Removing NoEscape.exe – Boot Sector included

Though a little bit more difficult to remove, it’s still possible. In this video I’ll show you how.
Endermanch’s original removal tutorial:
Discord:
Windows PE ISO:
ISO creator:
TestDisk:
(All NOT sponsored)
Registry Changes:
__HKLM:__
HKLMSYSTEMCurrentControlSetControlKeyboard LayoutScancode Map

HKLMSOFTWAREClassesexefileshellopencommand
HKLMSOFTWAREClassesexefileshellrunascommand

HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonAutoAdminLogon
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonAutoRestartShell
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonDisableCAD
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonUserinit

HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystemEnableLUA

HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorerUseDefaultTile
HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystemshutdownwithoutlogon
HKLMSOFTWAREPoliciesMicrosoftWindowsSystemDisableLogonBackgroundImage

__HKCU:__
HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools
HKCUSoftwarePoliciesMicrosoftWindowsSystemDisableCMD

HKCUControl PanelDesktopAutoColorization
HKCUControl PanelMouseSwapMouseButtons

Music:
Tobu – Candyland [NCS Release]
DEAF KEV – Invincible [NCS Release]
#noescape #malware #trojan