How to remove NoEscape.exe [Download link]



Hello, my friends! Let’s hit 3000 likes? Check out my website! https://malwat.ch
Today I am going to show you how to remove NoEscape, as well as its quirks and backstory behind it! Now with a download link and more bugfixes.

Links:
NoEscape – https://github.com/Endermanch/MalwareDatabase/raw/master/NoEscape.zip
BootData – https://dl.malwat.ch/software/advanced/BootData.zip

Password: mysubsarethebest

Registry values (tried to sort them nicely, still a mess):
HKLMSYSTEMCurrentControlSetControlKeyboard LayoutScancode Map

HKLMSOFTWAREClassesexefileshellopencommand
HKLMSOFTWAREClassesexefileshellrunascommand

HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonAutoAdminLogon
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonAutoRestartShell
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonDisableCAD
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonUserinit

HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystemEnableLUA

HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorerUseDefaultTile
HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystemshutdownwithoutlogon
HKLMSOFTWAREPoliciesMicrosoftWindowsSystemDisableLogonBackgroundImage

HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools
HKCUSoftwarePoliciesMicrosoftWindowsSystemDisableCMD

HKCUControl PanelDesktopAutoColorization
HKCUControl PanelMouseSwapMouseButtons

Timestamps:
0:00 – Intro
0:18 – Infection
1:12 – Recovery
1:29 – Restoring bootloader data
2:54 – Removing malware body
3:15 – Fixing the registry
4:40 – Restoring themes and users
6:08 – Touching up the registry
6:46 – Outro

Still have any questions? Send them to [email protected]!
Wish you to have a great day!

#endermanch #malware #trojan

source