Windows laptop turns off when unplugged

If your Windows 10 laptop suddenly turns off when you unplug its power cord, then you’ve come to the right place as this post will guide you on how you can fix this issue.

One of the most common causes for this kind of issue is that there is some problem with your laptop’s battery. It is possible that it might have gone bad or has been damaged. However, this couldn’t be the case especially if the laptop is new. The problem could have something to do with the system settings, connections, laptop hardware, and so on. To fix it, there are various suggestions you can check out such as follows:

Option 1 – Perform a hard reset on your laptop

This option works in most cases when the laptop with a removable battery is charging slowly as it is plugged in constantly. Refer to the steps below to do a hard reset on your laptop.

  1. Switch off the power of your laptop.
  2. Disconnect your laptop’s charger and then remove the battery.
  3. Tap and hold the power button for at least 30 seconds – doing so will discharge the capacitors of the motherboard and reset the memory chips that were active constantly.
  4. Plug the battery back and then charge the laptop again.

Check if the problem is fixed, if not, proceed to the next option below.

Option 2 – Try to change the Power Options

  • Tap the Win + R keys to open the Run utility.
  • Then type “powercfg.cpl” and tap Enter to open the Power Options window.
  • Next, go to your selected power plan and click the “Change plan settings” option to open a new page.
  • From there, click on the “Change advanced power settings” option. This will open a new window where you can see various power consumption options.
  • Now on the next window that appears, click on “Change advanced power settings”. This will open another window where you have to expand the Processor power management > Maximum processor state.
  • Then change the value for On battery mode to 25% and enable Adaptive brightness.
  • Now shut down your computer and try to boot it with the power cord unplugged.

Option 3 – Try to run the Power troubleshooter

The next thing you can do is to run the Power troubleshooter. To do so, follow these steps:

  • Go to Settings and navigate to Update & Security > Troubleshoot.
  • After that, look for the “Power” option from the given list of built-in troubleshooters and click on it.
  • Next, click on the “Run the troubleshooter” button to run the Power troubleshooter.
  • Once the troubleshooter is done identifying the problems, follow the next on-screen instructions to resolve the problem.

Option 4 – Try to run the Power Efficiency Diagnostics Report

You could also try to run the Power Efficiency Diagnostics Report to fix the problem. This tool is helpful and will help you analyze the status of the battery but note that this can be quite overwhelming especially if you’re not well-versed in this matter.

Option 5 – Try to uninstall or reinstall the Battery driver

You might also want to uninstall or reinstall the battery driver as it can also resolve the problem. But before you start, you have to shut down your computer and remove the power chord as well as the battery. Once you’re done, follow these steps:

  • Plug the power cord and restart your computer.
  • Once your computer has restarted, tap the Win + R keys to open the Run utility and type “devmgmt.msc” in the field and tap Enter to open the Device Manager.
  • After that, look for the “Batteries” driver from the list of drivers and expand it.
  • Then right-click on the “Microsoft ACPI-Compliant System” driver and click on the “Uninstall device” option.
  • Once it’s done, restart shut down your computer and remove the power cord and then attach the battery.
  • Now attach the power chord again and restart your computer to automatically install the driver.

Option 6 – Try to update the BIOS

Updating the BIOS can help you fix the problem but as you know, BIOS is a sensitive part of a computer. Even though it is a software component, the functioning of the hardware depends on it largely. Thus, you must be careful when modifying something in the BIOS. So if you don’t know much about it, it’s best if you skip on this option and try the other ones instead. However, if you are well-versed in navigating the BIOS, then follow the steps below.

  • Tap the Win + R keys to open the Run dialog box.
  • Next, type “msinfo32” in the field and press Enter to open System Information.
  • From there, you should find a search field on the bottom where you have to search for the BIOS version and then press Enter.
  • After that, you should see the developer and version of the BIOS installed on your PC.
  • Go to your manufacturer’s website and then download the latest version of BIOS on your computer.
  • If you are using a laptop, make sure that you keep it plugged in until you have updated the BIOS.
  • Now double click on the downloaded file and install the new BIOS version on your computer.
  • Now restart your computer to apply the changes made.

Note: If updating the BIOS didn’t help, you might want to consider resetting it instead.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

How to Fix Windows 10 Error Code 0xc0000142

Error Code 0xc0000142, What is it?

Error code 0xc0000142 is an error code that affects Windows 10 users. It often occurs when users attempt to run Windows applications. The message in the application error box allows users to recognize the error as it states that “the application was unable to start correctly (0xc0000142).” Common symptoms of this error code include the following:

  • Inability to start applications
  • Inability to completely run Windows applications
  • The appearance of error code 0xc0000142 message box

Error Causes

Error code 0xc0000142 in Windows 10 is often caused by issues related to startup programs, corrupted files or other applications. To address this issue, the source of the issue needs to be located. But how will users be able to do this while the error code is present?

Further Information and Manual Repair

To fix error code 0xc0000142 users will need to employ at least one manual repair procedure. This may include checking your system for corrupt files through tools like Microsoft’s System File Checker (SFC). If you are uncertain of your skills or prefer to get professional support, contact a Windows repair technician to assist you.

The top three methods to resolve error code 0xc0000142 include the following:

Method One: Perform a Clean Boot

A clean boot is one of the most basic procedures you can run to solve a Windows-based error code of this nature. It works by identifying whether or not conflict among startup programs is preventing Windows applications from running properly. This occurs through a clean boot process involving Windows using a minimal set of drivers and startup programs when you reboot.

Here is what you’ll need to do:

  • Step one: Go to Start and type msconfig
  • Step two: Right-click and select System Configuration
  • Step three: Select Service tab and click Hide all Microsoft Services then click Disable all.
  • Step four: Click Startup tab within the System Configuration dialog box.
  • Step five: Select Open Task Manager
  • Step six: Within the Startup tab of Task Manager, select Disable for each Startup item, then close Task Manager.
  • Step seven: Click OK on the Startup tab of System Configuration.
  • Step eight: Restart your computer.

This method resolves software conflict arising when you attempt to update, run a program or simply use your operating system. However, if error code 0xc0000142 remains unresolved after you restart your machine, follow the next step below.

Method Two: Run a System File Checker Scan

System File Checker (SFC) is a utility tool built into the Windows 10 operating system, as well as other versions of Windows, to detect and repair corrupted system files. Since corrupted system files can result in error code 0xc0000142, run this tool by following the steps below:

  • Step one: Go to Start and type Command Prompt or CMD.
  • Step two: Right-click and select Administrator
  • Step three: Check for and repair corrupted system files. Simply type sfc /scannow. (Be sure to place a space between “sfc” and “/scannow”).

Once these procedures are followed, the System File Checker tool will automatically scan your machine, and find and repair corrupted files. If this is the source or underlying cause of error code 0xc0000142 on your system, the error code will be resolved. However, if the source of the issue is not due to corruption in our system or is simply a more complicated issue try the next method highlighted below.

Read More
Razer unveils their first internal PC hardware
razer pc hardware componentsRazer is a well-known brand among PC gamers and users, it started as a peripheral manufacturer focused on keyboards and mouse but after years passed Razer expanded its inventory offerings. It soon started offering headphones and lately has branched into wider product lines like gaming chairs and protection masks. It is not a big surprise that Razer is expanding into other branches of the PC industry. This time, however, it has revealed not one but three new hardware for your PC. Case fans, all in one liquid cooler and power supply. There are not many details about the products themselves but one thing is one hundred percent confirmed, they come with Razer Chroma, all of them, even the fans.

Katana Chroma ATX PSU

razer power supplyMost interesting for me personally is Razers Katana, the power supply unit. It is a modular power supply ranging from 750W to 1200W with the additional option of Titanium rated one with an impressive 1600W of power. Power supply will start shipping in early 2022 and at the time of writing this article no price range has been released.

Razer Hanbo AIO

razer water coolingHanbo liquid cooler will feature an optimized intake design so it can ensure greater heat transfer and fluid dynamic for improved reliability and silent operation. Radiator comes in 240mm size with two fans and a larger one of 360mm with three fans. The pump will be able to rotate in any direction of full 360 degrees so it can fit in any case. Hanbo will be released in November this year but no pricing has been released so far.

Razer Kunai Chroma case fans

razer case fansKunai fans will boast high static pressure performance with lowered noise. They will go as far as 2200rpm for the 120mm version where the 140mm version will go up to 1600rpm. They will come with addressable LEDs and up to eight fans will be able to be connected to Razer’s PWM fan controller that will come with a magnet at the back for easy attachment to any steel part of PC casing. PWM will use Razer’s Synapse software to customize pulse width modulation in order to improve airflow and noise. PWM will be priced at $49.99 in the Razer Store and it is available for preorder. Fans are priced at $44.99 for one 120mm or $129.99 for a three-pack of 120mm. One 140mm will go for $49.99 and a three-pack will be $129.99.
Read More
Copy & Paste text between devices
If you have multiple products with Windows on them, Copy & Paste text between them is easy as 1,2,3 and we will be happy to tell you how can you do it. Hello and welcome everyone, today we will see how can we share text information between 2 devices using Windows 10 in instant. In order for you to be able to share text information between devices, there are two prerequisites that you must meet. The first is that all devices must be connected to the internet, the second is that you must have a Microsoft account. If you have both of these things continue with the tutorial, if you do not have a Microsoft account go to Microsoft website and create one for free. Also, know that this option needs to be turned ON on all devices in order to work. So steps we will explain will have to be done on each device, if you already have some device logged in and connected to Microsoft account, you can skip setting it up. Click on ⊞ WINDOWS and click on settings. Windows 10 Star menu with marked settings iconThen click on System. Windows settings system markedOnce you are in the system, on the left tabs find and click on Clipboard. windows settings clipboardIf you are not logged in to your Microsoft account do so on the right panel by locating Sync across devices and click on sign in. clipboard sign inWhen you are signed in click on the option to turn it on. sync across devicesOne option is turned ON, you will be greeted with two choices, to copy everything from the clipboard automatically or to choose text which you want to sync and paste it with ⊞ WINDOWS + V. Choose whatever better suits your needs, and you are done. Repeat these steps for other devices and you are done.
Read More
Should you use the Faraday bag

Faraday bag is a new take on security and privacy for people using a lot of electronic devices and credit cards. So what is exactly a Faraday bag?

faraday bag

Faraday bag explained

Faraday bag is designed in the same manner as the Faraday cage which was invented by Michael Faraday, who was an English scientist who contributed to the study of electromagnetism and electrochemistry. His main discoveries include the principles underlying electromagnetic induction, diamagnetism, and electrolysis.

The idea of the Faraday cage is that anything inside a cage that is made of specific grid size is completely isolated from outside current and magnetic fields since the cage itself will pick up everything upon itself. This means that for example, a human could be inside a cage that is struck by lightning and be perfectly safe and fine.

This idea led to the Faraday bag design, which takes this concept and places a wiring pattern inside clothing in order to isolate all magnetic fields from the outside so your devices and cards are completely cut off from any kind of influence and electromagnetic waves. If the pattern and quality of material for the bag are good, you have a fully safe placeholder for your stuff.

Advantages of Faraday bag

The main advantages, of course, are the privacy and safety of mobile phones and credit cards from outside influences and this is why this bag has been designed in the first place. If the bag is designed properly your phone would not be able to be hacked nor accessed from any outside source, GPS tracking will also be disabled and your phone location will not be visible. Credit cards will also be completely safe from any malicious attack via wi-fi signals.

Disadvantages of bag

Well, the disadvantage of using this bag is a very simple one, since your phone is isolated from outside influence that will also mean that you will not be able to take messages or calls on it while it is in the bag. Notifications from the internet would also be disabled so it is security vs usability deal.

Read More
KFConsole enters the console competition
Yes, you read that right, KFC is making a console partnered with Cooler Master. Bizzare at it sounds, it is even more bizarre that the console is designed to keep your food warm!!! You can pull out the drawer from the console out on its top and place some food there in order to keep it warm. kfconsole drawerThe console itself is coming in cylindrical shape powered by Intel CPU and ASUS GPU of the unknown chipset. It has Seagate Baraccuda 1TB SSD and it is VR-ready. The console will have raytracing and will be 4K ready.

My thoughts

Well, my thoughts are somewhat strange, on one side I am not really sold on food heating gimmicks and without specific hardware specifications, it is difficult to say how much power the console will have. Price is also not leaked so that is also a stumbling stone for making an informed opinion. I am a little puzzled and concerned about this whole heating food thing because personally, I can see 2 issues: Console overheating and fat dripping on inside hardware, I am sure they have somehow eliminated this but I would be very interested to see how.
Read More
Windows 10 Update and Shutdown/Restart is not working
Update and Shutdown/Restart is not working. As you have probably noticed, every time a new update is released and is downloaded on your Windows 10 computer, the operating system replaces the Restart and Shut down button with “Update and Restart” as well as “Update and Shut down”. This is most likely done so that you won’t miss the update. However, some users noticed that there are times when these buttons still continue to display the same message even if they’ve already performed the required operations such as shutting down or restarting their PCs. Cases like this happen when an update wasn’t installed properly or has failed which is why your computer keeps on prompting you to Update and Shutdown every time. To fix this dilemma, follow the options laid out below.

Option 1 – Try restarting the File Explorer

Restarting the File Explorer can definitely help you fix lots of issues especially when there is some issue with the user interface including this one.
  • On the right side of the Taskbar, right-click on any open spot.
  • Then click on Task Manager.
  • Next, scroll down until you see Windows Explorer.
  • After that, right-click on it and select Restart.
  • If you are able to kill its process, you have to tap the Win + R keys to open the Run dialog box and type “explorer.exe” in the field, and hit Enter to launch the Windows Explorer.

Option 2 – Try running the Windows Update Troubleshooter

As you know, Windows 10 has various auto-repair built-in tools to help users fix small issues which used to get fixed manually. And in this case, you will need the Windows Update Troubleshooter to fix the issue.
  • Go to Settings and click on Update and Security.
  • From there, click Troubleshoot and click on Windows Update and then click the “Run the troubleshooter” option.
  • After that, it will try to detect and automatically fix common issues in the Windows Updates which can be resolved by Windows itself. Note that the process may take several minutes before it completes so you need to wait until it’s done. Once it’s done, in case you have some pending update that wasn’t realized by the system early on, it will apply the fix right away and restart the Windows Update service.

Option 3 – Try setting the Power button to Shut down

In case the first two options didn’t work out, you can try changing what the power button does. To do that, refer to these steps:
  • Go to Control Panel > Power Options.
  • From there, select the “Choose what the power buttons do” option from the left side.
  • Then set the Power button setting the “When I press the power button” option to “Shut down”. After that, it will shut your computer down without installing the updates but obviously, this is only a temporary fix.

Option 4 – Turn off your PC instantly without updating it

  • Tap the Win + R keys to open the Run dialog box.
  • Type in “shutdown -s -f -t 0” in the field and hit Enter if you really want to turn off your computer without any delay.
  • You could also tap the Ctrl + Alt + Del keys and select Shut down from the bottom right menu.
Just like the third option, this is also only a temporary fix.

Option 5 – Try running the Windows Module Installer

The Windows Module Installer is a built-in service in Windows 10 that allows you to fix the stuck Windows Updates in your computer. To use it, follow these steps:
  • In the Cortana search box, type in “cmd” and from the search results that appear, right-click on Command Prompt and select the “Run as administrator” option from the context menu.
  • Once you’ve opened Command Prompt as admin, type the SC config trustedinstaller start=auto command and tap Enter.
  • After the command is executed, you will see the “[SC] ChangeServiceConfig SUCCESS” message displayed on the Command Prompt console.
  • Now exit Command Prompt and then check if the buttons are now back to normal.

Option 6 – Put your PC in a Clean Boot State

  • Log onto your PC as an administrator.
  • Type in MSConfig in the Start Search to open the System Configuration utility.
  • From there, go to the General tab and click “Selective startup”.
  • Clear the “Load Startup items” checkbox and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
  • Next, click the Services tab and select the “Hide All Microsoft Services” check box.
  • Click Disable all.
  • Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
After putting your PC in a Clean Boot State, try creating a system restore point and see if the problem still occurs. Clean Boot troubleshooting is designed to help you isolate the problem. For you to execute a clean boot troubleshooting, you must do a couple of actions (the steps are given above) and then restart your PC after every action. You might have to disable one third-party app after the other to really isolate the issue. And once you’ve narrowed down the problem, you can either disable the third-party app that’s causing the problem or remove it. Note that you must switch your PC back into the Normal Startup mode after you’re done troubleshooting the problem. Here’s how you can do it:
  • From the “Start” menu, go to System Configuration.
  • After that, switch to the General tab and click the option for “Normal Startup”.
  • Next, go to the Services tab and clear the checkbox for “Hide all Microsoft services”.
  • Then find and click “Enable all” and if prompted, you have to confirm.
  • Afterward, go to the Task Manager and enable all the Startup programs and confirm the action.
  • Restart your PC when prompted.
Read More
New Windows vulnerability discovered
The latest security vulnerability was discovered inside both Windows 10 and Windows 11 letting any user access admin privileges inside the operating system. This can, of course, be used by a potential attacker to get full control of the system. The problem lies in Microsoft's security rules assigned to the Windows Registry and the Security Account Manager. Both for some reason have reduced restrictions allowing any local user to fully access the files without administrator privileges. The problem is even more amplified if we think about Security Account Manager which includes all account data including the passwords of all users using the same PC. This can provide a potential attacker with all information and let them log on into the administrator account for full control. Microsoft is aware of the matter and is tracking it with code CVE-2021-36934, and includes a complete workaround for the issue, which includes restricting access to  %windir%\system32\config and deleting any restore points or Shadow volumes that were created before that point until the hole is plugged with an official security patch.
Read More
File Record Segment is Unreadable in Windows 10
If you suddenly encounter an error message saying, “ File Record Segment is Unreadable ” on a blue screen while booting your PC, it means that your hard drive is in an error state. This particular blue screen of death error might have a lot of bad sectors or might have reached its end. The workarounds you can try to resolve the issue is by locating the bad sectors or checking your hard drive for any discrepancies in the mapping and fix them. Follow the detailed instructions laid out below for these workarounds.

Option 1 – Try to check for any bad sectors and wrong configurations in your hard drive

The first thing you have to check is the boot files on your PC. As you know, your PC boots from these files and if there is anything wrong with any one of them or if one of them ends up getting corrupted, you will most likely see the blue screen of death error or a prompt with an error message saying, “File record segment is unreadable”. According to some users who reported this issue, new hard drives aren’t exempted from this error. That’s why it is recommended that you carry out this solution no matter what kind of scenario you are in. You will have to launch the Command Prompt in recovery mode and see if you can fix the problem by executing the check disk commands.
  • Upon booting, restart your PC and tap F11 to go to the recovery environment then select Troubleshoot.
  • Next, click Advanced from the given options and select Command Prompt.
  • After opening Command Prompt, execute the commands listed below, and don’t forget to hit Enter right after you type in each one of them and if you have installed Windows to some different directory, you must replace “C” with the name of the drive you’ve installed Windows with.
  • chkdsk C: /r /x
  • chkdsk C: /f
Note: The Chkdsk function might take a while before it finishes its operations so you need to be patient and wait until the entire process is completed. And depending on the situation, it might even take a day at most so patience is really the key here.

Option 2 – Try connecting the hard drive to a different computer

If option 1 didn’t work for you and you’re still seeing the error, you can try connecting the hard drive to a different computer and then copy the data first. Make it a priority to salvage the data just in case the hard drive won’t make it in the future. After replicating your hard drive, you can then try running the chkdsk commands that are listed in option 1 above in the new computer you’re connecting your hard drive to and make sure that you key in the correct drive letter that’s assigned to the hard drive you’re using. After executing the chkdsk commands, plug your hard drive back into the previous computer and then check if you can now boot it without any issues.

Option 4 – Replace the faulty hard drive

If none of the options provided above really worked out then maybe it’s time to consider getting a replacement for your hard drive. In about 50% of the cases about this error, some unfortunate users were left with no choice but to replace the hard drive since the problem is with the hard drive itself. Hard drives have a complex running mechanism which includes a head and the disk that rotates accordingly so you can check if the cables connected to the hard drive are connected properly and if it is in a correct position or not. In addition, you also have to make sure that the SATA adapters where the hard drive is connected are working properly. If the drive is showing problems in the I/O operation, there is little chance for you to use it as a normal hard drive. If the hard drive is in warranty, get it checked and replace it. If not, you might consider taking it to the service center for the specialists to take a look into it.
Read More
Start Search is not displaying results
If you have just installed the latest Cumulative Update on your Windows 10 computer and you find that since then, the Windows 10 Start Search is not displaying any results when you try to use it to search for something in your computer, then this post might help as it will give you some suggestions to fix the problem. This problem might be caused by some bugs brought in by the new cumulative update you’ve installed. It is also possible that Cortana is having some issues or that the Windows Search service hasn’t been initialized. Whatever the cause is, here are some suggestions you need to follow to fix this issue. You can try running the Search and Indexing troubleshooter or configure the
  1. Run Search and Indexing Troubleshooter
  2. Configure the Windows Firewall
  3. Reinstall Cortana.

Option 1 – Try to run the Search and Indexing troubleshooter

The first thing you can do is to run the Search and Indexing troubleshooter in Windows 10 as it checks whether the settings for Cortana are in place and automatically corrects any issues if the update or software installation has changed the settings. To run it just click on the Start button and select Settings > Updates and Security > Troubleshoot. From there, select the Search and Indexing Troubleshooter.

Option 2 – Restart Cortana’s process in the Task Manager

Restarting Cortana’s process in the Task Manager could also help you resolve the problem. Refer to the steps given below to do so.
  • Tap the Ctrl + Alt + Del keys to open the Security options window.
  • From there, look for the Task Manager in the given list and open it.
  • Next, look for the process of Cortana and right-click on it, and then select the End Task option to end its process.
  • After that, the Cortana process will restart by itself and re-initialize.

Option 3 – Try resetting Cortana

  • Open Cortana and go to the Settings section where you’ll see the “Turning off Cortana clears what Cortana knows on this device, but won’t delete anything from the Notebook. After Cortana is off, you can decide what you’d like to do with anything still stored in the cloud” option. Turn this option off.
  • Restart your PC.
  • After your computer boots, launch Cortana again and check.

Option 4 – Try to configure the Windows Firewall

  • Tap the Win + Fn + Shift (Pause) keys to open Control Panel.
  • From there, open the Windows Defender Firewall applet and click on the Advanced Settings to open the Windows Firewall with the Advanced Security panel.
  • Next, click on the Outbound Rules section and look for Cortana and then double click on it to open its Properties.
  • After that, make sure that the “Allow the connection” is selected although this is the default working setting.

Option 5 – Try to reinstall Cortana

If none of the options given above works, you must consider reinstalling Cortana.
  • First, right-click on the Taskbar and select the Task Manager.
  • Next, select File menu > Run new task and type “Powershell” in the field and then select the “Create this task with administrative privileges” option.
  • Click on OK to open the PowerShell console.
  • After that, type the following command and hit Enter to execute it:
Get-AppXPackage -Name Microsoft.Windows.Cortana | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)AppXManifest.xml"}
  • Restart your computer and check if the Windows Start Search is now working.
Read More
How to Obliterate PyLocky Ransomware

What is PyLocky ransomware? And how does it execute its attack?

PyLocky ransomware is a file-locking malware created in order to lock important files and demand ransom from victims in exchange for data recovery. This new ransomware uses the .lockymap extension in marking the files it encrypts. It starts to execute its attack by dropping the following malicious payload in the system:
Name: facture_4739149_08.26.2018.exe SHA256:8655f8599b0892d55efc13fea404b520858d01812251b1d25dcf0afb4684dce9 Size: 5.3 MB
After dropping its malicious payload, this crypto-malware connects the infected computer to a remote server where it downloads more malicious files and places them on system folders. It then applies a data gathering module used to gather data about the user and the computer. The malicious files that were downloaded earlier along with the data obtained are used for another module called stealth protection. This allows PyLocky ransomware to execute its attack without detection from any security or antivirus programs installed in the system. It also modifies some registry keys and entries in the Windows Registry such as:
  • HKEY_CURRENT_USERControl PanelDesktop
  • HKEY_USERS.DEFAULTControl PanelDesktop
  • HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun
  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
  • HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce
  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce
Once all the modifications are carried out, PyLocky ransomware will begin encrypting its targeted files using a sophisticated encryption cipher. Following the encryption, it adds the .lockymap extension to each one of the encrypted files and releases a ransom note named “LOCKY-README.txt” which contains the following content:
“Please be advised: All your files, pictures document and data has been encrypted with Military Grade Encryption RSA ABS-256. Your information is not lost. But Encrypted. In order for you to restore your files, you have to purchase a Decrypter. Follow these steps to restore your files. 1* Download the Tor Browser. ( Just type in google “Download Tor“ 2‘ Browse to URL: http://4wcgqlckaazungm.onion/index.php 3* Purchase the Decryptor to restore your files. It is very simple. If you don’t believe that we can restore your files, then you can restore 1 file of image format for free. Be aware the time is ticking. Price will be doubled every 96 hours so use it wisely. Your unique ID : CAUTION: Please do not try to modify or delete any encrypted file as it will be hard to restore it. SUPPORT: You can contact support to help decrypt your files for you. Click on support at http://4wcgqlckaazungm.onion/index.php”

How does PyLocky ransomware spread over the web?

PyLocky ransomware spreads using malicious spam email campaigns. Creators of this threat embed an infected attachment to spam emails and send them using a spambot. Crooks may even use deceptive tactics to trick you into opening the malware-laden immediately which is something you must not do. Thus, before opening any emails, make sure that you’ve thoroughly checked them. To successfully obliterate PyLocky ransomware from your computer, refer to the removal guide laid out below.
  • Step 1: Launch the Task Manager by simply tapping Ctrl + Shift + Esc keys on your keyboard.
  • Step 2: Under the Task Manager, go to the Processes tab and look for the process named facture_4739149_08.26.2018.exe and any suspicious-looking process which takes up most of your CPU’s resources and is most likely related to PyLocky ransomware.
  • Step 3: After that, close the Task Manager.
  • Step 4: Tap Win + R, type in appwiz.cpl and click OK or tap Enter to open Control Panel’s list of installed programs.
  • Step 5: Under the list of installed programs, look for PyLocky ransomware or anything similar, and then uninstall it.
  • Step 6: Next, close the Control Panel and tap Win + E keys to launch File Explorer.
  • Step 7: Navigate to the following locations below and look for PyLocky ransomware’s malicious components such as facture_4739149_08.26.2018.exe and LOCKY-README.txt as well as other suspicious files, then delete all of them.
%TEMP% %WINDIR%System32Tasks %APPDATA%MicrosoftWindowsTemplates %USERPROFILE%Downloads %USERPROFILE%Desktop
  • Step 8: Close the File Explorer.
  • Step 9: Tap Win + R to open Run and then type in Regedit in the field and tap enter to pull up Windows Registry.
  • Step 10: Navigate to the following path:
HKEY_CURRENT_USERControl PanelDesktop HKEY_USERS.DEFAULTControl PanelDesktop HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce
  • Step 11: Delete the registry keys and sub-keys created by PyLocky ransomware.
  • Step 12: Close the Registry Editor and empty the Recycle Bin.
Try to recover your encrypted files using the Shadow Volume copies Restoring your encrypted files using Windows Previous Versions feature will only be effective if PyLocky ransomware hasn’t deleted the shadow copies of your files. But still, this is one of the best and free methods there is, so it’s definitely worth a shot. To restore the encrypted file, right-click on it and select Properties, a new window will pop up, then proceed to Previous Versions. It will load the file’s previous version before it was modified. After it loads, select any of the previous versions displayed on the list like the one in the illustration below. And then click the Restore button.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status