resolution Archives

Winsage

June 6, 2025

Microsoft shares script to restore inetpub folder you shouldn’t delete

Microsoft has released a PowerShell script to help restore the C:Inetpub folder, which is crucial for addressing a high-severity privilege escalation vulnerability associated with Windows Process Activation. The folder's unexpected appearance after the April 2025 Windows security updates led some users to delete it, inadvertently exposing their systems to vulnerabilities. Microsoft emphasizes that the folder should not be deleted, as it is integral to the security framework, regardless of whether Internet Information Services (IIS) is active. The script allows administrators to recreate the folder with the correct permissions and access control settings.

Winsage

June 6, 2025

Your Windows PC might be at risk if you deleted the “inetpub” folder, but there’s a fix

Windows users have encountered a new "inetpub" folder on their primary drive after the April 2025 Patch Tuesday update. This folder is empty and occupies no storage space, but many users have deleted it out of concern. Microsoft has stated that the folder is part of a security patch for vulnerability CVE-2025-21204 and should not be removed, as it is linked to Internet Information Services (IIS). Users can restore the folder using a PowerShell script if they have deleted it. The folder addresses a security flaw related to improper link resolution that could allow local attackers to manipulate files. Instructions for restoring the folder include running PowerShell as Administrator, allowing signed scripts, downloading a specific script, and applying the fix.

Winsage

June 2, 2025

Microsoft issues out-of-band patches for Windows 11 startup failure

Microsoft invests significant resources into patch testing prior to software release, but the complexity of modern software makes it nearly impossible to account for every potential scenario. Tyler Reguly, associate director of security R&D at Fortra, states that human intervention is required at large scales, and humans are fallible. The transparency of Root Cause Analysis (RCA) reports is limited, leaving stakeholders with only swift resolutions. When human error is identified, changes in processes or policies may be necessary, while edge cases can arise from various factors, especially in environments where hardware and virtualization intersect. Reguly notes the unpredictability of such systems and emphasizes the limitations of expecting comprehensive coverage in a complex technological landscape.

Tech Optimizer

June 2, 2025

Postgres Pro OpenTelemetry сollector

Alexey has developed the pgpro-otel-collector, an OpenTelemetry collector by PostgresPro, designed to gather metrics and logs from PostgreSQL databases. It collects PostgreSQL metrics using an internal metrics library, OS-level metrics such as CPU and memory usage, and PostgreSQL logs in CSV and JSON formats. The collector includes internal processors for batch processing and supports exporting to OTLP-compatible backends like Elasticsearch and Prometheus. Installation is straightforward, requiring configuration of the Postgres connection and data destination. The collector can gather a range of PostgreSQL statistics and supports advanced features like CFS and pg_wait_sampling. Future enhancements include support for additional system views, integration with Shardman and BiHA, collection of custom query-based metrics, and a Grafana dashboard. Alexey's background includes experience with various monitoring tools and a focus on PostgreSQL, leading to the creation of this collector.

Winsage

June 2, 2025

‘Two firm promises of USB-C on Windows 11’ — How Microsoft plans to eliminate connectivity confusion

USB-C ports are standard on contemporary Windows laptops, but not all deliver the same performance. A recent blog post by Microsoft revealed that 27% of Windows PCs with USB4 ports experience a "limited functionality" notification when connecting peripherals. This issue arises from inconsistent USB-C implementations by manufacturers, often leaving users unaware of their ports' capabilities. To address these challenges, Microsoft is updating the Windows 11 Hardware Compatibility Program (WHCP) to ensure that laptops shipping with Windows 11 version 24H2 will have WHCP certification. This certification guarantees universal USB data, charging, and display support across all USB-C ports, and full compatibility for USB4 ports with 40Gbps performance with Thunderbolt 3 and USB4 peripherals. The WHCP will enforce minimum capabilities for each USB-C version, requiring USB-IF certified silicon in certified laptops, ensuring USB Power Delivery capabilities for all ports, and mandating DisplayPort Alt Mode for external display support. Additionally, a new requirement for Microsoft's driver stack will ensure PCs receive the latest USB driver updates. USB4 introduces two performance tiers: 40Gbps and 80Gbps. New laptops with USB4 connections at 40Gbps will be required to ensure compatibility with USB4 and Thunderbolt 3 accessories. WHCP certification will also apply to 80Gbps USB4 ports, mandating 80Gbps transfer speeds and a specific mode for high-resolution displays. The WHCP certification will be enforced through a Hardware Lab Kit, incorporating user feedback and automated testing.

AppWizard

June 2, 2025

XWVM, the X-Wing mod that lets you play the Star Wars classic remade in Unity, is finally available to download

X-Wing is a classic space combat game that allows players to pilot an X-Wing, appealing to fans of the Star Wars saga. The game faces challenges on modern systems, as the Special Edition requires a joystick, while the Classic and Collector's CD-ROM editions can be played with a mouse and keyboard but suffer from performance issues, including inconsistent framerates and outdated graphics. The X-Wing Virtual Machine (XWVM) is a mod that revitalizes the game by enabling it to run within the Unity engine, providing smooth gameplay at modern resolutions and adjustable settings, and eliminating the need for a joystick. When paired with the HD asset pack, it enhances 3D models for spaceships, cockpits, and planets. Players can acquire X-Wing through platforms like Steam or GOG and install XWVM by downloading the core mod and unpacking the HD assets into the appropriate directory.

AppWizard

June 1, 2025

Painkiller RTX is a path-traced upgrade to a classic but almost forgotten shooter

Nvidia's RTX Remix is a tool that allows game modders to enhance classic PC games with path-traced visuals. One notable project is the transformation of the 2004 game Painkiller into Painkiller RTX, currently at version 0.1.6. This project utilizes a custom rendering technology called PainEngine, replacing the original Direct X 8.1 rendering with a path tracer, resulting in improved visuals such as real-time shadows and moving lights. The gameplay retains its fast-paced action focus, with enhanced mechanics through Havok physics, allowing for dynamic interactions with the environment. Painkiller RTX features significant upgrades in lighting, including dynamic lighting that interacts with moving objects and improved texture quality using Quixel megascan assets. However, the path-tracing technology requires robust hardware for optimal performance, and even mid-range GPUs like the RTX 4060 may struggle with frame rates during intense gameplay.

Winsage

June 1, 2025

I just tested the new Legion Go S — and it’s the Steam Deck killer I’ve been waiting for

The Lenovo Legion Go S is a handheld gaming device that operates on SteamOS, starting at a price of 9. It features an AMD Z2 Go chip, 16GB of RAM, and 512GB of storage in the base model, while the reviewed unit has an AMD Ryzen Z1 Extreme chip, 32GB of RAM, and 1TB of storage. The device has an 8-inch WQXGA (1920 x 1200) LCD display, a weight of 1.63 pounds, and includes ports such as a Micro SD card slot, two USB-C ports, and a headphone jack. The design is ergonomic with a Nebula color scheme, and it has responsive controls. The SteamOS version outperforms the Windows 11 variant in gaming performance, achieving higher frame rates in gameplay tests.

Winsage

May 31, 2025

New Malware Compromise Microsoft Windows Without PE Header

A new strain of malware has been operating undetected on Windows systems for several weeks, utilizing advanced evasion techniques that corrupt its Portable Executable (PE) headers to avoid detection. Security researchers discovered this malware embedded in the memory of a compromised system during an investigation, using a 33GB memory dump that revealed its presence in a dllhost.exe process with process ID 8200. The malware, classified as a Remote Access Trojan (RAT) by Fortinet, employs batch scripts and PowerShell commands for its attack and has capabilities for screenshot capture, remote server functionality, and system service manipulation. Its command and control infrastructure uses encrypted communications, complicating detection efforts. The malware's distinctive feature is the deliberate corruption of DOS and PE headers, which hinders reverse engineering and complicates the reconstruction of the executable from memory dumps. Researchers had to manually locate the malware’s entry point and resolve complex import tables for it to function in a controlled environment.

Winsage

May 31, 2025

Microsoft Debuts Windows Update Orchestration Platform For Updating All Apps From A Single Place

Microsoft has introduced the Windows Update Orchestration Platform, which aims to centralize the management of line-of-business (LOB) and third-party applications through a single interface, enhancing the app update process for developers and users. Currently in private preview, the platform invites developers to explore its features, which include eco-efficient scheduling, consistent notifications, centralized update history, and unified troubleshooting tools. Developers can integrate their applications using Windows Runtime APIs and PowerShell commands to manage various aspects such as registration and update definitions. The initiative addresses challenges like CPU and bandwidth spikes, conflicting notifications, and increased support costs faced by users and IT administrators.