filmov
tv
Removing NoEscape.exe - Boot Sector included
Показать описание
Though a little bit more difficult to remove, it's still possible. In this video I'll show you how.
Registry Changes:
HKLM:
HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layout\Scancode Map
HKLM\SOFTWARE\Classes\exefile\shell\open\command
HKLM\SOFTWARE\Classes\exefile\shell\runas\command
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoRestartShell
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DisableCAD
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\UseDefaultTile
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\shutdownwithoutlogon
HKLM\SOFTWARE\Policies\Microsoft\Windows\System\DisableLogonBackgroundImage
HKCU:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD
HKCU\Control Panel\Desktop\AutoColorization
HKCU\Control Panel\Mouse\SwapMouseButtons
Music:
Tobu - Candyland [NCS Release]
DEAF KEV - Invincible [NCS Release]
#noescape #malware #trojan
Registry Changes:
HKLM:
HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layout\Scancode Map
HKLM\SOFTWARE\Classes\exefile\shell\open\command
HKLM\SOFTWARE\Classes\exefile\shell\runas\command
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoRestartShell
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DisableCAD
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\UseDefaultTile
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\shutdownwithoutlogon
HKLM\SOFTWARE\Policies\Microsoft\Windows\System\DisableLogonBackgroundImage
HKCU:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD
HKCU\Control Panel\Desktop\AutoColorization
HKCU\Control Panel\Mouse\SwapMouseButtons
Music:
Tobu - Candyland [NCS Release]
DEAF KEV - Invincible [NCS Release]
#noescape #malware #trojan
Комментарии