script Archives

AppWizard

September 22, 2026

RatHat is a new Android malware that records your screen touches to steal passwords

Cybersecurity researchers at Zimperium have identified a new strain of malware called RatHat, targeting Android devices and linked to threat actors from China. RatHat uses generative AI to maintain persistence and control over infected devices. The malware is typically spread through social engineering, tricking users into downloading counterfeit applications that appear legitimate. Once installed, RatHat requests accessibility permissions, activates Wireless Debugging, and can capture text messages, create overlays, and steal passwords and multi-factor authentication codes. Its AI capabilities allow it to navigate the device interface in real-time, making detection by security software more difficult. To protect against RatHat, users should avoid downloading apps from untrustworthy sources, and removal requires a factory reset of the device.

Tech Optimizer

September 21, 2026

Thousands of hacked sites trick you into installing malware

More than 5,400 websites across over 2,200 organizations have been compromised to propagate malware, primarily affecting small businesses like clinics and online retailers. The attack mechanism involves malicious code that triggers a deceptive CAPTCHA, instructing users to execute commands that can download malware. Attackers are using the BNB Smart Chain test network to store instructions, making it harder for investigators to shut down operations. A newer variant of the attack uses WebRTC technology to establish encrypted connections for delivering additional malicious code. To protect against these threats, users should avoid pasting commands from websites, be suspicious of unusual CAPTCHA instructions, use strong antivirus protection, keep systems updated, take action if commands are executed, and small business owners should regularly verify their website's integrity.

Tech Optimizer

September 20, 2026

How to Remove a Keylogger: 12 Steps, 60 Min [2026]

A keylogger captures every keystroke made on a device and sends that information to an external source. In 2025, infostealer malware, including keyloggers, resulted in the theft of 642.4 million credentials from 13.2 million infections globally. In Australia, approximately 30,000 banking passwords were compromised between 2021 and 2025 due to this malware. The Australian Cyber Security Centre reported over 42,500 calls related to credential theft in one year, a 16% increase. Four main malware families dominate the landscape, with LummaC2 accounting for nearly 60% of credentials linked to infostealers in 2026. Keyloggers can be detected through signs such as typing lag, unexpected antivirus notifications, new browser extensions, and unexplained spikes in outbound data usage. Detection and removal steps include checking running processes, auditing startup programs, reviewing installed programs, running antivirus scans, and resetting passwords from a clean device. Keyloggers can infiltrate systems via phishing emails, malicious attachments, or compromised software downloads. Mobile devices can also be targeted by keyloggers disguised as legitimate apps.

Tech Optimizer

September 19, 2026

Set Up Bitdefender Antivirus Free: 13 Steps [2026]

Bitdefender Antivirus Free was upgraded to version 27.0.62.355 on September 11, 2026, introducing a new Advanced Threat Defense driver that enhances behavioral monitoring capabilities. The free version is designed for Windows only and promises to remain free indefinitely, lacking features found in paid versions such as anti-tracking tools and a full vulnerability scanner. The installation requires Windows 10 or 11, at least 2GB of free disk space, a local administrator account, an active internet connection, and a Bitdefender Central account. Users must remove any existing antivirus software before installation, and the installation process typically takes 60 to 75 minutes. Bitdefender Free covers one Windows device and offers robust malware detection capabilities, particularly with the Advanced Threat Defense layer. It is recommended to schedule regular scans and check the Notification Center for quarantined items. If uninstalled, the dedicated uninstall tool should be used to avoid leftovers that could interfere with future installations.

Winsage

September 19, 2026

These 4 built-in Windows tools helped me build a self-healing PC

Windows operating systems include built-in tools for maintaining PCs, allowing users to monitor system health, repair corrupted files, and recover from boot failures with minimal intervention. Task Scheduler automates maintenance tasks by triggering them based on schedules or events, accessible via the Start menu or taskschd.msc. It can activate tasks at fixed intervals, on startup, during idle periods, or in response to Event Viewer entries. Tasks should run with the highest privileges and can be configured to execute regardless of user sign-in status. The Settings tab allows missed tasks to run as soon as possible. DISM (Deployment Image Servicing and Management) is a command-line utility that repairs the component store, essential for installing updates and restoring system files. It offers three inspection levels: CheckHealth, ScanHealth, and RestoreHealth, with the latter requiring an internet connection for downloading replacement files. DISM logs operations in C:WindowsLogsDISMdism.log. SFC (System File Checker) verifies and repairs core operating system files using Windows Resource Protection. The command sfc /scannow checks all protected files, while /verifyonly provides a report without changes. SFC's effectiveness depends on the integrity of the component store, making it essential to run DISM first. Results are logged in C:WindowsLogsCBSCBS.log. Quick Machine Recovery (QMR), introduced in Windows 11, addresses boot failures by connecting to the internet to find solutions when repeated boot failures are detected. QMR is enabled by default on unmanaged devices and can continuously check for fixes. It is designed to respond to widespread issues rather than unique problems and may not work effectively on older hardware or without a network connection. Together, these tools provide a comprehensive approach to system maintenance in Windows 11, ensuring the operating system remains healthy and efficient without additional software.

Winsage

September 17, 2026

Windows Search’s default indexing mode could be writing gigabytes to your SSD every day for a feature almost nobody uses

The search index on Windows 11 can contribute to storage bloat, with reported sizes varying significantly among users. The search index database, named Windows.db, is crucial for delivering quick search results and can grow dramatically, with some users experiencing sizes exceeding 200GB. A PowerShell script can be used to check the size of the Windows.db file. If the file size is unusually large, users can rebuild the search index through the Indexing Options in the Control Panel. Windows 11 has two indexing modes: Classic and Enhanced, which affect the size and number of indexed items. Classic mode indexes specific folders, while Enhanced mode indexes the entire PC. Excluding certain directories can help manage index size. Performance issues may arise on PCs with over 400,000 indexed items.

Winsage

September 16, 2026

Harden Windows Defender: 12 Steps, 99.9% [2026]

Windows 11 includes Microsoft Defender Antivirus, which operates in the background and receives automatic updates. Its default settings focus on compatibility rather than maximum security, prompting the need for configuration to enhance protection. Prerequisites for configuration include: - Windows 11 version 24H2 or 25H2 - Fully patched build number (26100.9457 or newer) - Local administrator account for certain steps - Microsoft Defender Antivirus version 4.18.x - Windows PowerShell 5.1 run as Administrator - Stable internet connection - No active third-party antivirus software Steps to enhance Microsoft Defender include: 1. Confirming the current Windows 11 build. 2. Verifying that Defender is the active antivirus using PowerShell. 3. Enabling cloud-delivered protection and automatic sample submission via PowerShell commands. 4. Activating Tamper Protection through Windows Security. 5. Enabling Controlled Folder Access to protect against ransomware. 6. Deploying Attack Surface Reduction rules in audit mode. 7. Turning on Smart App Control. 8. Enabling Core Isolation and Memory Integrity. 9. Scheduling weekly full and offline scans. 10. Creating narrow exclusions for known safe applications. 11. Enhancing network protection and SmartScreen features. 12. Running a PowerShell verification script to audit settings. These steps aim to optimize Microsoft Defender Antivirus for improved security comparable to premium solutions.

AppWizard

September 13, 2026

Inzoi’s director says he is ‘very much focused on our core goals’ as he announces a multiplayer roleplaying mode designed to be like Ready Player One

Inzoi has faced criticism for being a "shallow imitation" of The Sims 4, according to life simulation expert Mollie Taylor. The game's director, Hyungjin "Kjun" Kim, is working on refining Inzoi and has introduced a new mode called 'Canvastown', which aims to enhance gameplay through dynamic interactions. Kim has hinted at the potential for "script mods" that would allow players to create mini-games, although it is unclear if players can develop these mods themselves. In contrast, another life simulation title, Paralives, has received positive feedback for its features and mechanics.

Winsage

September 12, 2026

Microsoft warns that killing VBScript could break Windows activation for businesses

Microsoft is phasing out VBScript and urging organizations to transition to PowerShell. The Slmgr.vbs tool, used for managing Windows activation, will lose functionality as VBScript is deprecated. Slmgr.vbs allows users to install product keys, activate Windows, and check licensing status. VBScript will soon only be available as a Feature on Demand, requiring manual installation in future updates. PowerShell's OSLicense module offers similar capabilities to Slmgr.vbs for managing activation information. The OSLicense module is available for Windows 11 users after the August 2026 Preview update and will be supported in the next major release of Windows Server. Organizations are advised to review their existing scripts and tools to adapt to this transition.

AppWizard

September 10, 2026

Fix: Embark Game Boot Fatal Error (Detected Software) ARC Raiders

ARC Raiders players may face issues launching the game due to the Embark Game Boot halting unexpectedly because of a fatal error. Two main error messages can occur: "Detected Software," indicating that the anti-cheat system has identified a disallowed process, and "Failed to install EasyAntiCheat," which suggests that the EAC service or driver could not be initialized. The first error can be triggered by an AutoHotkey-based utility, while the second may arise from a locked EAC file, another anti-cheat process, or an incomplete installation of the service. If players reach the menu but experience crashes, they should consult the ARC Raiders crashing and freezing guide for troubleshooting steps related to the Embark Game Boot or Easy Anti-Cheat. Specific error messages and their solutions include: - "Detected Software or Cheat Software Detected": Close the named process. - "Failed to install EasyAntiCheat or EAC is not installed": Run EAC uninstall and install scripts. - "Error 30005 or CreateFile failed with 32": Restart Windows to unlock the EAC file. - "Maximum simultaneous game instances reached": Close other games and anti-cheat processes. - "An ARAV code names AutoHotkey, an auto-clicker, Cheat Engine, a VM, or another tool": Stop the named program. - "An ARAV code ending in 005, 006, or 007": Verify the game installation in Steam. To resolve issues: 1. Check and close the program named by Embark Game Boot. 2. Repair Easy Anti-Cheat from the ARC Raiders Installer Folder. 3. Verify the ARC Raiders installation in Steam. 4. Reinstall ARC Raiders if previous steps fail, and provide detailed error information to Embark Support if issues persist. Players should ensure that any flagged processes are closed before attempting to launch the game or reinstall it.