Edge and Store apps are not connecting

What is PyLocky ransomware? And how does it execute its attack?

PyLocky ransomware is a file-locking malware created in order to lock important files and demand ransom from victims in exchange for data recovery. This new ransomware uses the .lockymap extension in marking the files it encrypts. It starts to execute its attack by dropping the following malicious payload in the system:

Name: facture_4739149_08.26.2018.exe SHA256:8655f8599b0892d55efc13fea404b520858d01812251b1d25dcf0afb4684dce9 Size: 5.3 MB

After dropping its malicious payload, this crypto-malware connects the infected computer to a remote server where it downloads more malicious files and places them on system folders. It then applies a data gathering module used to gather data about the user and the computer. The malicious files that were downloaded earlier along with the data obtained are used for another module called stealth protection. This allows PyLocky ransomware to execute its attack without detection from any security or antivirus programs installed in the system. It also modifies some registry keys and entries in the Windows Registry such as:

• HKEY_CURRENT_USERControl PanelDesktop
• HKEY_USERS.DEFAULTControl PanelDesktop
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun
• HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce
• HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce

Once all the modifications are carried out, PyLocky ransomware will begin encrypting its targeted files using a sophisticated encryption cipher. Following the encryption, it adds the .lockymap extension to each one of the encrypted files and releases a ransom note named “LOCKY-README.txt” which contains the following content:

“Please be advised: All your files, pictures document and data has been encrypted with Military Grade Encryption RSA ABS-256. Your information is not lost. But Encrypted. In order for you to restore your files, you have to purchase a Decrypter. Follow these steps to restore your files. 1* Download the Tor Browser. ( Just type in google “Download Tor“ 2‘ Browse to URL: http://4wcgqlckaazungm.onion/index.php 3* Purchase the Decryptor to restore your files. It is very simple. If you don’t believe that we can restore your files, then you can restore 1 file of image format for free. Be aware the time is ticking. Price will be doubled every 96 hours so use it wisely. Your unique ID : CAUTION: Please do not try to modify or delete any encrypted file as it will be hard to restore it. SUPPORT: You can contact support to help decrypt your files for you. Click on support at http://4wcgqlckaazungm.onion/index.php”

How does PyLocky ransomware spread over the web?

PyLocky ransomware spreads using malicious spam email campaigns. Creators of this threat embed an infected attachment to spam emails and send them using a spambot. Crooks may even use deceptive tactics to trick you into opening the malware-laden immediately which is something you must not do. Thus, before opening any emails, make sure that you’ve thoroughly checked them. To successfully obliterate PyLocky ransomware from your computer, refer to the removal guide laid out below.

• Step 1: Launch the Task Manager by simply tapping Ctrl + Shift + Esc keys on your keyboard.
• Step 2: Under the Task Manager, go to the Processes tab and look for the process named facture_4739149_08.26.2018.exe and any suspicious-looking process which takes up most of your CPU’s resources and is most likely related to PyLocky ransomware.
• Step 3: After that, close the Task Manager.
• Step 4: Tap Win + R, type in appwiz.cpl and click OK or tap Enter to open Control Panel’s list of installed programs.
• Step 5: Under the list of installed programs, look for PyLocky ransomware or anything similar, and then uninstall it.
• Step 6: Next, close the Control Panel and tap Win + E keys to launch File Explorer.
• Step 7: Navigate to the following locations below and look for PyLocky ransomware’s malicious components such as facture_4739149_08.26.2018.exe and LOCKY-README.txt as well as other suspicious files, then delete all of them.

%TEMP% %WINDIR%System32Tasks %APPDATA%MicrosoftWindowsTemplates %USERPROFILE%Downloads %USERPROFILE%Desktop

• Step 8: Close the File Explorer.
• Step 9: Tap Win + R to open Run and then type in Regedit in the field and tap enter to pull up Windows Registry.
• Step 10: Navigate to the following path:

HKEY_CURRENT_USERControl PanelDesktop HKEY_USERS.DEFAULTControl PanelDesktop HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce

• Step 11: Delete the registry keys and sub-keys created by PyLocky ransomware.
• Step 12: Close the Registry Editor and empty the Recycle Bin.

Try to recover your encrypted files using the Shadow Volume copies Restoring your encrypted files using Windows Previous Versions feature will only be effective if PyLocky ransomware hasn’t deleted the shadow copies of your files. But still, this is one of the best and free methods there is, so it’s definitely worth a shot. To restore the encrypted file, right-click on it and select Properties, a new window will pop up, then proceed to Previous Versions. It will load the file’s previous version before it was modified. After it loads, select any of the previous versions displayed on the list like the one in the illustration below. And then click the Restore button.

You can prevent starting of app installations files if they have not come from the MS store inside Windows 11. This can make your PC more secure because all apps in the store will have to be digitally signed and overall it can provide you with more control over what will be installed. Follow the guide below to find out how can you easily turn this feature ON.

1. Press ⊞ WINDOWS + I to open Windows settings
2. Select Apps and then choose Apps & Features
3. Click on Choose where to get apps to bring a drop-down menu
4. Select The Microsoft Store only (Recommended)
5. Close settings

Settings will apply changes immediately and you continue using Windows right away. With these settings turned ON if you want to install a downloaded application or run the installer you will not be able to, and message The app you’re trying to install isn’t a Microsoft-verified app will show on your screen. You can always reverse this setting by choosing Anywhere in settings instead of Microsoft store only.

Microsoft store is ready and prepared for Windows 11 official release on October 5^th and it is coming with some surprises. It has officially confirmed that many open source and free applications will be in it like Opera, VLC, discord, Libre office, etc. It seems that Microsoft wants to place its store as one place to go for all of your software needs. Another great surprise is the coming of Epic games store implementation. It was officially confirmed but not explained in detail, will we have Epic store opened in Windows store or we will only get installer as a package we will see but this is some great news. As for how it states now, it seems that the Windows store aims to eliminate searching the web for applications and bring them all into one environment with reviews and ratings so you know which one to install and use. It also features a great search engine to find proper applications for your needs. The new store will come to Windows 10 as well but after all Windows 11 has been mostly released and adopted. So expect it via update in two or three months' time. It would be great if some larger companies decide to join MS stores like Autodesk, Adobe, the Foundry, etc so you can install everything you need from it but one can only hope.

Error 0x800706be is a Windows error code that pops up when a particular system file is having some issue. This error pops up on other Windows-compatible software as well as driver vendors. This error signifies a misconfigured or corrupted system file so you might encounter this error in different instances. For instance, this error might pop up when you click the audio icon from the system tray or when the Windows Upgrade or Update has failed. Needless to say, this error can be caused by different factors. Anyhow, this post will show you what you can do to fix the problem when the error pops up during a Windows Update or Upgrade. If you are seeing this error when you try to install the latest Windows updates, it will show a Windows Update failed message and you obviously won’t be able to update your Windows 10 PC until you fix this error. You will keep seeing this error even when you try to reboot or update it a couple of times. As mentioned, the error code 0x800706be appears when there is something wrong with your system files – they are either corrupted or misconfigured. This error is most likely caused by the corrupted Windows Update Components. Corruption of these files is not unusual and it could happen anytime. So since the Windows Update files or components are corrupted, you won’t be able to successfully install the latest Windows Updates. Here are some options you can try to fix the problem.

Option 1 – Try running the Windows Update Troubleshooter

Running the Windows Update troubleshooter is one of the basic things to do when facing any kind of issue with Windows Updates. As long as it can it will detect the issue and automatically solve them so that there will be no need for you to do more technical steps to resolve the issue.

• Tap the Windows and R keys on your keyboard to open the Run dialog box.
• Then type in “control.exe /name Microsoft.Troubleshooting” in the field and tap Enter to open the Windows Update Troubleshooter.
• After that, click Windows Update and follow the next on-screen instructions.

Option 2 – Try resetting the Windows Update Components

This is another basic thing to do in fixing the error 0x800706be. It is also one of the solutions that mostly worked for users who also got this error when trying to install Windows updates. And since the problem is caused by corrupted Windows update components, the most logical thing to do is to delete old files and reset components. To reset the Windows Update components, follow the given instructions below carefully.

• Tap the Windows key once.
• Then in the Windows Start Search, type in “command prompt”.
• From the search results displayed, right-click on Command Prompt and select the “Run as administrator” option.
• After that, type in “net stop wuauserv” and tap Enter.
• Next, type in “net stop cryptSvc” and tap Enter.
• Then type in “net stop bits” and tap Enter.
• Type in “ren C:\Windows\Software\Distribution Software\Distribution.old” and then tap Enter.
• Afterward, type in “C:\Windows\System32\catroot2\Catroot2.old” and tap Enter.
• Next, type “net start cryptSvc” and tap Enter.
• Then type “net start bits” and tap Enter.
• Finally, type in “net start msiserver” and tap Enter.
• Now close Command Prompt and then try updating Windows once more.

One of the most useful and powerful built-in utility in Windows 10 is the DISM tool. This tool can be used with the Command Prompt command line as well as for other purposes. However, it is not without flaws and there are times when you may encounter some issues while using it. One of the problems you can get while using the DISM tool is the following error:

“The scratch directory size might be insufficient to perform this operation”

This kind of error in DISM occurs when the DISM command is executed from the Windows Recovery Environment due to the limited size permissions of a delivery where the operating is being performed. To fix this DISM error, you need to follow the instructions laid out below. Step 1: First, tap the Win + R keys to open the Run utility and then type “cmd” in the field and tap Enter to open Command Prompt. Step 2: Next, you have to specify a scratch directory that contains the Windows folder and to do that, you can either use the DIR command or the BCEDIT command. So in the elevated command prompt type and enter “dir” or “bcedit”. Step 3: After that, you will see a list of folders inside the C: partition. Now you have to create a folder named “scratch” inside the partition. To do so, execute the following command:

mkdir C:Scratch

Note: The command you just entered will create a directory inside the root of the C: partition named Scratch. Step 4: Now that you’ve created the Scratch folder, note that each time you run any of the DISM commands, you have to enter the following code snippet in them:

/ScratchDir:C:Scratch

 Note: For instance, if you are using the DISM tool to repair the offline Windows image, instead of executing the “Dism /Online /Cleanup-Image /RestoreHealth” command, you now have to execute the “DISM /Image:C: /ScratchDir:C: Scratch /Cleanup-Image /Restorehealth” command. And if you want to remove a selected installed update package, you can use the “DISM /image:C: /ScratchDir:C:Scratch /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e75~amd64~~16299.196.4.9” command. Keep in mind that the mentioned package is only an example. And lastly, you also have to replace the drive letter in the new code snippet when you execute the commands given above.

If you got encounter an error message saying, “Error opening file for writing” while running a setup file to install some program on your computer, read on as this post will give you some suggestions on how you can fix it. You can encounter this error when running a setup file for installing a program like GlassWire, Notepad++, VLC, Steam, OBS, Mod Organizer, WinpCap, NSIS, FileZilla, BSPlayer, Kodi, Wireshark, rtcore64, qt5core.dll, MSI Afterburner, GWCtlSrv.exe, npf.sys, vcredist_86 and many more. And so when this error pops up while you run a setup file, refer to the steps given below which might help resolve the problem. Step 1: First, you have to make sure that there is no other installation in progress as multiple installations can most likely cause this error to show up. You can restart your computer and try to run the setup file again. Step 2: If you still got the error even after your restart your computer, click on Retry to try again and if it does nothing, click Abort to terminate the installation. After that, go to the folder where you’ve placed the setup file and then delete it. Step 3: Make sure that you have enough disk space on your computer. You can use the Windows 10 Storage Sense feature which can clean all the temporary files from your computer and help you save storage space. To use Storage Sense, follow the steps below.

• Open Setting > System > Storage from the WinX Menu.
• From there, you will see a list of all the local and connected storage devices along with the details on the free space.
• Now make sure that the Storage Sense feature is turned On then go find a link that says “Free Up Space” and click it to open.
• After that, a screen which is the built-in program in Windows 10 will appear and will scan your computer for the following junk files so you can free up disk space:
• Windows Upgrade Log Files
• The system created Windows Error Reporting Files
• Thumbnails
• Temporary Internet Files
• Previous Windows Installation Files
• Delivery Optimisation Files
• DirectX Shader Cache

Note: Once you’re done freeing up space on your drive, try to run the setup file again. Step 4: If freeing up space didn’t help, you can just delete the setup file and download another one from the official homepage of the program. From there download the setup file and place it in a different location. After that, run the setup file once again. Step 5: Make sure that you have downloaded the correct setup file according to your operating system, i.e. x64 or x86. Step 6: Restart your computer once more and make sure that you sign in as administrator. After that, right-click on the setup file and click “Run as administrator”. If it still didn’t help, you might want to take ownership of the folder where you saved the setup file. How? Follow the steps below but before you do that, you have to create a System Restore Point first, once that’s done, proceed.

• First, locate the concerned folder and right-click on it then select Properties.
• Next, click on the Edit button in the Properties window and click OK to confirm if you got a User Account Control elevation request.
• After that, select user/group from the permission windows or click on the Add button to add another user or group. It would be best if you add “Everyone” to give permission.
• Then check “Full Control” under the “Allow” column to assign full access rights control permissions.
• Now edit the permission to Full Control for “Everyone”.
• Click OK to save the changes made and then exit.

If you suddenly encounter an error saying, “Something happened and this app couldn't be installed. Error Code: 0x80244018”, when trying to install apps on your Windows 10 computer, then you’ve come to the right place as this post will help you in resolving the problem. It’s not just you that’s experiencing this problem right now as several users also reported getting this error they try to apply a Windows update or download and install the application from Microsoft Store. There could are several reasons why you’re getting this error. It could be caused by a third-party application, or it could be that the update is blocked by your VPN or proxy server, or that the BITS service is disabled. In addition, the error could also be due to some glitch in the component services or it could be that the system files are corrupted. Whatever the cause is, you can fix the error by following any of the given options below.

Option 1 – Run the Windows Update Troubleshooter

Running the Windows Update Troubleshooter can help in fixing Error Code 0x80244018. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.

Option 2 – Put your PC in a Clean Boot State

It could be that some third-party application is the one that’s causing the problem so it’s best if you put your computer in a Clean Boot state. During this state, you can start the system with a minimum number of drivers and startup programs that will surely help you in isolating the root cause of the issue.

• Log onto your PC as an administrator.
• Type in MSConfig in the Start Search to open the System Configuration utility.
• From there, go to the General tab and click “Selective startup”.
• Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
• Next, click the Services tab and select the “Hide All Microsoft Services” check box.
• Click Disable all.
• Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
• After that, try to install the Windows app again.

Note: If you are able to install the app without any trouble at all then it means that the error is caused by some third-party application on your computer. You need to look for the culprit and uninstall it once you found it.

Option 3 – Restart BITS

The Background Intelligent Transfer Service or BITS is a part of the Windows Update service and is the one that manages the background download of Windows Update, as well as scans for new updates and so on. And if Windows Update is experiencing some problems, you can try restarting BITS but make sure that you have admin privileges to do so.

• Tap the Win + R keys to open the Run dialog box.
• Next, type “services.msc” in the field and hit Enter to open Windows Services.
• From the list of Services, look for the Background Intelligent Transfer Service and double-click on it to open Properties.
• After that, you need to set the Startup type to “Automatic (Delayed Start) and click on Apply.
• Now click the Stop button to stop BITS and then click the Start button to restart the service.
• Click OK to save the changes made and then restart your PC.

Option 4 – Disable the Proxy server

• Tap the Win + R keys to open the Run dialog box.
• Then type “inetcpl.cpl” in the field and hit Enter to pull up the Internet Properties.
• After that, go to the Connections tab and select the LAN settings.
• From there. Uncheck the “Use a Proxy Server” option for your LAN and then make sure that the “Automatically detect settings” option is checked.
• Now click the OK and the Apply buttons.
• Restart your PC.

Note: If you are using a third-party proxy service, you have to disable it.

Option 5 – Try disabling the VPN

As mentioned, if you are using VPN, this could be the reason why you’re getting Error Code 0x80244018 so the most obvious thing to do is for you to turn off the VPN and try to run the Windows Update once more. And if you use a VPN software that works using their software, you can just completely exit or log-off from its account. On the other hand, if you are using a built-in Windows 10 VPN, you can simply turn it off or delete all the settings you have created there. Although it’s understandable that you might have to use a VPN connection to connect to the work network, you really have to disable it at least after you’ve successfully installed the app.

Option 6 – Reset Windows Update components

• Open Command Prompt with admin privileges.
• After that, type each one of the following commands and hit Enter after you key in one after the other.
  • net stop wuauserv
  • net stop cryptsvc
  • net stop bits
  • net stop msiserver

Note: The commands you entered will stop the Windows Update components such as Windows Update service, Cryptographic services, BITS, and MSI Installer.

• After disabling WU components, you need to rename both the SoftwareDistribution and Catroot2 folders. To do that, type each one of the following commands below, and don’t forget to hit Enter after you type one command after the other.
  • ren C:WindowsSoftwareDistribution SoftwareDistribution.old
  • ren C:WindowsSystem32catroot2 Catroot2.old
• Next, restart the services you’ve stopped by entering another series of commands. Don’t forget to hit Enter after you key in one command after the other.
  • net start wuauserv
  • net start cryptsvc
  • net start bits
  • net start msiserver
• Close Command Prompt and reboot your PC.

Option 7 – Run the System File Checker Scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files with good system files that might be the cause why you’re getting the Error Code 0x80244018. To run the SFC command, follow the steps given below.

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

• Restart your PC.

Option 8 – Run the DISM tool

You can also run the DISM Tool as it helps in repairing the Windows System Image as well as the Windows Component Store in Windows 10. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth” which could help in fixing the Error Code 0x80244018.

• Open the Command Prompt with admin privileges.
• Then type in the following commands and make sure to hit Enter right after you type each one of them:
  • Dism /Online /Cleanup-Image /CheckHealth
  • Dism /Online /Cleanup-Image /ScanHealth
  • exe /Online /Cleanup-image /Restorehealth
• Do not close the window if the process takes a while as it will probably take a few minutes to finish.

The Snapping feature was introduced as an essential part of Windows 11 and I like it very much, it lets you organize your opened windows much faster and with more control. However, some people do not like the feature, worry not because you can turn it off, or if you prefer you can just remove the showing layout option that is shown when hovering over Minimize/Maximize button.

Removing options all together

To completely turn off Snap layout in Windows 11 follow these steps

1. Open Windows 11 settings by pressing ⊞ Windows + I
2. Select System on the left part of the screen
3. In System options select Multitasking
4. At the top of Multitasking Click on the switch next to Snap Windows
5. Close settings

Changes will be automatically applied and you will no longer have Snap layout functionality.

Removing layout graphic from Snapping feature

If you like the snap Layouts feature but are not very fond of the layout graphic that is popping up each time you hover over Minimize/Maximize button do not worry, there is an option to turn just that off and keep the feature itself.

1. Open Windows 11 settings by pressing ⊞ Windows + I
2. Select System on the left part of the screen
3. In System options select Multitasking
4. Click on the Snap Windows menu
5. Deactivate Show Snap Layouts When I Hover over a Window’s Maximize button
6. Close settings

Now you will be able to use the Snap Layout feature without layout graphics showing. If you want to reverse any of these options and go back to standard-setting, just follow the steps and turn features ON.

Both the DISKPART utility and the Disk Management are useful tools in Windows 10 that manage the disk space allocation, and so on. But these tools are not without errors as you could also encounter some when you run them. Recently, some users reported getting an error that says, “The selected disk is not a fixed MBR disk when trying to use the DISKPART utility”. Here’s the exact message of the error:

“The selected disk is not a fixed MBR disk. The ACTIVE command can only be used on fixed MBR disks.”

This kind of error only occurs when you try to activate a disk partition on a UEFI system partition. However, the command works only if your computer is based on BIOS/MBR. The UEFI method has no concept of the active partition and since you have a UEFI system, the disk type is GPT instead of MBR. To simply put it, your BIOS needs the MBR disk type while the UEFI needs the GPT disk type. To fix the “The selected disk is not a fixed MBR disk when trying to use the DISKPART utility” error, there are various potential fixes you can try. You might have to disable Secure Boot, convert the disk to MBR or fix the Boot Manager. For more instructions, follow the options provided below.

Option 1 – Disable the Secure Boot in the BIOS

Disabling the Secure Boot in the BIOS settings is definitely recommended to resolve the issue. To disable Secure Boot, here’s what you have to do:

• First, boot your computer into Windows 10.
• Next, go to Settings > Windows Update. From there, check if there is anything that you have to download and install if you see any available updates. Usually, OEMs send and update the list of trusted hardware, drivers, and operating systems for your computer.
• After that, go to the BIOS of your computer.
• Then go to Settings > Update & Security > Advanced Startup options. If you click on Restart Now, it will restart your computer and give you all the advanced options.
• Next, select Troubleshoot > Advanced Options. As you can see, this screen offers you further options including System restore, Startup repair, Go back to the previous version, Command Prompt, System Image Recovery, and UEFI Firmware Settings.
• Select the UEFI Firmware Settings which will take you to the BIOS.
• From there, go to the Security > Boot > Authentication tab where you should see Secure Boot. Note that every OEM has its own way of implementing the options so it varies.
• Next, set Secure Boot to Disabled and set Legacy Support to On or Enabled.
• Save the changes made and exit. Afterward, your computer will reboot.

Option 2 – Try converting the disk to MBR

You can try to change the File System of the drive from GPT to MBR but before you do so, make sure that you create a backup copy of your data to an external drive. Once you have that covered, follow the steps below.

• Create a bootable Windows 10 media and boot your computer from it.
• Next, click on the “Repair your computer” option on the first Windows 10 installation setup window.
• Afterward, select the operating system partition from the given options and click on Next.
• Now select Command Prompt within the System Recovery options box and execute this command to initiate the Diskpart utility: diskpart
• Then type either one of these commands to view the list of all the Disk connects or the partitions on those disks formed: list disk or list volume
• After that, execute another one of these commands depending on the command you previously entered to select the disk or partition you want to select: select disk # or select volume #
• Now execute this command to clean your drive: clean
• Finally, execute this last command to convert the selected disk or partition as MBR: Convert MBR
• Restart your computer and check if the error is fixed.

Option 3 – Try to fix the Boot Manager

• You can start by booting into the installation environment for Windows 10 from an installation media.
• After that, click on Repair your computer and on the blue screen, select Troubleshoot and then select the Advanced options menu.
• From there, select Command Prompt and once you open it, enter each one of the commands given below by sequence.
  • bootrec /FixMbr
  • bootrec /FixBoot
  • bootrec /RebuildBcd
• Once you’re done executing the commands given above, type “exit” to close the Command Prompt window and then restart your computer and see if it fixed error code 0xc000014c.

REevil is one of the most active and successful hacking groups connected to Russia and operating all over the world. The group recently demanded a huge bitcoin ransom for an attack targeting IT firm Kaseya in the USA. Since Tuesday blog and payment site run by REvil group cannot be longer reached without any kind of explanation or why. The reason behind the disappearance is unknown but has sparked speculation that the group may have been targeted deliberately by authorities. US President Joe Biden said he raised the issue with Vladimir Putin during a phone call on Friday, after discussing the subject during a summit with the Russian president in Geneva last month. Mr. Biden told reporters that he had "made it very clear to him...we expect them to act" on information and also hinted the US could take direct digital retaliation on servers used for intrusions. The timing of Tuesday's outage has sparked speculation that either the US or Russian officials may have taken action against REvil - though officials have so far declined to comment and cyber experts say sudden disappearances of groups are not necessarily uncommon. The development comes after a series of high-profile ransomware attacks which have hit major US businesses this year. The FBI accused REvil - also known as Sodinokibi - of being behind a ransomware attack on the world's largest meat processing company JBS last month.