Zip Archives

Winsage

August 13, 2026

The guy who built Windows Task Manager in 1996 just remade it with a cyberpunk vibe — but there’s one big issue for PC users

Dave W. Plummer, a notable figure in programming, contributed significantly to Microsoft by introducing ZIP file support for Windows, adapting Space Cadet Pinball for Windows NT, and creating the Windows Task Manager, which debuted in 1996. He has shared insights from his time at Microsoft through his platform, Dave's Garage. Recently, he released a mockup of a redesigned Task Manager, named "Task Manager OG" (TMOG), which features a cyberpunk aesthetic and is currently available as a beta version for macOS, with a Windows version planned. TMOG combines elements of macOS's Activity Monitor and Windows Task Manager, providing essential system information and deeper diagnostics. The application is described as being half the size of the Windows Task Manager and is available for free download.

Winsage

August 8, 2026

There’s an x64 Port of Microsoft Word 1.1a for Windows

Developer John Marshall has successfully ported Microsoft Word for Windows 1.1a to run on Windows 11 as a native 64-bit executable. This project involved reconstructing the original application from the early 1990s by translating 16-bit Assembly language into C/C++ code and adapting it to modern Win32 APIs. Marshall's work was made possible by Microsoft's release of the source code for Word for Windows 1.1a in 2014. Users interested in setting up the port will need Visual Studio with the C++ workload, the latest Windows SDK, CMAKE version 3.25 or newer, and to execute specific PowerShell scripts provided by Marshall.

Winsage

August 5, 2026

I played DOOM inside MS Paint on Windows 11 by hijacking the clipboard, and it’s shockingly good

Mark Russinovich, the Chief Technology Officer of Microsoft Azure, has created a project called DoomPaint, which allows the classic game DOOM to be displayed within Microsoft Paint. The game operates through the ViZDoom engine, rendering frames headlessly and transferring them to Paint via the Windows clipboard. DoomPaint features full keyboard controls, sound effects, and a MIDI soundtrack, maintaining a frame rate of around 35 FPS. To run DoomPaint, users need to download the project from GitHub, ensure Python is installed, extract the folder, and run a batch file, which sets up a virtual environment and opens Microsoft Paint for gameplay. The default controls include movement with W/S or arrow keys, turning with A/D or arrow keys, strafing with Q/E, firing with Ctrl/F, and other functions assigned to different keys. The project uses the shareware DOOM1.WAD for the initial episode and additional maps from Freedoom due to licensing restrictions. DoomPaint differs from previous attempts to integrate DOOM into Paint by using Paint’s canvas as the sole display for the game. The clipboard race condition was addressed by allowing the application to own the clipboard as a reference-counted OLE data object. Sound effects come from ViZDoom through OpenAL, and music is played using a separate module that loops through the Windows MIDI sequencer. Russinovich utilized Claude Fable 5 for this project, demonstrating how AI tools can enhance software development.

Winsage

August 3, 2026

An official Microsoft engineer gives a favorite unofficial Windows 11 app a shiny polish

Microsoft is addressing performance gaps in Windows 11, particularly with built-in applications. Users have turned to third-party applications like Files, which has received a substantial update focusing on file extraction and folder loading improvements. The update includes enhanced user experience features, such as updated sidebar icons and improved management of encrypted archives. A notable addition is the integration of WindowSill into Files, allowing users to perform various tasks directly from file selections without opening dedicated applications. This integration provides context-aware actions for different file types, including images, PDFs, videos, and Office documents. The update also includes numerous bug fixes and performance enhancements. The latest version of Files, 4.2.2, is available for download on GitHub and the Microsoft Store.

AppWizard

July 30, 2026

How to Retrieve Deleted Facebook Messenger Messages?

Deleted Facebook Messenger messages are removed from the user's view but may still exist in local storage temporarily, while Meta retains server data for specific periods based on the deletion type. 1. Unsend / Remove for Everyone: Messages are removed from all chats for up to 14 days (or 6 hours for end-to-end encrypted chats). 2. Deleted Facebook Account: Messages are removed from active servers but may remain in backup storage for 90–180 days. 3. Deleted from Your Inbox Only: Messages are removed only from the user's view; the recipient retains their copy. To recover deleted messages, users can rely on backups through Google Drive or local copies, and Facebook's "Download Your Information" feature, which may not include unsent messages. Dr.Fone – Data Recover (Android) is a recovery software that can scan phone storage for remnants of deleted messages, supporting over 14 data types across more than 6000 Android devices without needing root access or USB debugging. Steps to recover messages using Dr.Fone: 1. Access the Data Recovery tool for Android and select “Recover Android Data.” 2. Initiate a read-only scan for messages. 3. Filter and preview messages, then restore them to a chosen export location. To prevent future loss of important messages, users can: - Enable Google Drive Backup. - Archive conversations instead of deleting them. - Download a Facebook Data Archive. - Screenshot critical messages. - Enable end-to-end encrypted chats. - Use Dr.Fone for regular backups.

Winsage

July 28, 2026

Why Does Windows Explorer Use So Much Memory?

A user on Reddit reported that Windows Explorer was using over 21GB of memory, which can cause performance issues on systems with less than 8GB of RAM. One cause of excessive memory consumption is third-party shell extensions, which can be identified by booting into Safe Mode. A tool called ShellExView can help locate problematic extensions. To create a system restore point, users can press Win + R, type systempropertiesprotection.exe, click Create, enter a description, and click Create. Windows Explorer may also retain large caches of temporary data, leading to high memory usage. To clear temporary files, users can press Win + I, navigate to System > Storage > Temporary files, check the relevant boxes, and click Remove files. They can also manually clean the thumbnail and icon cache by deleting specific files in the %localappdata% directory. Corrupted system files can contribute to high memory usage, and users can run DISM and SFC tools to repair these files by accessing the Terminal (admin) and executing the commands DISM.exe /Online /Cleanup-image /Restorehealth and sfc /scannow.

AppWizard

July 27, 2026

The best PS2 emulator on Android just gained LAN play support

ARMSX2 v2.6.5.1, the premier PS2 emulator for Android, has introduced multiplayer functionality through system link gameplay, allowing players to connect multiple consoles on the same internet network or via a mobile hotspot. This version also supports playing system link games over the internet with a VPN. Notable PS2 titles that support this feature include Gran Turismo 4, SOCOM series, Call of Duty 2: Big Red One, Star Wars: Battlefront games, and Tony Hawk titles. Additionally, ARMSX2 v2.6.5.3 includes a backup and restore option, enabling users to create a zip file of their app data, which is useful for fresh installations or custom folder management.

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

Winsage

July 24, 2026

Windows 11 is finally retiring UI relics from the Windows 95 era

Microsoft is retiring several outdated user interface elements from Windows 11, some dating back to Windows 95. The latest preview builds show a new File Explorer properties dialog box, part of Microsoft's initiative to replace antiquated dialog boxes with modern versions using WinUI 3. This modernization aims to enhance user experience but poses challenges due to the legacy nature of Windows 11, which may affect performance and third-party applications. Additionally, Microsoft is updating the Windows Run dialog to include a visual refresh and improved functionality, accessible via the Windows key + R shortcut. Users of Windows 11 Home may miss features available in Windows 11 Pro, with a special upgrade offer available.

AppWizard

July 23, 2026

Active Exploitation Alert: Fake Bahrain Alert App Deploys Advanced Android Surveillance Malware Targeting Gulf Region Users

A cyber-espionage campaign has been identified involving a counterfeit Bahrain Alert Android application designed to surveil individuals in Bahrain and the Gulf region. The app masquerades as an official civil defense tool and employs social engineering tactics to compromise Android devices, extract sensitive data, and maintain remote access. It targets high-value individuals such as activists and journalists, particularly during civil unrest and missile alerts, leveraging trusted government branding to increase infection rates. The malware features a complex, multi-stage architecture with advanced evasion techniques and is distributed through phishing links and malicious websites. It initiates a four-stage infection process, ultimately installing a remote access trojan (RAT) that enables covert surveillance and encrypted communications. The malware can monitor device activity, capture credentials, and intercept communications, while also employing mechanisms to avoid detection and maintain persistence. The campaign primarily targets Bahraini citizens, exploiting fear during crises to encourage app installation. Although there are indications of Russian-speaking developers involved, there is no definitive attribution to a specific nation-state or APT group. Mitigation strategies include monitoring for suspicious app installations, user education on verifying app authenticity, and blocking known malicious domains.