Fixing TV screen resolution on PC

Blue Screen of Death or Stop errors are definitely one of the most difficult issues to face in your Windows computer. One of them is the UNEXPECTED STORE EXCEPTION BSOD error. When you encounter this Stop error on your Windows 10 computer, this means that the store component has caught an unexpected exception. There are many potential causes for this error, but we’ve narrowed it down to a few specific causes – for one, this error could be caused by your antivirus program installed on your computer, two, it could also be caused by outdated hardware drivers on your computer, it could also be an error in the file system as well as some issue with the lock screen app, or even output to an unexpected port. Whichever the cause may be, you can use a couple of fixes laid out below. Make sure to carefully follow them.

Option 1 – Try to update your Display driver

• First, boot your computer into Safe Mode.
• After that, tap the Win + R keys to launch Run.
• Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
• After that, a list of device drivers will be displayed. From there, look for the Display Adapters and click on them.
• After that, right-click on each entry under the Display Adapters and select the “Uninstall Device” option from the menu.
• Now restart your computer.
• After restarting your computer, go to the Settings app and Check for Updates in the Windows Update section.

Note: You also have the option to go directly to the website of your graphics card manufacturers like NVIDIA, Intel, or AMD and go to the section called Drivers then check if there’s a new available update – if there is, download and install it.

Option 2 – Run both the System File Checker scan and DISM tool

If the problem is caused by corrupted system files, then you can use both the System File Checker and the DISM tool. To use them, follow the instructions below.

• Tap the Win + X keys or right-click on the Start button and click the “Command Prompt (Admin)” option. Alternatively, you can also search for “cmd” in the Cortana search box and right-click on Command Prompt from the search results, and select the “Run as administrator” option.
• After that, if a User Account Control prompt pops up, click on Yes to proceed.
• Once the Command Prompt window is pulled up, type the following command and hit Enter:

DISM.exe /Online /Cleanup-image /Restorehealth

• Wait for the process to be completed. Once it’s done, type the following command and hit Enter:

sfc /scannow

• The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

• Restart your PC.

Note: You should see the “Windows Resource Protection found corrupt files and successfully repaired them. Details are included in the CBS.Log %WinDir%LogsCBSCBS.log” message on your screen. On the other hand, if you see the “Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log %WinDir%LogsCBSCBS.log” message instead, then you should run the following command in Command Prompt:

findstr /c:"[SR]" %windir%LogsCBSCBS.log >"%userprofile%Desktopsfclogs.txt"

The command you entered will open up the logs on your Desktop where you can look for files that are causing the error on your computer manually.

Option 3 – Disable Fast Start-up

If you want your computer to boot faster, then you might have enabled Fast Start-up. This feature is ideal for computers that are using a hard disk drive. However, turning on this feature also means that when the computer boots, it might lag some drivers that are loaded when it initially boots up. Thus, it might be the potential cause of the UNEXPECTED STORE EXCEPTION BSOD error. Thus, you need to disable Fast Start-up. To do that, follow these steps:

• Boot your PC into Safe Mode.
• Then tap the Win + R keys to open the Run dialog box.
• Next, type in “control” to open Control Panel.
• After that, select Hardware and Sound and click on Power Options.
• Select “Choose what the power buttons do” from the left side menu pane and click on Change settings that are currently unavailable.
• Afterward, uncheck the “Turn on fast startup (Recommended)” entry and click on Save Changes.
• Now restart your PC for the changes to take effect and then check if the problem’s fixed afterward.

Option 4 – Try to run the Chkdsk utility

You can also run the Chkdsk utility to resolve the UNEXPECTED STORE EXCEPTION BSOD error. If your hard drive has issues with integrity, the update will really fail as the system will think that it’s not healthy and that’s where the Chkdsk utility comes in. The Chkdsk utility repairs hard drive errors that might be causing the problem.

• Open Command Prompt with admin privileges.
• After opening Command Prompt, execute the following command and hit Enter:

chkdsk /f /r

• Wait for the process to be completed and then restart your computer.

If you encounter error 0x8024500C after a Windows Update or when you were trying to update Windows Store apps, read on as this post will guide you in fixing the problem. This kind of Windows Update error indicates that the Windows Update service has been blocked. Here are some suggestions you could check out to resolve the Windows Update error 0x8024500C on your Windows 10 computer.

Option 1 – Try checking the status of all the Windows Update Services

You need to check if all the Windows Update Services are up and running or not. To do so, follow the steps below.

• Tap the Win + R keys to open the Run dialog box.
• Next, type “services.msc” in the field and hit Enter to open Windows Services.
• From the list of Services, look for the following services that support Windows Update:
  • Background Intelligent Transfer Service (BITS)
  • Delivery Optimization
  • Windows Update
  • Windows Update Medic Service
• Once you’ve found them, check if they are running just fine or not. if not, you can right-click on each entry and click on Start.

Option 2 – Run the Windows Update Troubleshooter

You might also want to run the Windows Update Troubleshooter as it could also help in fixing Windows Update Error 0x8024500C. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.

Option 3 – Try downloading and installing the Windows Updates manually

Error 0x8024500C might be due to a Windows Update that has failed. So if it is not a feature update and only a cumulative update, you can download the Windows Update and install it manually. But first, you need to find out which update has failed, and to do so, refer to the following steps:

• Go to Settings and from there go to Update and Security > View Update History.
• Next, check which particular update has failed. Note that Updates that have failed to install will be displayed under the Status column which has a label of “Failed”.
• After that, go to the Microsoft Download Center and look for that update using its KB number and once you find it, download and then install it manually.

Note: You can also use the Microsoft Update Catalog, a service from Microsoft that provides a list of software updates that can be distributed over a corporate network. With the help of this service, it can be easier for you to find Microsoft software updates, drivers as well as fixes.

Option 4 – Try checking the Registry settings

• Tap the Win + R keys to open the Run dialog box.
• Then type “Regedit” in the field and hit Enter to open the Registry Editor.
• After that, navigate to this registry path: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWindowsUpdate
• Then double click on “DisableWindowsUpdateAccess” located at the right side of the panel and make sure that its value is set to “0”. If not, you have to change it to “0”.
• Now restart your computer and check if error 0x8024500C is now fixed or not

Option 5 – Disable the Proxy server

• Tap the Win + R keys to open the Run dialog box.
• Then type “inetcpl.cpl” in the field and hit Enter to pull up the Internet Properties.
• After that, go to the Connections tab and select the LAN settings.
• From there. Uncheck the “Use a Proxy Server” option for your LAN and then make sure that the “Automatically detect settings” option is checked.
• Now click the OK and the Apply buttons.
• Restart your PC.

Note: If you are using a third-party proxy service, you have to disable it.

Option 6 – Try to reset the Microsoft Store cache

Just like browsers, Microsoft Store also caches as you view apps and games so it is most likely that the cache is no longer valid and must be removed. To do so, follow the steps below.

• Right-click on the start button and click on Command Prompt (administrator).
• Next, type in the command, “exe” and tap Enter. Once you do, the command will clear the cache for the Windows Store app.
• Now restart your PC and afterward, try opening Microsoft Store again.

Option 7 – Perform a System Restore

Performing System Restore might help you in fixing the Windows Update error 0x8024500C. You can do this option either by booting into Safe Mode or in System Restore. If you are already in the Advanced Startup Options, just directly select System Restore and proceed with the next steps. And if you have just booted your PC into Safe Mode, refer to the steps below.

• Tap the Win + R keys to open the Run dialog box.
• After that, type in “sysdm.cpl” in the field and tap Enter.
• Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
• After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.

There is a lot of high resource utilization by any process that slows down a Windows operating system and one of the services that could cause such a thing is the utcsvc.exe process. This particular process at times can cause high CPU and disk usage. So if you are currently facing this problem, read on as this post will guide you on how you can resolve the problem. UTC which stands for Universal Telemetry Client is a software that runs a service named Diagnostic Tracking Service or DiagTrak. This service is used by Microsoft to collect customer feedback, analyze customer’s problems, and push resolution via updates in order to make the Windows 10 operating system better. This service is an executable file that could be translated to Service Host and even though the process does not usually cause problems, there are actually times when it does especially if it results in high resource utilization. In such cases, you might want to consider disabling it to fix its high CPU and disk usage.

According to Microsoft:

“We collect information about you, your devices, applications and networks, and your use of those devices, applications, and networks. Examples of data we collect include your name, email address, preferences, and interests; browsing, search and file history; phone call and SMS data; device configuration and sensor data; and application usage.”

There are several ways you can disable the utcsvc.exe process. You can disable it using the Service Manager, Registry Editor, and Group Policy Editor. For more details, refer to the instructions laid out below.

Option 1 – Disable the Connected User Experience & Telemetry Service via Service Manager

Note that this option is for standalone systems, so if you’re not using one, refer to the next given options below.

• Tap the Win + R keys to open the Run dialog box.
• Then type “services.msc” in the field and tap Enter or click OK to open the Services Manager.
• From the given list of services, look for the Connected User Experience service. Once you found it, click on it and you’ll see its description which states:

“The Connected User Experiences and Telemetry service enables features that support in-application and connected user experiences. Additionally, this service manages the event-driven collection and transmission of diagnostic and usage information (used to improve the experience and quality of the Windows Platform) when the diagnostics and usage privacy option settings are enabled under Feedback and Diagnostics.”

• Next, right-click on it and select Properties.
• Now, change its Startup Type to Disabled and click on the Apply and OK buttons to save the changes made.

Option 2 – Disable the Connected User Experience & Telemetry Service via Registry Editor

• Tap the Win + R keys to launch the Run utility and type “Regedit” in the field and click OK to open the Registry Editor.
• Next, navigate to this registry path: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsDataCollection
• After that, right-click on the folder named “DataCollection” and select New > DWORD (32-bit) Value.
• Now name the new value “AllowTelemetry” and make sure that its Value data is “0” and then click on OK to save the changes made.
• Restart your computer.

Option 3 – Disable the Connected User Experience & Telemetry Service via Group Policy Editor

If you have to disable the service related to the Universal Telemetry Client for company-managed systems, then you can do that using the Group Policy Editor.

• Tap the Win + R keys to open the Run utility and type “gpedit.msc” in the field and hit Enter to open the Group Policy Editor.
• Next, navigate to this path: Computer Configuration > Administrative Templates > Windows Components> Data Collection and Preview Build
• After that, double-click on Data Collection and Preview Build to open its settings.
• From there, look for the “Allow Telemetry” item and double click on it to open its Properties.
• Next, set the radio button to Disabled and then click on the Apply button to save the changes made.
• Restart your computer.

Option 4 – Run the Hardware and Devices Troubleshooter or the Performance Troubleshooter

Hardware and Devices Troubleshooter:

• The first thing you need to do is click on Start and then on the gear-like icon to pull up the window for Settings.
• After opening Settings, look for the Update and Security option and select it.
• From there, go to the Troubleshoot option located on the left-hand side of the list.
• Next, select Hardware and Devices from the list and open the Troubleshooter and run it. Once it is doing its job, wait for it to complete the process and then restart the system.
• After the system restarts, check if the problem’s now fixed. If not, refer to the next option given below.

Performance Troubleshooter:

• Tap the Win + R keys to open the Run dialog box.
• Type “exe /id PerformanceDiagnostic” in the field and hit Enter to open the Performance troubleshooter.
• Then click on Next to get started. Wait until the process is completed.

External hard drives have become essential these days as they tend to be very useful to many users. They are usually used for storing system images like system backups, Windows installation media, or for personal use. However, if you are not able to utilize your external drivers for some reason then that could be a huge problem. One of the common issues with hard drives is when your USB device or external hard drive just keeps connecting and disconnecting. This kind of issue could be caused by a faulty USB port, some issues with the USB drivers, your computer’s Power Options, corrupted or damaged system files, and many other factors. The connecting and disconnecting issue with USB devices and external hard drives isn’t really new and has been experienced by many users for years now. Although this issue has somewhat decreased in Windows 10, there are still some users who encounter it every now and then. Worry not though for there are fixes that you can try to resolve the problem. Refer to the following straightforward solutions to resolve the issue with your USB device or external hard drive.

Option 1 – Plug your external device on a different port

If your USB device keeps on connecting and disconnecting then the first thing you can do is to try connecting it to a different port. This will help you isolate the problem. In some cases, the port where the USB is connected can be malfunctioning or obsolete so you need to check that possibility by plugging your USB device into a different USB port.

Option 2 – Update or reinstall your USB drivers

As mentioned earlier, the problem could be due to some issues with the USB drivers. It could be that it has to be updated or you need to reinstall it. To do that, follow these steps:

• First, click the Start button and type “device manager”.
• Then click on the “Device Manager” from the search results to open it.
• From there, look for the “Universal Serial Bus controllers” option and then right-click on each one of the USB drivers and select the Update Driver from the menu.
• Restart your PC and then click the “Search automatically for updated driver software” option.

You also have the option to update the motherboard and the USB driver from the manufacturer’s official website.

Option 3 – Try turning on the USB External drive

There are times when your system turns off some drives in order to conserve your computer’s power, etc. as a result, the driver that’s required to run your external hard drive properly ends up getting disabled. To fix this, you can prevent your system from turning off your external USB drive by following these steps:

• You need to make sure that the external drive is connected to your system first.
• Next, go to the Start Menu and type “device manager” in the field, and click on the appropriate result to open the Device Manager.
• After opening the Device Manager, expand the category of the Universal Serial Bus controllers.
• Then double click on your USB Mass Storage device and take note that the name might be different on your system.
• Now go to the Power Management tab and uncheck the checkbox for the “Allow the computer to turn off this device to save power” option and click OK to save the changes made.

Option 4 – Turn off USB Selective Suspend

Another thing you can try is to turn off USB Selective Suspend especially when the issue has something to do with the Power Options. There are certain systems that are configured to disable USB devices after some time which could be the root cause of the problem. Thus, you need to turn off USB Selective Suspend. Here’s how you can do it:

• In the Start Menu, search for “control panel” and open the related search result.
• Then go to Power Options and click on the “Change plan settings” option.
• Next, select “Change advanced power settings” and look for the USB settings and then expand it.
• From there, you will see the USB Selective Suspend setting. Disable it and click OK.
• Now restart your computer and check if it resolves the problem or not.

Option 5 – Format your drive

• To get started formatting your drive, tap the Win + E keys and then go to the access page of the drive.
• Next, right-click on the drive and select Format.
• After that, uncheck the “Quick Format” option and then format your drive properly.
• Now once the formatting process is finished, unplug the drive and plug it back in afterward.
• Check if the error is already fixed. If the drive is not initialized, tap the Win + R keys and hit Enter.
• After opening the Run dialog box, type “diskmgmt.msc” and hit Enter to open Disk Management.
• From there, right-click on the drive volume and select initialize disk.
• Next, select the correct partition type and proceed.

What is Active History? A new feature has been introduced in Windows 10 that allows users to stay connected to their tasks across their devices. This new feature is called “Windows Timeline” and using this feature, users could continue their tasks all over their Windows 10 computers as well as on devices that run Android and iOS as well. This new feature was included in Microsoft Launcher and Microsoft Edge on Android devices as well as in Microsoft Edge for iOS devices. In order for the feature to work, you have to send either Basic or Full data and diagnostics of your computer to Microsoft which would sync it all over your devices with the help of the cloud. And now since all your data is stored on your Windows 10 computer and with Microsoft under your account, it is easier for you to access the back and start where you left off. This kind of option is called Active History. In this post, you will be guided on how you can permanently disable Active History using either the Windows Registry or Group Policy. Before you go on further, it is recommended that you create a System Restore Point first in case anything goes wrong. This is a precautionary measure you must take so that you can easily undo the changes you’ve made. After creating a System Restore Point, proceed to the given instructions below.

Option 1 – Disable Active History via Registry Editor

• Tap the Win + R keys to open the Run dialog box and type in “Regedit” in the field and hit Enter to open the Registry Editor.
• Next, navigate to this registry key: ComputerHKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsSystem
• From there, check if you can find a DWORD named “PublishUserActivities”. If you can’t find this DWORD, just create one with the same name and make sure that the base is selected to Hexadecimal.
• After that, double-click on the DWORD and change its value from 1 to 0 to disable Active History.
• Restart your computer to apply the changes you’ve made successfully.

Option 2 – Disable Active History via Group Policy Editor

Note that this second option won’t work if you are using the Home edition of Windows 10. This is because the Group Policy Editor does not come with Windows 10 Home. So if you are not using Windows 10 Home, follow the given steps below.

• Tap the Win + R keys to open the Run box.
• Then type in “gpedit.msc” in the field and hit Enter to open the Group Policy Editor.
• Next, navigate to this path: Computer ConfigurationAdministrative TemplatesSystemOS Policies
• After that, double click on the configuration listing named “Allow publishing of User Activities” to open the configuration page which has the following description:

“This policy setting determines whether User Activities can be published. If you enable this policy setting, activities of type User Activity are allowed to be published. If you disable this policy setting, activities of type User Activity are not allowed to be published. Policy change takes effect immediately.”

• Now you have to select Disabled or Not Configured if you want to disable Publishing of User Activities or Enabled to Enable Publishing of User Activities depending on your preferences.
• Next, click OK and exit the Group Policy Editor and then restart your computer to successfully apply the changes made.

Microsoft has started building a unified store with Windows 8 and later with Windows 10 in order to make it easier for users to get safer and more modern applications for their Windows 10 devices. This unified store is called the Microsoft Store which is tied up with the Windows Update. The delivery for them both are quite similar which is why they also have some common errors as well as fixes for them. So in this post, you will be guided on how you can fix error 0x80246019 for both Microsoft Store and Windows Update in your Windows 10 computer. The error 0x80246019 might be caused by corrupted system files or missing ones or be due to some glitch in the component services and other possible causes but whatever the cause is, you can fix it with the help of the following fixes, make sure to follow each one of them carefully.

Option 1 – Reset Windows Update components

• Open Command Prompt with admin privileges.
• After that, type each one of the following commands and hit Enter after you key in one after the other.
  • net stop wuauserv
  • net stop cryptsvc
  • net stop bits
  • net stop msiserver

Note: The commands you entered will stop the Windows Update components such as Windows Update service, Cryptographic services, BITS, and MSI Installer.

• After disabling WU components, you need to rename both the SoftwareDistribution and Catroot2 folders. To do that, type each one of the following commands below, and don’t forget to hit Enter after you type one command after the other.
  • ren C:WindowsSoftwareDistribution SoftwareDistribution.old
  • ren C:WindowsSystem32catroot2 Catroot2.old
• Next, restart the services you’ve stopped by entering another series of commands. Don’t forget to hit Enter after you key in one command after the other.
  • net start wuauserv
  • net start cryptsvc
  • net start bits
  • net start msiserver
• Close Command Prompt and reboot your PC.

Option 2 – Toggle the Windows Insider Program settings

This option is only applicable to you if you are a part of the Windows Insider Program. If you are, then follow the steps below.

• First, you have to open Settings and go to the Update & Security section.
• From there select the Windows Insider Program.
• After that, select the “Stop Insider Preview builds” option and then restart your computer.
• Now open the Windows Insider Program again and check if it fixes error 0x80246019 or not.

Option 3 – Run the System File Checker Scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files with good system files that might be the cause why you’re getting error 0x80246019. To run the SFC command, follow the steps given below.

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

 Reboot your computer.

Option 4 – Run the DISM tool

You can also run the DISM Tool as it helps in repairing the Windows System Image as well as the Windows Component Store in Windows 10. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth” which could help in fixing error 0x80246019.

• Open the Command Prompt with admin privileges.
• Then type in the following commands and make sure to hit Enter right after you type each one of them:
  • Dism /Online /Cleanup-Image /CheckHealth
  • Dism /Online /Cleanup-Image /ScanHealth
  • exe /Online /Cleanup-image /Restorehealth
• Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 5 – Try to reset the Microsoft Store cache

Just like browsers, Microsoft Store also caches as you view apps and games so it is most likely that the cache is no longer valid and must be removed. To do so, follow the steps below.

• Right-click on the start button and click on Command Prompt (administrator).
• Next, type in the command, “wsreset.exe” and tap Enter. Once you do, the command will clear the cache for the Windows Store app.
• Now restart your PC and afterward, try opening Microsoft Store again and then try to install your app or update your computer again.

Option 6 – Run the Windows Update Troubleshooter

You might also want to run the Windows Update Troubleshooter as it could also help in fixing error 0x80246019. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.

Diablo 2 resurrected has hit official release and servers seem to be finally taken care of and everything seems to be running smoothly now. The game also received great praise from gamers and attracted old players of the original Diablo 2 game. Speaking of old players of old Diablo 2, they can transfer their old characters into remaster and continue playing them within this new great HD environment. There are some steps and requirements but we are here to help and transferred characters will bring full stash, inventory, and equipped items with them.

Requirements

There are not many requirements for this transfer to occur but they must be respected in order to be successful. The first thing is a minor requirement and somewhat annoying but it needs to be done, firstly fire up Diablo 2 resurrected and create a character, any kind of character with any kind of name, any kind of class. This strange requirement is to actually create a character folder and register it inside D2 resurrected so we can copy old ones there. The second requirement will be that characters that you wish to be transferred must be offline characters. Old battle net online characters cannot be transferred at this moment and probably will not be in the future as well. So for all of you that wish to transfer online characters, bad luck, for the rest of us casuals playing offline single-player mode, we can enjoy our characters.

Process of diablo 2 character trasfer

The process itself of transferring characters when previously mentioned requirements are met is just a simple and copy operation. If you have somewhere backed your characters go into your backup folder and copy files in c:\users\*current user*\saved games\*diablo 2 resurrected folder* If you do not have characters backed up and just have old Diablo 2 installed and playing it, you can go to c:\users\*current user*\saved games\*diablo 2 folder* and just copy all characters files into c:\users\*current user*\saved games\*diablo 2 resurrected folder* Your old characters end with .d2s extension, grab all that you want to transfer, and copy them into D2R. Take note that copied characters cannot be brought back into Diablo 2, once they are copied into Diablo 2 resurrected all further progress on them will be tied to the new game.

Conclusion

That’s it about the transfer process and requirements for it. Fire up the new game version and enjoy.

Reddit is one of the most popular websites in the world and how Microsoft is opening doors to everyone in its new store Reddit took a logical step and made a Progressive web application and placed it in it. Being a Progressive web app makes it more familiar and feels like a home experience using it for a lot of Reddit users. Reddit itself has a large community and active topics discussions all the time about anything. Bringing it to Windows as an application is, in my opinion, a great move since as an application it is independent, more light-weighted, and offering some other advantages specifically tied to being a standalone windows application. Everyone familiar with and using the Reddit website will feel right at home in this app and you can start using it right away.

What is PyLocky ransomware? And how does it execute its attack?

PyLocky ransomware is a file-locking malware created in order to lock important files and demand ransom from victims in exchange for data recovery. This new ransomware uses the .lockymap extension in marking the files it encrypts. It starts to execute its attack by dropping the following malicious payload in the system:

Name: facture_4739149_08.26.2018.exe SHA256:8655f8599b0892d55efc13fea404b520858d01812251b1d25dcf0afb4684dce9 Size: 5.3 MB

After dropping its malicious payload, this crypto-malware connects the infected computer to a remote server where it downloads more malicious files and places them on system folders. It then applies a data gathering module used to gather data about the user and the computer. The malicious files that were downloaded earlier along with the data obtained are used for another module called stealth protection. This allows PyLocky ransomware to execute its attack without detection from any security or antivirus programs installed in the system. It also modifies some registry keys and entries in the Windows Registry such as:

• HKEY_CURRENT_USERControl PanelDesktop
• HKEY_USERS.DEFAULTControl PanelDesktop
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun
• HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce
• HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce

Once all the modifications are carried out, PyLocky ransomware will begin encrypting its targeted files using a sophisticated encryption cipher. Following the encryption, it adds the .lockymap extension to each one of the encrypted files and releases a ransom note named “LOCKY-README.txt” which contains the following content:

“Please be advised: All your files, pictures document and data has been encrypted with Military Grade Encryption RSA ABS-256. Your information is not lost. But Encrypted. In order for you to restore your files, you have to purchase a Decrypter. Follow these steps to restore your files. 1* Download the Tor Browser. ( Just type in google “Download Tor“ 2‘ Browse to URL: http://4wcgqlckaazungm.onion/index.php 3* Purchase the Decryptor to restore your files. It is very simple. If you don’t believe that we can restore your files, then you can restore 1 file of image format for free. Be aware the time is ticking. Price will be doubled every 96 hours so use it wisely. Your unique ID : CAUTION: Please do not try to modify or delete any encrypted file as it will be hard to restore it. SUPPORT: You can contact support to help decrypt your files for you. Click on support at http://4wcgqlckaazungm.onion/index.php”

How does PyLocky ransomware spread over the web?

PyLocky ransomware spreads using malicious spam email campaigns. Creators of this threat embed an infected attachment to spam emails and send them using a spambot. Crooks may even use deceptive tactics to trick you into opening the malware-laden immediately which is something you must not do. Thus, before opening any emails, make sure that you’ve thoroughly checked them. To successfully obliterate PyLocky ransomware from your computer, refer to the removal guide laid out below.

• Step 1: Launch the Task Manager by simply tapping Ctrl + Shift + Esc keys on your keyboard.
• Step 2: Under the Task Manager, go to the Processes tab and look for the process named facture_4739149_08.26.2018.exe and any suspicious-looking process which takes up most of your CPU’s resources and is most likely related to PyLocky ransomware.
• Step 3: After that, close the Task Manager.
• Step 4: Tap Win + R, type in appwiz.cpl and click OK or tap Enter to open Control Panel’s list of installed programs.
• Step 5: Under the list of installed programs, look for PyLocky ransomware or anything similar, and then uninstall it.
• Step 6: Next, close the Control Panel and tap Win + E keys to launch File Explorer.
• Step 7: Navigate to the following locations below and look for PyLocky ransomware’s malicious components such as facture_4739149_08.26.2018.exe and LOCKY-README.txt as well as other suspicious files, then delete all of them.

%TEMP% %WINDIR%System32Tasks %APPDATA%MicrosoftWindowsTemplates %USERPROFILE%Downloads %USERPROFILE%Desktop

• Step 8: Close the File Explorer.
• Step 9: Tap Win + R to open Run and then type in Regedit in the field and tap enter to pull up Windows Registry.
• Step 10: Navigate to the following path:

HKEY_CURRENT_USERControl PanelDesktop HKEY_USERS.DEFAULTControl PanelDesktop HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce

• Step 11: Delete the registry keys and sub-keys created by PyLocky ransomware.
• Step 12: Close the Registry Editor and empty the Recycle Bin.

Try to recover your encrypted files using the Shadow Volume copies Restoring your encrypted files using Windows Previous Versions feature will only be effective if PyLocky ransomware hasn’t deleted the shadow copies of your files. But still, this is one of the best and free methods there is, so it’s definitely worth a shot. To restore the encrypted file, right-click on it and select Properties, a new window will pop up, then proceed to Previous Versions. It will load the file’s previous version before it was modified. After it loads, select any of the previous versions displayed on the list like the one in the illustration below. And then click the Restore button.

A newfound bug in Google docs is causing it to crush and upon reopening it will crush again making it very difficult to re-access your document. The bug is manifested when a series of the same word is typed into a document and Show grammar suggestion is turned on.

How was it found

A Google Docs user, Pat Needham brought up the issue on Google Docs Editors Help forum.

"I've only tried in Google Chrome, with documents from three separate Google accounts (personal, G Suite Basic, and work one which might be enterprise). All three experience this same issue".

"It's case-sensitive. So trying with 'and. and. And. and. And.' doesn't cause it to crash."

While Needham publicly reported the bug, it appears that the issue was discovered by Eliza Callahan who was writing a poem novel for her novel using Google Docs.

Needham's findings have also been confirmed by other users running Firefox 99.0.1

Another user, Sergii Dymchenko, said strings like "But. But. But. But. But." triggered the same response. Some also noticed putting any of the terms like "Also, Therefore, And, Anyway, But, Who, Why, Besides, However," in the same format achieved the outcome.

A YCombinator HackerNews reader suspected the cause to be the "Show grammar suggestion" option in Google Docs.

A Google spokesperson confirmed the presence of the issue adding, "we're aware of this issue and the team is working on a fix."

How to recover your document

First thing first, turn off Show grammar suggestions so you do not run into issue by accident. In order to turn it off go to Tools and then into Spelling and grammar and untick Show grammar suggestions.

Now, if you already have a document that has been crushed, fear not because there is a workaround to access it. For some strange reason this bug does not manifest on Google Docs mobile app, so you can open the crushed document in the mobile app, delete words that have caused the bug and reopen the document on your desktop.

Until Google comes up with the solution this is currently the only way to address the issue.