Windows PCs Archives

Winsage

July 10, 2026

Microsoft’s new Windows 11 recovery tool is the ultimate Undo button

On July 19, 2024, at 12:09 AM EDT, 8.5 million Windows PCs, including devices from half of the Fortune 500 companies and the leading U.S. cybersecurity agency, experienced a catastrophic failure due to the Blue Screen of Death, leading to reboot loops. IT teams had to physically access each machine to resolve the issue by removing a problematic CrowdStrike file. CrowdStrike released an automated remediation tool three days later, on July 22. Microsoft pledged to improve Windows' resilience, introducing Quick Machine Recovery nearly a year later. Microsoft unveiled a new recovery feature called Point-in-time Restore, which allows users to revert their PCs to a previous state when functioning correctly. This feature generates daily snapshots of the entire system using the Volume Shadow Copy Service, retaining the three most recent snapshots and consuming minimal disk space (typically 2% of the system drive). Users can access the restore point through the Windows Recovery Environment after three failed startups, with the restoration process taking 30 to 45 minutes. Point-in-time Restore differs from System Restore, which creates less comprehensive snapshots and preserves document files. Point-in-time Restore is automatically enabled for systems with at least 200 GB drives in retail or OEM editions of Windows Home or Pro, while it must be manually activated for smaller drives. In Windows 11 Enterprise edition, it is disabled by default and may require administrative approval to activate. The feature intelligently manages disk usage, discarding older snapshots as needed, but users must enter a BitLocker recovery key if their system drive is encrypted. Users are warned about the risk of losing unsaved work when applying a restore snapshot, and reversing the operation is not straightforward.

Winsage

July 10, 2026

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft has unveiled a destructive Windows backdoor named GigaWiper, which allows operators remote control over compromised systems to execute irreversible damage. GigaWiper originated from cyberattacks in October 2025 and is a composite of code from at least three malware families. It maintains its presence through a scheduled task disguised as “OneDrive Update,” executing at startup and every minute. GigaWiper can obliterate partition information, overwrite physical drives, and restart systems. It also mimics ransomware by encrypting files with the .candy extension, using randomly generated keys that are not stored, making recovery impossible. The malware has connections to the Crucio ransomware and resembles FlockWiper, with rewritten code in Go. GigaWiper features 20 command codes for various functions, including executing PowerShell instructions, managing processes, capturing screenshots, and remote access similar to VNC. It can remain on a system for surveillance until its destructive functions are activated. Microsoft Defender includes detection capabilities for GigaWiper, and users are advised to enable tamper protection and monitor for suspicious activities.

Tech Optimizer

July 9, 2026

LG Monitors Allegedly Install Software Without User Consent

Certain LG monitors are reportedly installing software on Windows PCs without user consent, including unsolicited advertisements for McAfee antivirus. This was discovered by a Reddit user who found the "LG Monitor App Installer" in their Windows event log. The application may install itself automatically via the Microsoft Store or Windows Update and is difficult to remove. Users can disable the app's automatic startup or uninstall it, but it may reinstall in the future. Windows Pro users can use the Group Policy Editor to prevent automatic installations of manufacturer-specific applications. The incident raises concerns about user control and transparency regarding unsolicited software installations.

Winsage

July 8, 2026

Trojanized LetsVPN installer gives attackers remote access to Windows PCs

A malware campaign has been discovered that exploits the VPN service LetsVPN. Researchers from ThreatLocker found a malicious Windows installer that pretends to be the legitimate LetsVPN application while deploying a remote access trojan (RAT) called GoodPersonRAT. The malware allows attackers to control infected systems using stealth techniques. The malicious installer first deploys the RAT and then installs the authentic LetsVPN application, creating an illusion of legitimacy. The package identified as Kuailian_win-setup.86.msi contains the legitimate LetsVPN installer, a loader, and an encrypted payload. GoodPersonRAT features include remote desktop control, file upload/download, command execution, proxying, keylogging, and clipboard monitoring. It specifically targets Telegram Desktop users by archiving critical account information and altering proxy settings. The malware ensures persistence through Windows services and scheduled tasks and can undermine security software. The LetsVPN installer is legitimate and signed, but the MSI package is unsigned and contains malicious components. Users are advised to download software only from official sources and verify digital signatures.

Tech Optimizer

July 7, 2026

Avast Premium Security from Gen Digital – multi-device protection tuned for US households

Avast Premium Security is a multi-device security suite developed by Gen Digital, designed for U.S. households and small offices. It includes antivirus, ransomware protection, firewall, and web shield features. The product offers plans for one device, up to ten devices, or unlimited devices, with pricing around .99 per year for a single device and .99 for up to ten devices. It is compatible with Windows PCs, Macs, Android phones and tablets, and iOS devices. Key features include real-time malware scanning, advanced ransomware shields, phishing site detection, and a configurable firewall. The software operates quietly in the system tray and provides notifications when threats are detected. Avast Premium Security is positioned in a competitive market alongside brands like Norton, McAfee, Trend Micro, and Kaspersky, and is part of Gen Digital's strategy for recurring subscription revenue. The product is available for purchase online and targets U.S. households and small offices seeking comprehensive protection.

Tech Optimizer

July 6, 2026

Protect Your Business Without Ruining the Budget: Bitdefender Antivirus Plus Is Just $20

Bitdefender Antivirus Plus is currently available for .99 (regularly .99) for a one-year subscription. It offers comprehensive protection features including real-time antivirus, multi-layer ransomware defense, anti-phishing tools, and advanced threat defense. Additional privacy features include Safepay, a built-in VPN with 200MB of encrypted traffic daily, a vulnerability scanner, and anti-tracking tools. The software operates seamlessly in the background with features like Autopilot, Bitdefender Photon, and Work Mode, ensuring minimal interruptions. Prices on StackSocial are subject to change.

Tech Optimizer

July 3, 2026

Bitdefender is now offering a 1-year subscription for $20

A 1-year subscription to Bitdefender Antivirus Plus is available for .99, reduced from its regular price of .99. The software provides real-time protection against various threats, including viruses and ransomware, and includes features like a built-in VPN with 200 MB of encrypted traffic daily, a vulnerability scanner, and anti-tracking capabilities. It is designed for easy setup and light performance impact, with automatic updates and a user-friendly dashboard. This offer is available to new and existing users in the United States and Canada.

Winsage

June 30, 2026

Microsoft 365 apps downloaded via MS Store is losing support on Windows 11, verify if you’re affected

Microsoft has announced the end of support for the Microsoft Store version of Microsoft 365 Apps. Support for this installation type will cease, with new feature updates ending in October 2025 and security updates concluding in December 2026. Users with the Store installation must upgrade to the Click-to-Run installation type. The Store installation uses Appx packaging and aligns updates with Windows Update, resulting in slower feature rollouts, while Click-to-Run allows for faster updates and better enterprise management. The transition to Click-to-Run is necessary due to limitations in the Store installation, including a lack of support for XML configuration and essential enterprise management tools. Users can check their installation type through the Account section of any Microsoft 365 app. Transitioning to Click-to-Run involves downloading the Office Deployment Tool, which will automatically remove the Store version and reinstall Office using Click-to-Run. IT administrators can also use the Office Deployment Tool for automatic transitions across multiple devices.

Winsage

June 27, 2026

CMA probes Microsoft business software over browser choice

The UK Competition and Markets Authority (CMA) is seeking comments on Microsoft's business software ecosystem, with responses from various stakeholders, including the Browser Choice Alliance (BCA). The BCA expresses concerns that Microsoft uses its dominance in operating systems and productivity software to promote its own browser, hindering competition. They argue that Microsoft's distribution strategies and design decisions limit user choice and innovation. The transition from Windows 10 to Windows 11 is highlighted as a critical factor, as it allows Microsoft to influence browser choices during upgrades. The BCA links browser competition to the adoption of AI tools, warning that competitive issues in the browser space could affect the AI domain if Microsoft employs similar tactics. They advocate for independent selection of AI tools to prevent distortion of competition and user choice. The BCA concludes that Microsoft's practices negatively impact user experience and productivity for businesses in the UK, damaging innovative browser developers.

Winsage

June 26, 2026

Microsoft gives Windows 10 users a reprieve by extending security updates another year

Microsoft has extended the Extended Security Updates (ESU) program for Windows 10 personal computers until October 12, 2027. This extension was noted in a revised support document and aims to give users more time to transition to Windows 11 while still receiving security updates. The ESU program, launched in June 2025, was initially set to conclude in October 2026. Currently, Windows 10 powers approximately 26% of desktop Windows PCs globally, with around 1 billion PCs still running it, according to Dell COO Jeffrey Clarke.