloud-based reinstallation. To use Cloud Rebuild, users must navigate to Troubleshoot → Recovery and Uninstallation → Cloud Rebuild within the Windows Recovery Environment (WinRE), and it will erase all existing files on the computer. Currently, it is primarily aimed at system administrators, and users of Windows 11 Home may consider upgrading to Windows 11 Pro to utilize its features.

Winsage

July 8, 2026

You can soon restore Windows 11 from scratch even if it can’t boot up

Microsoft is previewing a recovery tool called Cloud rebuild for Windows 11, allowing users to reinstall the operating system from scratch even if it is unresponsive. This feature provides a clean version of Windows, free from previous drivers and files, and automatically includes the latest updates. Unlike the existing "Reset this PC" feature, Cloud rebuild does not retain personal files, settings, or applications, necessitating independent restoration of these elements. Users can test Cloud rebuild with the latest Windows 11 insider build (Preview Build 26300.8772 or higher) by navigating to Settings > System > Recovery. The timeline for broader availability is uncertain and depends on testing feedback. Other recovery options include recovery drives, resets, Quick Machine Recovery, and a preview feature called Point-in-Time restore.