How to remove NoEscape.exe [Download link]

Hello, my friends! Let's hit 3000 likes? Check out my website! https://malwat.ch
Today I am going to show you how to remove NoEscape, as well as its quirks and backstory behind it! Now with a download link and more bugfixes.

Links:
NoEscape - https://github.com/Endermanch/MalwareDatabase/raw/master/NoEscape.zip
BootData - https://dl.malwat.ch/software/advanced/BootData.zip

Password: mysubsarethebest

Registry values (tried to sort them nicely, still a mess):
HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layout\Scancode Map

HKLM\SOFTWARE\Classes\exefile\shell\open\command
HKLM\SOFTWARE\Classes\exefile\shell\runas\command

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoRestartShell
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DisableCAD
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\UseDefaultTile
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\shutdownwithoutlogon
HKLM\SOFTWARE\Policies\Microsoft\Windows\System\DisableLogonBackgroundImage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD

HKCU\Control Panel\Desktop\AutoColorization
HKCU\Control Panel\Mouse\SwapMouseButtons

Timestamps:
0:00 - Intro
0:18 - Infection
1:12 - Recovery
1:29 - Restoring bootloader data
2:54 - Removing malware body
3:15 - Fixing the registry
4:40 - Restoring themes and users
6:08 - Touching up the registry
6:46 - Outro

Still have any questions? Send them to realendermanch@gmail.com!
Wish you to have a great day!

#endermanch #malware #trojan

Видео How to remove NoEscape.exe [Download link] канала Enderman