Removing NoEscape.exe - Boot Sector included

preview_player
Показать описание
Though a little bit more difficult to remove, it's still possible. In this video I'll show you how.

Registry Changes:
HKLM:
HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layout\Scancode Map

HKLM\SOFTWARE\Classes\exefile\shell\open\command
HKLM\SOFTWARE\Classes\exefile\shell\runas\command

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoRestartShell
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DisableCAD
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\UseDefaultTile
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\shutdownwithoutlogon
HKLM\SOFTWARE\Policies\Microsoft\Windows\System\DisableLogonBackgroundImage

HKCU:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD

HKCU\Control Panel\Desktop\AutoColorization
HKCU\Control Panel\Mouse\SwapMouseButtons

Music:
Tobu - Candyland [NCS Release]
DEAF KEV - Invincible [NCS Release]
#noescape #malware #trojan
Рекомендации по теме
Комментарии
Автор

It's been almost 3 years now and this video has just surpassed 6 milliion views and my channel has over 20K subscribers. For that, I would like to say a big *THANK YOU!* Whether or not you understand what I'm doing in this video, I would like to thank all of you for supporting my channel.
The screenlocker malware side of things has pretty much died down in recent years, so I am moving my channel towards other PC-related topics, like hardware. Do look forward to more hardware related videos in the future! I will also publish videos related to random experiments with PCs, be it hardware or software.
I originally planned to make this video as soon as Endermanch, the original creator of NoEscape.exe, released the first trailer demonstrating NoEscape.exe's payloads.
However, Endermanch published a removal tutorial along with the download link and if I were to make a removal tutorial, it would be nothing more than a duplicate, making me feel a little disappointed, until I realised that bootdata, the software that Endermanch used to fix the bootloader, was not published. Not only that, but the use of bootdata required an existing backup of the bootloader (which contains the partition table data). My method, which uses the software TestDisk, can restore the partition table without a prior backup.
This video really started to blow up, albeit not due to the reason I expected. I used the music "Tobu - Candyland", which I picked because I was searching for music to add to this video and it sounded nice. I didn't understand the Roblox tycoon reference.

Once again, thank you SO MUCH for your support! I really appreciate it.

OrangeGroupTech
Автор

you know its legit tutorial when the video got this music

billi
Автор

Who else just got this in their recommended and just watched it cuz why not

aro
Автор

I love how the creator didn’t wanna ruin people’s computers so he even put a warning on it and made it very clear to NOT use if you intend on using your computer

huntersiagames
Автор

alternative title: NoEscape.exe speedrun world record any%

kampe
Автор

What my grandparents see when I change the HDMI

tigerhack
Автор

no way this guy just escaped and made it look so dang easy 😭 you legend

pinkfedoras
Автор

I cant belive 6.6 million people needed a tutorial on how to remove this

aheadsounds
Автор

The virus: NO ESACPE
OGT: *Y E S E S C A P E*

adamrizkymubarak
Автор

I guess "NoEscape.exe" should be renamed "SomeoneEscaped:(.exe"

joelhoon
Автор

bro who is gonna actualy remember this sick tutorial.

STUDIO_YF
Автор

I love how this man literally just started completely installing the most dangerous malware file, and literally removes it, without even being afraid of doing anything, and also is smart enough to use Windows 10 PE to fix this. Outstanding job at this, man.

Edit: i started a war in the comments

Fedd_ambushiscoolL
Автор

Virus: “there is no escape..”

OGT: “Oh no!anyways”

G_.
Автор

edgy virus: THERE IS NO ESCAPE
OGT: escapes
edgy virus: *excuse me what the fuck*

adachiplsrailme
Автор

"Any last words?"
"Nah, I'd win."
*burns computer down*
edit:200 likes is crazy

eliminator
Автор

Thank you. I've needed this so much. My bro had that virus and needed help. Now he give you a sub.

Pwafelek
Автор

Teacher: The test isn't that hard

The test: Delete NoEscape.exe

Darkify暗
Автор

This is the hardest boss battle in computer history

kernal
Автор

surprised that you only have 21.1k subs that subscribe button looks really good so ima subscribe keep up the work
and cant believe you actually beat the No.Escape.EXE

robotjoseph
Автор

even though I dont even understand computers, I still watched this and is very impressed!

teylvuun