Fix UTCSVC high CPU and Disk usage in Windows

What is PyLocky ransomware? And how does it execute its attack?

PyLocky ransomware is a file-locking malware created in order to lock important files and demand ransom from victims in exchange for data recovery. This new ransomware uses the .lockymap extension in marking the files it encrypts. It starts to execute its attack by dropping the following malicious payload in the system:

Name: facture_4739149_08.26.2018.exe SHA256:8655f8599b0892d55efc13fea404b520858d01812251b1d25dcf0afb4684dce9 Size: 5.3 MB

After dropping its malicious payload, this crypto-malware connects the infected computer to a remote server where it downloads more malicious files and places them on system folders. It then applies a data gathering module used to gather data about the user and the computer. The malicious files that were downloaded earlier along with the data obtained are used for another module called stealth protection. This allows PyLocky ransomware to execute its attack without detection from any security or antivirus programs installed in the system. It also modifies some registry keys and entries in the Windows Registry such as:

• HKEY_CURRENT_USERControl PanelDesktop
• HKEY_USERS.DEFAULTControl PanelDesktop
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun
• HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce
• HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce

Once all the modifications are carried out, PyLocky ransomware will begin encrypting its targeted files using a sophisticated encryption cipher. Following the encryption, it adds the .lockymap extension to each one of the encrypted files and releases a ransom note named “LOCKY-README.txt” which contains the following content:

“Please be advised: All your files, pictures document and data has been encrypted with Military Grade Encryption RSA ABS-256. Your information is not lost. But Encrypted. In order for you to restore your files, you have to purchase a Decrypter. Follow these steps to restore your files. 1* Download the Tor Browser. ( Just type in google “Download Tor“ 2‘ Browse to URL: http://4wcgqlckaazungm.onion/index.php 3* Purchase the Decryptor to restore your files. It is very simple. If you don’t believe that we can restore your files, then you can restore 1 file of image format for free. Be aware the time is ticking. Price will be doubled every 96 hours so use it wisely. Your unique ID : CAUTION: Please do not try to modify or delete any encrypted file as it will be hard to restore it. SUPPORT: You can contact support to help decrypt your files for you. Click on support at http://4wcgqlckaazungm.onion/index.php”

How does PyLocky ransomware spread over the web?

PyLocky ransomware spreads using malicious spam email campaigns. Creators of this threat embed an infected attachment to spam emails and send them using a spambot. Crooks may even use deceptive tactics to trick you into opening the malware-laden immediately which is something you must not do. Thus, before opening any emails, make sure that you’ve thoroughly checked them. To successfully obliterate PyLocky ransomware from your computer, refer to the removal guide laid out below.

• Step 1: Launch the Task Manager by simply tapping Ctrl + Shift + Esc keys on your keyboard.
• Step 2: Under the Task Manager, go to the Processes tab and look for the process named facture_4739149_08.26.2018.exe and any suspicious-looking process which takes up most of your CPU’s resources and is most likely related to PyLocky ransomware.
• Step 3: After that, close the Task Manager.
• Step 4: Tap Win + R, type in appwiz.cpl and click OK or tap Enter to open Control Panel’s list of installed programs.
• Step 5: Under the list of installed programs, look for PyLocky ransomware or anything similar, and then uninstall it.
• Step 6: Next, close the Control Panel and tap Win + E keys to launch File Explorer.
• Step 7: Navigate to the following locations below and look for PyLocky ransomware’s malicious components such as facture_4739149_08.26.2018.exe and LOCKY-README.txt as well as other suspicious files, then delete all of them.

%TEMP% %WINDIR%System32Tasks %APPDATA%MicrosoftWindowsTemplates %USERPROFILE%Downloads %USERPROFILE%Desktop

• Step 8: Close the File Explorer.
• Step 9: Tap Win + R to open Run and then type in Regedit in the field and tap enter to pull up Windows Registry.
• Step 10: Navigate to the following path:

HKEY_CURRENT_USERControl PanelDesktop HKEY_USERS.DEFAULTControl PanelDesktop HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce

• Step 11: Delete the registry keys and sub-keys created by PyLocky ransomware.
• Step 12: Close the Registry Editor and empty the Recycle Bin.

Try to recover your encrypted files using the Shadow Volume copies Restoring your encrypted files using Windows Previous Versions feature will only be effective if PyLocky ransomware hasn’t deleted the shadow copies of your files. But still, this is one of the best and free methods there is, so it’s definitely worth a shot. To restore the encrypted file, right-click on it and select Properties, a new window will pop up, then proceed to Previous Versions. It will load the file’s previous version before it was modified. After it loads, select any of the previous versions displayed on the list like the one in the illustration below. And then click the Restore button.

As you know, the Taskbar is one of the integral parts of the Windows desktop and it has been there since the release of Windows 1.0 and up until now with Windows 10. Since then, Microsoft has been modifying the Taskbar with a new design which makes it a home for new features such as Windows Search, Task View, and many more. However, there are times when you may that the Taskbar has disappeared or has stopped responding. If you experience either one of these scenarios, read on as this post will walk you through what you can do to resolve the problem. Here are some suggestions you can check out to resolve the issue with the Taskbar in Windows 10 but before you proceed, make sure that you create a System Restore point first. To do that, follow these steps:

• In the Start search, type in “create a restore point” and click the entry “System Properties”.
• Next, select the main system drive under Protection Settings and click on the Configure button.
• After that, select the “Turn on system protection” option and then click on the Apply and OK buttons to save the changes made.

Once you’ve created a System Restore point, refer to the troubleshooting steps below to fix the Taskbar in Windows 10.

Option 1 – Try to restart the Explorer process

This may sound really basic but it actually is a proven method to fix the Taskbar issue. So if anything gets stuck on the system tray or the Taskbar, you can always fix it by restarting the explorer.exe. How? Refer to these steps:

• First, right-click on the Taskbar and select the Task Manager.
• After opening the Task Manager, go to the Processes tab and look for the process named “Windows Explorer”.
• Then right-click on that process and select the option to Restart. Afterward, you should now be seeing the Taskbar as this will reload the whole Windows Shell.

Option 2 – Unhide the Taskbar using the Settings app

It is possible that the Taskbar could be hidden so you can try to unhide it using the Settings app.

• Tap the Win + I keys to open Settings.
• After that, go to Personalization > Taskbar.
• From the main section, make sure that the “Automatically hide the task in desktop mode” is toggled to the off position. However, if it’s already off then proceed to the next options below.

Option 3 – Make sure that you are not in Tablet Mode

Since Windows 10 is designed to work on both desktop and mobile devices, it could be that your computer has slipped into Tablet Mode which explains why you’re not seeing the Taskbar. To check if your computer is really in Tablet Mode, follow these steps:

• Go to the Start menu and select Settings.
• Next, select the System setting and from the left pane select the Tablet Mode.
• From there, make sure that the buttons next to the options given below are set to the off position:
  • Hide app icons on the taskbar in tablet mode
  • Automatically hide the taskbar in tablet mode

Option 4 – Try to check the Projection Settings

You might also want to check the Projection settings as it could be the reason why Taskbar has disappeared.

• Tap the Win + P keys to open the Windows Projection settings.
• Next, make sure that you select the “PC screen only” option and then check if your Taskbar has now appeared or not.

Due to its hybrid core technology, the Alder Lake line of processors had some DRM issues with some game titles where DRM protection software detected hybrid core design switching via manager as a hack attempt and prevented the game from working properly. Over 50 titles were affected by this issue, now only 3 remain still affected but it is being worked on them so that can be also resolved. Intel says that the remedy to the issue for these games is the scroll lock fix which can be done so by enabling Legacy Game Compatibility mode from the BIOS of your motherboard. When running the said games, you can press scroll lock to park the E-cores on Intel's Alder Lake Desktop CPUs to get rid of DRM issues. Certain motherboard manufacturers such as MSI and Gigabyte have made this even easier through software tools with which you don't have to access the BIOS. All you need to do is select a button in the tool which works on both Windows 11 and Windows 10 operating systems and you will enable compatibility mode.

As you know the Windows 10 operating system is has a lot of features and some of them are related to turning off your computer in different ways in order to save power at different levels. These particular features are Shut down, Restart, Hibernate, and Sleep. However, there are times when you might encounter some issues when using any of the aforementioned features. One of these issues is when your computer shuts down instead of going to Sleep. This issue could be caused by several factors including a bug related to the Intel Management Engine Interface or IMEI driver as well as any misconfiguration in the power settings of the BIOS or UEFI. If your computer is going through this problem, read on as this post will guide you in fixing it. There are several potential fixes you can try to fix the problem. You can try to check the Sleep Advanced Settings or run the built-in Power troubleshooter or run the Power Efficiency Diagnostic Report. In addition, you can also try to troubleshoot the problem in a Clean Boot State or reset or update the BIOS.

Option 1 – Check the Sleep Advanced Settings

• Click on the Windows key and type “control panel” in the field and select the related search result.
• Next, select the Security and Maintenance option and click on the Power Options.
• After that, you have to select the Change Plan Settings but keep in mind that this option is barely readable so you need to read each option carefully.
• Now click on the Change advanced power settings button and a new window will appear.
• Then look for the “Sleep” option and expand it. Make sure that the “Allow hybrid sleep” option is on.
• Reboot your computer and check if your computer now functions properly. If it still didn’t work, you may have to reverse the changes you’ve made.

Option 2 – Try to run the Power troubleshooter

The next thing you can do is to run the Power troubleshooter. To do so, follow these steps:

• Go to Settings and navigate to Update & Security > Troubleshoot.
• After that, look for the “Power” option from the given list of built-in troubleshooters and click on it.
• Next, click on the “Run the troubleshooter” button to run the Power troubleshooter.
• Once the troubleshooter is done identifying the problems, follow the next on-screen instructions to resolve the problem.

Option 3 – Troubleshoot Sleep Mode issue in a Clean Boot State

The issue with Sleep Mode might be caused by some third-party programs installed on your computer. This program might be the one that puts your computer to sleep and so to isolate this possibility, you have to put your PC in a Clean Boot State using the steps below.

• Log onto your PC as an administrator.
• Type in MSConfig in the Start Search to open the System Configuration utility.
• From there, go to the General tab and click “Selective startup”.
• Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
• Next, click the Services tab and select the “Hide All Microsoft Services” check box.
• Click Disable all.
• Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
• After that, try to put your computer to sleep again.

Option 4 – Try to run the Power Efficiency Diagnostics Report

You could also try to run the Power Efficiency Diagnostics Report to fix the problem. This tool is helpful and will help you analyze the status of the battery but note that this can be quite overwhelming especially if you’re not well-versed in this matter.

Option 5 – Try to update the BIOS

Updating the BIOS can help you fix the ATTEMPTED_WRITE_TO_READONLY_MEMORY BSOD error but as you know, BIOS is a sensitive part of a computer. Even though it is a software component, the functioning of the hardware depends on it largely. Thus, you must be careful when modifying something in the BIOS. So if you don’t know much about it, it’s best if you skip on this option and try the other ones instead. However, if you are well-versed in navigating the BIOS, then follow the steps below.

• Tap the Win + R keys to open the Run dialog box.
• Next, type “msinfo32” in the field and press Enter to open System Information.
• From there, you should find a search field on the bottom where you have to search for the BIOS version and then press Enter.
• After that, you should see the developer and version of the BIOS installed on your PC.
• Go to your manufacturer’s website and then download the latest version of BIOS on your computer.
• If you are using a laptop, make sure that you keep it plugged in until you have updated the BIOS.
• Now double click on the downloaded file and install the new BIOS version on your computer.
• Now restart your computer to apply the changes made.

Note: If updating the BIOS didn’t help, you might want to consider resetting it instead.

Error Code 12 - What is it?

Error code 12 is a typical Device Manager error code. It usually pops on the computer screen when the computer experiences device driver problems or system resource conflicts.

Error code 12 is mostly displayed on the computer screen in the following format:

‘This device cannot find enough free resources that it can use. If you want to use this device, you will need to disable one of the other devices on this system.’

Solution

Error Causes

The error code 12 occurs when 2 devices installed on your PC are accidentally assigned the same I/O (input/output) ports or the same direct memory access channel.

This assignment is known to be made either by BIOS (Basic Input/output system) or by the operating system. It can sometimes be assigned by a combination of the two. Also, code 12 can also appear on your monitor screen if the BIOS didn’t allocate enough resources to the device.

Although this error code is not fatal, it is nonetheless advisable to fix it immediately to avoid inconvenience and hassle. This error is most likely to lower and hamper the performance of your system.

Further Information and Manual Repair

Here are some of the easiest and most effective do-it-yourself methods to resolve error code 12 on your PC. To perform these fixes, you don’t have to be technically sound or a computer programmer for that matter. Simply follow the steps to fix the problem right away.

Method 1 - Use the Troubleshooting Wizard to identify the Conflict

To repair error code 12, simply go to the start menu and type Device Manager in the search box. Now go to the Device Properties dialog box. After that click on the ‘General Tab’ and now access Troubleshoot to start the Troubleshooting Wizard.

The Wizard will ask you some questions and provide you a solution accordingly. Follow the instructions and resolution steps provided by the troubleshooting wizard to repair error code 12 on your PC.

Method 2 - Disable the Device to Resolve

By disabling the problematic device in the Device Manager, Windows will ignore that piece of hardware. Once disabled, Windows will then no longer assign system resources to that device and no driver/software will be able to use that device.

To disable, go to the Device Properties in the Device Manager and then click the Driver tab. Click disable located at the bottom of the window. Then you will be prompted with a message stating ‘Disabling this device will cause it to stop functioning. Do you wish to disable it?’ Click yes to continue and then click OK to save changes.

Method 3 - Restore Your PC to its Previous State

Another method to resolve error code 12 is to restore your PC to its previous state when it was working properly.

For this, it is important to backup all your data first to avoid data loss issues that are likely to occur during this process. Creating backups manually can be a time-consuming and tedious task. To save time and quicken the process, it is best to install a program like DriverFIX.

DriverFIX is a user-friendly and intuitive device driver management software that helps backup all your data automatically and efficiently, while simultaneously restores your PC back to its previous state before you encountered problems.

Click here to download DriverFIX on your system to resolve error code 12

PFN_LIST_CORRUPT Blue Screen - What is it?

PFN_LIST_CORRUPT is a blue screen of death error code. It occurs when the PFN (Page Frame Number) list becomes corrupt. The Page Frame Number is basically used by your hard drive to determine your location of each one of your files on the disk. This error may occur when starting up the program or while using it. Blue screen of death errors occurs without any warnings. The program disrupts all of a sudden and the computer screen turns blue.

Solution

Error Causes

PFN_LIST_CORRUPT Blue Screen error may occur due to multiple reasons. Some of the common reasons include:

• Hardware problems
• Device driver issues
• Registry problems
• Viral Infection

It is recommended to resolve the PFN_LIST_CORRUPT Blue Screen of Death error immediately without any delay virtually because this error can be quite fatal to your PC. It can pose serious threats to your system like system freeze, crash, failure, and valuable data loss. Furthermore, if the error is related to viral infection, it can expose you to privacy issues, data breaches, and cybercrime too.

Further Information and Manual Repair

This is a critical PC error but easy to resolve. You don’t need any technical expertise to fix this error on your PC. Here are some quick and easy methods to resolve PFN_LIST_CORRUPT Blue Screen error:

Method 1: Install Compatible Device Drivers

Sometimes when new hardware is added to the PC, you need to install updated versions of the device drivers to ensure there are no incompatibility issues. Incompatibility between the hardware and device drivers may generate PFN_LIST_CORRUPT Blue Screen of death error on your screen. To resolve, it is advisable to download and install the latest updated versions of the device drivers from the manufacturer’s website.

Method 2: Scan for Viruses

PFN_LIST_CORRUPT Blue Screen of Death error may occur due to viral infection too. Viruses and spyware enter your PC when you log on to unreliable websites and download programs from there or open phishing emails on your PC. These viruses corrupt and damage programs and files resulting in such errors. To fix the issue, you need to install a powerful antivirus and ensure all kinds of viruses and spyware are detected and removed from your system.

Method 3: Clean and Restore the Registry

PFN_LIST_CORRUPT Blue Screen error indicates poor PC maintenance. When you don’t clean and remove unnecessary and obsolete files like junk files, bad registry keys, cookies, internet history, temporary files, and invalid entries from the registry, the registry overloads and gets damaged. These files accumulate taking up a lot of disk space and also corrupt system files. If these files are not removed timely, it results in registry issues like a blue screen of death errors and run-time errors. To remove these files and clean the registry, you need to install a powerful registry cleaner. Whether the underlying cause for PFN_LIST_CORRUPT Blue Screen of Death error on your PC is viral infection or registry issues, to resolve the BSOD error code in seconds download Restoro. This is a cutting-edge and multi-functional PC fixer deployed with both an antivirus and a registry cleaner. Additional features include a system optimizer too. It is user-friendly and easy to operate. You can download it on all Windows versions without any hassle. It is safe and bug-free. The registry cleaner feature scans and removes all unnecessary files, cleans and repairs the registry while the antivirus utility simultaneously removes all kinds of malicious software including spyware, viruses, Trojans, and malware. Click here to download Restoro now and resolve the PFN_LIST_CORRUPT Blue Screen of Death error immediately!

Without any fanfare, news, or information Bethesda has released a completely free upgrade for legendary Quake 1. Free upgrade is automatically applied to all users who possess the original game and it has already been rolled out.

What has changed for good?

New textures, effects, and resolutions are one thing that will come first into your focus when you start the game. From the moment game is started it feels and looks like a game you remember from a long time ago. Models are also upgraded with a higher polygon count. Another thing that will hit you right away is the legendary OST by Trent Reznor in its full glory. If you have the original Quake and played it you will know that OST was missing from the Steam release and having it fully back is a great feature. I would argue that placing just OST alone in the steam release is enough for people to play it again since it adds so much atmosphere. Deathmatch and other multiplayer goodies are all here as well and there is a completely free new episode in the game with several levels. Yes, you get a free Quake upgrade in HD with an extra episode completely free.

The bad side of Quake coin

So this might come as a purist or obsessive nit-picking but there were two things that I, personally am not a fan of and have noticed during my gameplay. Please know that this is personal preference and by no other chance reflects the quality of the game itself but I just had to talk about it. Quake remake is made in a new engine and as such dynamic and gunplay feel different from the original, granted they have done the best they could to replicate the authentic feeling of the original game but there are parts of the game where I have felt that simply put, it feels different. Another thing is also tied to technology and the overall game is somewhat a little brighter and in some areas little softer in dark areas. Like I said this is purely personal preference and might come as nitpicking but I preferred the darker and grittier look of the original game. Darkplaces, the free custom-made upgrade did this in my opinion better.

The store is not downloading Apps: As you know, the Windows Store is one of the places where you can download Windows apps. However, there are times when you might not be able to do so for some reason. For instance, if you search for an app and click on the get it now button, instead of downloading the app, nothing happens and there are also cases when the download will start but the page will refresh after half a second. When this issue happens, you won’t be seeing any error message or warning at all. So you’ll just have to look at the download get started where the page will refresh and you’ll be back at the Get button. This issue in the Windows 10 Store only happens for a few apps so even though you are able to download some apps, you might be able to do on other ones. Note that the apps affected are random and there is no specific set of apps that cause this issue while downloading and that this problem will repeat again each time you click on the Get it now button. This issue is definitely caused by Windows itself and has something to do with a bug in the Windows store which was brought by the latest Windows Update. It’s already a known issue among other Windows 10 users who are also suffering the same dilemma. So until Microsoft releases another update to fix this bug, you will have no choice but to deal with it in the meantime. On the other hand, you can also try a couple of suggestions laid out in this post. Follow the steps in every option given below to fix the issue with the Windows 10 Store.

Option 1 – Try signing out from the Microsoft Store

A lot of Windows 10 users were able to resolve the problem by simply signing out and signing back into the Microsoft Store. How? Follow these steps:

• Go to the Microsoft Store.
• Next, go to the Get page of the app you were trying to download.
• And then click on your account picture located in the top right corner of the window and select your account.
• Sign out from your account and after that, click the Get button to download the app.
• After that, a new window will appear where you’ll have to select your account and click on Continue.
• Now enter your credentials. Once you do, the app should be downloaded automatically after you’re signed in. And that’s about it.

Note: Keep in mind that this option is merely a temporary solution to the problem and once you close the Microsoft Store and open it back again, you will be back to square one.

Option 2 – Wait for the Windows Update

As mentioned, this is already a known issue and a lot of Windows 10 users have already complained about it to Microsoft so a bug fix will be soon released in the latest Windows Updates.

For a while now, Microsoft has been working hard to add various built-in troubleshooters in Windows 10. In fact, there is a troubleshooter for almost every standard or common error in Windows 10. And now with the newly released Windows 10 v1903, Microsoft has added the Recommended Troubleshooting which allows Windows 10 to automatically fix a lot of critical issues on your computer, and in this post, you will be guided on how you can turn on or off the Recommended Troubleshooting in Windows 10. The Microsoft Diagnostic & Feedback data only provides two settings – Basic and Full. So if you want to turn off the Recommended Troubleshooting for some reason, the only way to do so is to stop it from collecting complete data from your PC. And to turn it on or off, you can choose to switch between them. To do that, navigate to Settings > Privacy > Diagnostics & feedback and from there, select Basic under the Diagnostic Data section. After that, go back to Settings and go to Update & security > Troubleshoot. Once you’re there, you should see a warning message saying, “Share Full Diagnostic data to get additional troubleshooting recommendations”. Based on the message, Microsoft will only offer the recommended troubleshooting based on the Full Diagnostic data which it collects from your computer. On the other hand, if you know how to navigate and use the Windows Registry, then you can enable or disable the Recommended Troubleshooting via Registry Editor but before you proceed, make sure that you create a System Restore point. Once that’s covered, follow these steps:

• Tap the Win + R keys to open the Run dialog box and type “regedit” in the field and tap Enter to open the Registry Editor.
• Next, navigate to this registry path: HKEY_LOCAL_MACHINESOFTWAREMicrosoft
• From there, look for the key named “WindowsMigration”. If you can’t find it, just right-click on the left pane and create a new key and then name it “WindowsMigration”.
• After that, create a DWORD “UserPreference” and double click on it to set its value to “0” if you want to turn it off or “1” if you want to turn it on.
• Exit the Registry Editor and restart your computer to apply the changes made.

Note: The Recommended Troubleshooting functionality can look into the error logs sent back to the Microsoft team and use an algorithm to set up a solution for you and they’re nothing but Diagnostics and Feedback data that Windows collects and sends back to Microsoft. Moreover, the recommendations are only visible if you are connected to the internet, else it will show the same message.

Dune, arguably one of the best science fiction novels ever written was brought to a big screen first time by David Linch. Sadly movie itself went through development hell and a lot of troubles and the end result was somewhat strange. The audience was divided on it, some hated it, some loved it but for sure it left a mark in cinema history. Years have passed and just when people forgot about ever receiving another try on a book adaptation Denis Villeneuve has brought his vision of Frank Herbert's novel into its full glory on a big screen. The interesting thing about this new Dune movie was that from the start Denis envisioned it as a two-movie part openly saying that book itself is too complex to be done in a single movie. But, the issue arises when information about Dune part two was hanging on a thread on how well Dune part one will be received and performed in the box office. This naturally brought all kinds of speculation and worry among fans of the franchise, especially because the movie itself was really good and well made. Well for all of you fans and people who wanted to see a continuation of the story can rest at peace now since the Legendary picture has officially announced and green-lighted Dune part two. The budget was given and we can expect part two at the beginning of 2023.