rootkits Archives

Winsage

September 5, 2026

Windows 11’s next security feature may cost you gaming performance

Memory Integrity enhances Windows 11 security by allowing only verified kernel-mode code to load, blocking unsigned rootkits and improving defenses against driver-based kernel attacks. It requires specific hardware for optimal functionality. The combination of Hypervisor-Protected Code Integrity (HVCI) and Virtualization-Based Security (VBS) may result in a performance decrease in gaming, with reported slowdowns of up to 15 percent. Microsoft acknowledged in 2022 that these features might impact gaming performance and advised gamers to consider temporarily disabling them for better performance, especially on older hardware. Tom’s Hardware reiterated this recommendation to balance security and user experience.

Tech Optimizer

August 27, 2026

This antivirus blocks viruses and ransomware without slowing your PC down

ESET NOD32 Antivirus is an antivirus solution designed to protect Windows PCs from various threats, including viruses, spyware, rootkits, and zero-day exploits, while maintaining system performance. It offers a one-year license for a competitive price and is recognized for its effective threat detection and minimal impact on system resources. Key features include real-time scanning, a Ransomware Shield that blocks file-locking attempts, advanced artificial intelligence for identifying new threats, and an anti-phishing feature that prevents access to fraudulent websites.

Tech Optimizer

August 26, 2026

AVG Antivirus Review 2026: Is the Free Version Enough?

AVG AntiVirus Free has an overall rating of 4.2 out of 5 stars, with specific scores of 4.7 for protection, 4.3 for performance and features, and 3.5 for customer support. The software is available for free or can be purchased starting at .88 for the first year, with pricing verified in August 2026. It achieved a 99.77% malware detection rate with only four false alarms and offers features such as real-time protection and Ransomware Protection. However, customer support is rated lower, and there are upselling prompts after scans. AVG is owned by Gen Digital and has been in operation for over 35 years, originally founded as Grisoft in the Czech Republic. The free version includes essential features like File Shield, Behavior Shield, Web Shield, Email Shield, and Ransomware Protection, while some features like Enhanced Firewall and Fake Website Shield are exclusive to paid versions. AVG's performance on Windows 11 has been validated by independent tests, scoring 6/6/6 in AV-TEST and achieving a 96.3% offline detection rate in AV-Comparatives. The software is available across multiple platforms, including Windows, Mac, Android, and iOS. AVG's customer support includes email and phone options, with a reasonable response time. The software is safe to install when downloaded from official sources, and it has been recognized for its effectiveness in malware detection.

Winsage

July 29, 2026

Missed Windows 11 Secure Boot? Don’t panic, Microsoft is still pushing it in the coming months

Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.

Tech Optimizer

July 11, 2026

ESET NOD32 antivirus just dropped a 1-year subscription to $20

ESET NOD32 Antivirus offers a one-year subscription for .99, reduced from the regular price of .99. It utilizes AI-powered analysis for real-time threat detection, including viruses, spyware, rootkits, and zero-day exploits. The software features a Ransomware Shield, anti-phishing measures, and Intel Threat Detection Technology for enhanced security. It includes a multithread scanning feature to optimize performance and a Gamer Mode that suspends notifications during full-screen applications. The ESET HOME app allows users to monitor licenses and security reports via mobile devices.

Tech Optimizer

July 9, 2026

As phishing attacks evolve, demand is growing for sophisticated antivirus software

ESET NOD32 Antivirus is designed for Windows users, providing protection against various digital threats such as viruses, spyware, rootkits, phishing attacks, and ransomware. It features a lightweight architecture that minimizes CPU and memory usage, allowing for seamless background operation and real-time threat detection without system sluggishness. The software employs machine learning, behavioral analysis, and cloud-based intelligence for advanced threat detection, enabling it to recognize both established and emerging cyber threats.

Winsage

June 25, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update to eligible Windows 11 and Windows 10 PCs ahead of the expiration of the Microsoft Corporation KEK CA 2011 on June 24, 2026. This update enhances device targeting data for automatic Secure Boot certificate updates. Secure Boot is a firmware-level security feature that verifies digital signatures of boot components to prevent rootkits and bootkits. The certificates for Secure Boot were first issued in 2011, with subsequent expirations for related certificates occurring in June and October 2026. Users can check their Secure Boot certificate status through the Windows Security app or System Information. If a PC does not receive the update, it will still boot normally but will lose the ability to receive future boot-level security updates. Multiple restarts after updates are expected due to the Secure Boot certificate process. A new folder, C:WindowsSecureBoot, is not malware but is used for staging cryptographic certificate files. Windows 10 users enrolled in the Extended Security Updates program will also receive the Secure Boot update, while those not enrolled will not. The expiration of the KEK CA 2011 means Microsoft will not be able to sign new Secure Boot revocation payloads using the old key, but existing signed payloads will remain functional.

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

Winsage

June 23, 2026

In 2011, Microsoft signed the Secure Boot certificates that still sit inside millions of Windows PCs, and the first one expires on June 24, 2026, leaving unupdated machines running normally while future boot-level revocations stop reaching them

Microsoft's Secure Boot certificates, including the Microsoft Corporation KEK CA 2011, will expire on June 24, 2026, followed by the Microsoft UEFI CA 2011 on June 27 and the Microsoft Windows Production PCA 2011 on October 19. New certificates issued in 2023 will replace these older ones. While devices will continue to operate and receive standard Windows updates, they will gradually lose access to critical security updates that protect against boot-level threats. After June 24, the ability to sign new disallowed signature database payloads with the old KEK will be lost, reducing the capacity to revoke compromised bootloaders. Users are advised to keep Windows and firmware updates current, while enterprises may face challenges managing diverse machine inventories for updates.

Winsage

May 6, 2026

Microsoft confirms why Windows 11 updates might be weird right now, and look like they’re failing — but it’s nothing to worry about

Microsoft has acknowledged that some Windows 11 updates may require multiple reboots, particularly those related to Secure Boot certificates, which are essential for system security. These updates aim to protect against malware, especially rootkits, and ensure the effective functioning of Secure Boot. Some users have faced difficulties in receiving the new certificates due to firmware issues, but multiple reboots typically indicate that necessary security enhancements are being applied.