safe Archives

Winsage

July 28, 2026

Why Does Windows Explorer Use So Much Memory?

A user on Reddit reported that Windows Explorer was using over 21GB of memory, which can cause performance issues on systems with less than 8GB of RAM. One cause of excessive memory consumption is third-party shell extensions, which can be identified by booting into Safe Mode. A tool called ShellExView can help locate problematic extensions. To create a system restore point, users can press Win + R, type systempropertiesprotection.exe, click Create, enter a description, and click Create. Windows Explorer may also retain large caches of temporary data, leading to high memory usage. To clear temporary files, users can press Win + I, navigate to System > Storage > Temporary files, check the relevant boxes, and click Remove files. They can also manually clean the thumbnail and icon cache by deleting specific files in the %localappdata% directory. Corrupted system files can contribute to high memory usage, and users can run DISM and SFC tools to repair these files by accessing the Terminal (admin) and executing the commands DISM.exe /Online /Cleanup-image /Restorehealth and sfc /scannow.

AppWizard

July 27, 2026

My parents’ Android phones were ruined by invasive ads. Here’s how I fixed them for good

Mobile advertising on Android devices has seen a rise in deceptive pop-ups that mimic legitimate notifications or system updates, leaving many users, particularly less tech-savvy individuals, vulnerable. A personal experience highlighted this issue when a family member fell for a misleading PDF ad, leading to the installation of multiple fraudulent applications. Recently, similar deceptive ads were encountered on YouTube, raising concerns about the safety of family members who rely on their devices for important tasks. Discussions on platforms like Reddit have pointed out the prevalence of misleading ads on family-friendly platforms. The author expressed a desire to block all ads if companies cannot ensure their safety. To address the issue, the author sought an ad-blocking solution that allows for remote management and network-wide filtering, ultimately choosing NextDNS. This content filtering solution offers a free account with sufficient monthly DNS queries and supports individual profiles for tailored settings. The setup process for NextDNS involves creating profiles for each family member, allowing for distinct settings and blocklists, and configuring devices with the provided DNS-over-TLS endpoint details. While NextDNS is effective, it does not eliminate all ads, particularly those from platforms like YouTube, indicating that additional measures may be necessary for comprehensive security. Regularly reviewing app permissions and uninstalling unnecessary applications are also recommended for enhancing security.

AppWizard

July 27, 2026

Wave of WhatsApp suspensions sweeps across Israel, raising concerns of blocked accounts

A recent surge in WhatsApp account suspensions in Israel has caused concern among users about the security of their accounts. The Israel Internet Association advised users to safeguard their important data. Yonatan Ben-Horin from the Safe Internet Hotline noted that the inquiries received during this period were different from typical complaints, with users reporting suspensions after sending innocent messages to businesses or contacts. The suspensions were linked to messages directed towards businesses and not to unfamiliar numbers. The Israel Internet Association has reached out to Meta to address the situation and is collecting reports from affected users. Ben-Horin emphasized the importance of maintaining independent backups of information, as many users rely on WhatsApp for communication and reminders.

AppWizard

July 26, 2026

Quick ways to clear cache and fix software conflicts on Android phones

Modern Android smartphones can experience sluggish behavior over time due to the accumulation of temporary data files or conflicts between applications. To enhance performance without a factory reset, users can follow these six methods: 1. Clear individual app cache by navigating to settings, selecting the app, and choosing the clear cache option. 2. Wipe browser cache and saved cookies by accessing browser settings, going to the privacy menu, and selecting the clear browsing data option. 3. Use built-in device care and optimization tools found under "device care" or "storage optimization" in settings to remove unnecessary files and cache. 4. Boot into safe mode to identify problematic third-party apps by pressing and holding the power button and selecting the safe mode prompt. 5. Reset app preferences to fix permission bugs by navigating to the main Apps menu, tapping the menu icon, and selecting the reset app preferences option. 6. Keep the system and apps fully updated by checking for system updates in settings and ensuring all installed apps are up to date in the Google Play Store.

Tech Optimizer

July 26, 2026

How to Stop McAfee from Running on Windows

McAfee offers features such as file scanning, network traffic filtering, VPN services, and browser warnings to protect users. Users can pause Real-Time Scanning by opening the McAfee app, selecting Real-Time Scanning under My Protection Widgets, and turning it off. To disable the Advanced Firewall, users must access the Advanced Firewall section in the app and turn it off. Scheduled scans can be stopped by navigating to Scheduled Scans in the app and clicking Turn off. To prevent Secure VPN from reconnecting, users can toggle it off in the Home tab and set Auto Connect to Never connect automatically. Browser protection features can be managed by toggling off McAfee WebAdvisor in Chrome, Edge, and Firefox. Users can block fake McAfee popups by adjusting notification settings in their browsers. To prevent McAfee startup helpers from opening, users can manage startup settings in Windows. To completely remove McAfee, users should uninstall it through Settings or Control Panel and follow the prompts. If remnants remain, the MCPR tool can be used for complete removal. Microsoft Defender will reactivate automatically after McAfee is uninstalled.

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

AppWizard

July 24, 2026

I replaced my old Android Auto sideloading method with this, and it’s so much easier

The process of sideloading apps for Android Auto can be complex due to varying permissions by device and app. Users often face issues with platforms like Android Auto Apps Download (AAAD), which may go offline. Some beneficial sideloaded apps include AABrowser for internet browsing and CarStream for watching YouTube. A new sideloading method allows users to bypass AAAD, ensuring app icons appear in the vehicle's infotainment system. This method was effective on a Pixel 10 Pro running Android 17 without being rooted, but results may vary on other devices. To enable this method, users must activate Developer Mode on their Android device and Android Auto. It is important to install apps from reputable sources, such as GitHub, as recent updates to Android Auto may remove sideloaded apps that circumvent restrictions. After enabling the Unknown Sources option in Android Auto's developer settings, users can install apps like AABrowser, which then appears in the Android Auto launcher and the vehicle's infotainment system.

AppWizard

July 23, 2026

Active Exploitation Alert: Fake Bahrain Alert App Deploys Advanced Android Surveillance Malware Targeting Gulf Region Users

A cyber-espionage campaign has been identified involving a counterfeit Bahrain Alert Android application designed to surveil individuals in Bahrain and the Gulf region. The app masquerades as an official civil defense tool and employs social engineering tactics to compromise Android devices, extract sensitive data, and maintain remote access. It targets high-value individuals such as activists and journalists, particularly during civil unrest and missile alerts, leveraging trusted government branding to increase infection rates. The malware features a complex, multi-stage architecture with advanced evasion techniques and is distributed through phishing links and malicious websites. It initiates a four-stage infection process, ultimately installing a remote access trojan (RAT) that enables covert surveillance and encrypted communications. The malware can monitor device activity, capture credentials, and intercept communications, while also employing mechanisms to avoid detection and maintain persistence. The campaign primarily targets Bahraini citizens, exploiting fear during crises to encourage app installation. Although there are indications of Russian-speaking developers involved, there is no definitive attribution to a specific nation-state or APT group. Mitigation strategies include monitoring for suspicious app installations, user education on verifying app authenticity, and blocking known malicious domains.

Tech Optimizer

July 22, 2026

Advanced SystemCare 19 Cleaned 3GB Hidden Junk From My PC

The user experienced a slow computer with prolonged startup times and storage shortages despite manual cleanup efforts, including emptying the Recycle Bin and using Windows Disk Cleanup. A deeper system scan revealed hidden junk files such as temporary files, browser cache, and outdated logs. The user then utilized Advanced SystemCare 19 Free, which effectively identified and removed 3GB of junk files, resulting in improved startup speed, program launch times, and overall performance. Advanced SystemCare also includes features like a registry cleaner, large file finder, disk cleaner, and app/extension cleaner, and it serves as a comprehensive system optimization suite with tools for enhancing boot time and protecting privacy. The software does not delete files automatically and should be used alongside antivirus software for complete protection.

Tech Optimizer

July 21, 2026

I Built My Second ETL Pipeline. This Time, I Started Thinking Like a Data Engineer

The author transitioned from a data analyst role to a data engineer, creating a 12-month self-study roadmap focused on learning by building projects. The first project was a GitHub ETL pipeline, which evolved from a simple Python script to a more complex system using SQLite and GitHub Actions for automation. The author realized that the challenges of data engineering lay in system design and orchestration rather than just writing ETL logic. For the second project, the author built an automated RSS ingestion pipeline to explore engineering decisions in creating a reliable data pipeline. The project emphasized the importance of separating application responsibilities from orchestration tasks, leading to the use of Docker for consistent execution environments and Kestra for orchestration. The author validated each component of the project incrementally: first the Python ETL, then PostgreSQL, followed by Docker, and finally Kestra. This approach ensured that each layer functioned correctly before adding complexity. The final architecture included distinct responsibilities for each component: Python for data processing, PostgreSQL for data storage, Docker for execution, and Kestra for orchestration. The author learned that effective engineering involves considering system reliability, error handling, and observability, shifting the focus from merely writing code to designing entire systems. The experience transformed the author's mindset, emphasizing the importance of incremental building and the separation of execution and orchestration responsibilities.