security software Archives

Winsage

April 21, 2025

April’s Windows 11 update is borking some PCs with CrowdStrike

The Windows 11 update KB5055523 has caused significant issues, including disruptions to Windows Hello logins, preventing users from using face recognition and PIN codes. It has also introduced bugs affecting business applications, particularly with SAP GUI, which may crash with error codes 0xc0000409 and 0x000b1c30 or fail to launch. These problems are linked to a conflict with the CrowdStrike Falcon Sensor security software, specifically when Additional User-Mode Data (AUMD) is activated. Users are advised to consider rolling back the update and postponing further Windows 11 24H2 updates until a solution is provided.

Tech Optimizer

April 12, 2025

I abandoned third-party antivirus tools, and here’s what I do instead

The author has transitioned from using third-party antivirus solutions to relying on Windows Security, which is built into Windows 10 and 11, due to its effectiveness and lack of cost. They emphasize the importance of keeping Windows Security updated and performing regular virus scans for added peace of mind. Ransomware protection features, such as Controlled Folder Access, are highlighted as essential. The Microsoft PC Manager app is recommended for optimizing system performance and security. The author advocates for good security hygiene, including avoiding suspicious emails and enabling two-factor authentication, as effective practices to maintain security without third-party antivirus software.

Tech Optimizer

April 9, 2025

Flaw in ESET Security Software Used to Spread Malware From ToddyCat Group

A vulnerability in ESET's software, designated as CVE-2024-11859, allows state-backed hackers to introduce a malicious dynamic-link library (DLL) that can be executed via the ESET antivirus scanner. This malicious code operates discreetly, avoiding detection by system alerts. ESET classified the issue as medium severity with a CVSS score of 6.8 out of 10 and urged users to update their systems promptly to mitigate risks.

Winsage

April 9, 2025

Microsoft resets ‘days since last Windows 11 problem’ to 0

Microsoft has implemented a compatibility hold for Windows 11 24H2 affecting devices using the sprotect.sys driver from SenseShield Technology, which is crucial for encryption protection in enterprise security software. This hold impacts all versions of the sprotect.sys driver, specifically versions 1.0.2.372 and 1.0.3.48903, causing potential disruptions such as unresponsiveness and black or blue screen errors. Users are advised not to force the Windows 11 24H2 update until the issue is resolved, and Microsoft is collaborating with SenseShield to investigate the problem. Additionally, Microsoft has previously issued holds for other issues related to Dirac Audio enhancement technology and AutoCAD 2022, raising concerns about the compatibility and stability of Windows 11 compared to Windows 10.

Winsage

April 8, 2025

Windows 11 24H2 is crashing on many PCs due to conflict with security driver

The Windows 11 version 24H2 is causing system crashes for some users due to a conflict with a security driver named sprotect.sys, associated with SenseShield Technology. This issue leads to unresponsiveness and Blue Screen of Death (BSOD) errors, particularly affecting versions 1.0.2.372 and 1.0.3.48903 of the driver. Microsoft has suspended the Windows 11 2024 update for systems using this driver, preventing users from receiving updates or manually installing them. Users experiencing blue screens can either revert to the previous version of Windows 11 or uninstall the update. Microsoft is working with SenseShield to resolve the issue, and users are advised to check the Windows Update page for notifications regarding fixes. Since its launch, Windows 11 24H2 has encountered various bugs and compatibility issues, leading to the blocking of the update for many PCs.

Winsage

April 7, 2025

Microsoft blocks latest Windows 11 24H2 update due to driver crashes

Microsoft is addressing complications from the Windows 11 24H2 update caused by an incompatible driver, sprotect.sys, developed by SenseShield Technology. This driver, used for encryption protection, has led to significant issues, including blue screen errors and black screen crashes. The problematic driver versions are 1.0.2.372 and 1.0.3.48903. Microsoft has implemented an update block (ID number 56318982) to prevent affected systems from receiving the Windows 11 24H2 update. They are collaborating with SenseShield Technology to resolve these issues and restore update eligibility for users.

Winsage

April 7, 2025

Windows 11 24H2 blocked on PCs with code-obfuscation driver BSODs

Microsoft has implemented a safeguard hold for Windows 11 version 24H2 for systems using the sprotect.sys driver from SenseShield Technology, to prevent crashes and BSOD errors due to compatibility issues. This hold blocks the Windows 11 2024 Update from being delivered via Windows Update. Affected users can identify their systems using the safeguard ID: 56318982 and should not attempt manual updates until the issue is resolved. Microsoft has previously lifted other compatibility holds for specific user groups and has enacted additional upgrade blocks due to incompatible software or hardware.

Winsage

April 6, 2025

Microsoft blocks Windows 11 24H2 update on some new PCs

Microsoft has informed Windows 10 users that their devices are not eligible for an upgrade to Windows 11 due to system requirements and recommends transitioning to a new PC with Windows 11. A new compatibility issue has arisen with the sprotect.sys driver, causing system freezes and errors on Windows 11 version 24H2, leading Microsoft to impose a compatibility hold on affected devices. This hold prevents these devices from being prompted to install Windows 11, version 24H2. Users with impacted devices will see a notification on the Windows Update page indicating no immediate action is required. IT administrators can monitor the issue using safeguard ID 56318982. Microsoft advises against forcing the update if the system is incompatible and is working with SenseShield Technology Co. to resolve the issue.

Tech Optimizer

March 31, 2025

Watch Out for This Info-Stealing Malware on Windows

A new malware strain called CoffeeLoader has been identified, posing a significant risk to gamers by masquerading as a legitimate ASUS utility, specifically the Armoury Crate software. Once it infiltrates a system, it deploys the Rhadamanthys infostealer, which can extract sensitive information such as credentials from web browsers, email clients, cryptocurrency wallets, and password managers. CoffeeLoader evades detection by most security tools by operating on the GPU instead of the CPU and using advanced techniques like call stack spoofing, sleep obfuscation, and exploiting Windows fibers. To protect against CoffeeLoader, users should exercise caution when downloading software, navigate directly to official websites, avoid suspicious links, and adhere to basic cybersecurity practices. If infection is suspected, users should disconnect from the internet, reboot in safe mode, delete temporary files, and check Task Manager for unusual activity. Employing a reliable malware scanner can help identify and eliminate infections.

Tech Optimizer

March 27, 2025

This dangerous new Windows malware hides from your antivirus while impersonating a popular PC brand

A new strain of malware called CoffeeLoader targets Windows users by pretending to be an ASUS utility, specifically imitating ASUS's Armoury Crate. It has sophisticated evasion techniques that allow it to bypass antivirus software. Once installed, it deploys infostealers like Rhadamanthys Infostealer to extract sensitive information. CoffeeLoader operates undetected by executing code on the GPU instead of the CPU, using Call Stack Spoofing to disguise its activities, and employing Sleep Obfuscation to encrypt itself in memory when inactive. It also exploits Windows Fibers to evade detection. To protect against CoffeeLoader, users should download Armoury Crate only from the official ASUS website and be cautious of deceptive links and ads that may lead to malware installation.