Removing NoEscape.exe - Boot Sector included
ฝัง
- เผยแพร่เมื่อ 30 พ.ย. 2020
- Though a little bit more difficult to remove, it's still possible. In this video I'll show you how.
Endermanch's original removal tutorial: • How to remove NoEscape...
Windows PE ISO: www.hirensbootcd.org/ (The Gandalf Windows PE ISO used in this video was taken down, link is for Hiren's BootCD which does exactly the same thing)
ISO creator: sourceforge.net/projects/iso-...
TestDisk: www.cgsecurity.org/Download_a...
Registry Changes:
HKLM:
HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layout\Scancode Map
HKLM\SOFTWARE\Classes\exefile\shell\open\command
HKLM\SOFTWARE\Classes\exefile\shell
unas\command
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoRestartShell
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DisableCAD
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\UseDefaultTile
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\shutdownwithoutlogon
HKLM\SOFTWARE\Policies\Microsoft\Windows\System\DisableLogonBackgroundImage
HKCU:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD
HKCU\Control Panel\Desktop\AutoColorization
HKCU\Control Panel\Mouse\SwapMouseButtons
Music:
Tobu - Candyland [NCS Release]
DEAF KEV - Invincible [NCS Release]
#noescape #malware #trojan - วิทยาศาสตร์และเทคโนโลยี
![[Teaser EP.2] “MasterChef Junior Thailand Season 3” วันอาทิตย์ที่ 9 มิ.ย. นี้ 6 โมงเย็น ทางช่อง 7HD](http://i.ytimg.com/vi/KojBzrifbWg/mqdefault.jpg)
![[LIVE] : ONE ลุมพินี 66 วันนี้!! คู่เอก "ก้องชัย vs อัคราม"](http://i.ytimg.com/vi/j4uI5Uy8mWQ/mqdefault.jpg)
![[TH] VCT Masters Shanghai Playoffs DAY 6 // G2 vs GEN | 100T vs TH](http://i.ytimg.com/vi/M6jxF80AajI/mqdefault.jpg)
It's been almost 3 years now and this video has just surpassed 6 milliion views and my channel has over 20K subscribers. For that, I would like to say a big *THANK YOU!* Whether or not you understand what I'm doing in this video, I would like to thank all of you for supporting my channel.
The screenlocker malware side of things has pretty much died down in recent years, so I am moving my channel towards other PC-related topics, like hardware. Do look forward to more hardware related videos in the future! I will also publish videos related to random experiments with PCs, be it hardware or software.
I originally planned to make this video as soon as Endermanch, the original creator of NoEscape.exe, released the first trailer demonstrating NoEscape.exe's payloads.
However, Endermanch published a removal tutorial along with the download link and if I were to make a removal tutorial, it would be nothing more than a duplicate, making me feel a little disappointed, until I realised that bootdata, the software that Endermanch used to fix the bootloader, was not published. Not only that, but the use of bootdata required an existing backup of the bootloader (which contains the partition table data). My method, which uses the software TestDisk, can restore the partition table without a prior backup.
This video really started to blow up, albeit not due to the reason I expected. I used the music "Tobu - Candyland", which I picked because I was searching for music to add to this video and it sounded nice. I didn't understand the Roblox tycoon reference.
Once again, thank you SO MUCH for your support! I really appreciate it.
Nice, also first reply lol
Cool
awesome
yay
i swear everytime i look at something based on a specific topic, i always come at the right time and the owner who hasnt been active just talked. Very weird coincidence or someone is watching over us?
Who else just got this in their recommended and just watched it cuz why not
Yeah I did and I gained 20 brain cells from this ( tho not understanding anything after the 1 min mark XD )
me
Ya same
Mee
Me
you know its legit tutorial when the video got this music
it's*
@@CreeperPookie stfu
@@swizzymizzle3023 no u
@@CreeperPookie Grammar police alert
@@onesunnyday1797 no u
I love how the creator didn’t wanna ruin people’s computers so he even put a warning on it and made it very clear to NOT use if you intend on using your computer
yup coz it wasn't meant to be a virus more like a project
@@kripo_se The original didnt care and just started no warning
@@NexVTuberRealit was made by violet athlete as a project
@@NexVTuberReal Bro it was made by enderman. There is no 'original' version.
Why can I Imagine A Kid Wanting to Mess Around And Accidentally skip the Warning Lol
I actually like how the developer of the malware actually puts a warning before the app starts
Same as memz
Its because it wasn't actually meant to be a virus and just something of a project
@@stupidpieceofequipment so would it ever go away,m
@@stupidpieceofequipment or is it w virus and they didbt mean for it to be one
@@lbryant143 it just a project to test and learn, something more like that
This is the hardest boss battle in computer history
indeed.
Even stronger than SCP 079
Just wait until you got ransomware and your file is gone
@@spiritool petya moment
WW2 bro
"Any last words?"
"Nah, I'd win."
*burns computer down*
edit:200 likes is crazy
I love jjk!:D
@@Kelhimself ME TOO ^^!!!!
@@serizawaloverrrrsame hereee
I cant belive 6.6 million people needed a tutorial on how to remove this
I got it in my recommended and watched it cuz why not
My friend said it was a game
and ishowspeed thought it was a game@@matthewruth8918
Fr
I just watched it becuase it was on my recommended
Virus: “there is no escape..”
OGT: “Oh no!anyways”
I won't like this comment.. Already at its best number
@@oldpb2134 you sure? the 69 is broken
@@gamessatelision7327 it wasn't before :(
Keqing
Get dis comment to 666 likes now lower and no higher
alternative title: NoEscape.exe speedrun world record any%
Yes 👌
Any% would be going through all the Payloads before fixing it
@@hyphe1337 wouldn't any% be fixing it asap while all%/100% would be going through all payloads
@@SRG378 LMAO
I think the run can be optimized, lose time in BSOD section
no way this guy just escaped and made it look so dang easy 😭 you legend
Not exactly looked so dang easy
it absolutely didnt look easy
the creator (enderman) made a video about fixing it aswell, i think it was on his alt, tho.
I love how this man literally just started completely installing the most dangerous malware file, and literally removes it, without even being afraid of doing anything, and also is smart enough to use Windows 10 PE to fix this. Outstanding job at this, man.
Edit: i started a war in the comments
he installed it on a virtual machine obviously
@@f0kes32 Not my point
@@f0kes32 🤓🤓
@@f0kes32 thats not the point
@@f0kes32 bruh
I guess "NoEscape.exe" should be renamed "SomeoneEscaped:(.exe"
Underrated comment deserves more likes
Edit:thx for 25 likes never gotten dis much
@@tepencadorna1164 ye
lol
*waaa -*
Exactly
The very embodiment of
“Call an ambulance, but not for me”
"Oh, so you've come to kill me? Well, Uno reverse card."
Wh6362733
"Oh no!"
"Anyway"
@Mtn DEW ,w,
“No u”
bro who is gonna actualy remember this sick tutorial.
surprised that you only have 21.1k subs that subscribe button looks really good so ima subscribe keep up the work
and cant believe you actually beat the No.Escape.EXE
edgy virus: THERE IS NO ESCAPE
OGT: escapes
edgy virus: *excuse me what the fuck*
This comment deserves more attention
@@kaidenonbway yes
@@kaidenonbway yes
@@kaidenonbway yes
@@kaidenonbway yes
"Do you want to enjoy the last minutes using your computer?"
Orange: no. (Proceeds to escape the inescapable)
You copy
He did
@@mightyontop2643 Copyright Claim?
@@therandomguy6200 no no like copy comment
@@mightyontop2643 you can copy comments if it has no copyright ;)
Thank you. I've needed this so much. My bro had that virus and needed help. Now he give you a sub.
Why did ur bro downloaded the virus?
He wanted to download a game but it Has been this virus. The file was downloaded from Google so this was an incident.
Wow gotta give you the credit for the hard work just to show people how to remove the virus! Great video keep it up
DO YOU WANT TO ENJOY THE LAST MINUTE OF USING YOUR COMPUTER? *no.*
lol 😂
@@chuuyanakaharas you dont understand the joke?
@@Beelzeon huh that was a joke..?..
@@chuuyanakaharas as funny as any entertainment you can get of any gacha video
What the actual fuck is happening in the replys
I misspelt it on purpose
The virus: NO ESACPE
OGT: *Y E S E S C A P E*
Your channel is very nostalgic :/
Old days Arcane Adventure.
yes yes escape hee
@@fujiwaranomokou8923 jealous cuz he has 6k subs and u don’t?
@@Chewie. he / she isnt
@@Chewie. how do you even come to this conclusion????
even though I dont even understand computers, I still watched this and is very impressed!
BRO TYSM WITHOUT YOU I WOULD HAVE NOT GOTTEN THIS THING OUT +1 SUBSCRIBER!!!!!
Why was I expecting a jumpscare when the wallpaper appeared
eh i thought it would be like mrsmajor where it has a jumpscare but phew good thing it doesn't
Same lol
Same :))
@@OrangeGroupTech yo just some docs on my screen its so cool from your part
Im the 400th like
Teacher: The test isn't that hard
The test: Delete NoEscape.exe
Omg yes 😭👍
Me: just resets the data and reinstalls the apps i remember
@@GamingWithAnthonyPaul The point is that you cannot just reset data if you do the virus is still there thats point of this video if there was ability to just reset data he would show that easier way to remove it.
The test: understand what this guy is saying to do without any malware deleting experience.
@@memehivefive7145 the test:play no escape exe and find the files and delete it
I tried to search for this. Good I found you on time.
OMG THANK YOU SO SO MUCH! I ALMOST LOST MY COMPUTER! LOVE YOU!!
Well, the virus is saying "Dont close this ta..." closes tab"
Lol
when did *s go out of Fashion?
@@survivalist2607 since 2021.
666 likes
As th person who made the comment's likes 699 I feel immense power
*malware goes onto computer*
Orange tech logs in
No escape: why do I hear boss music
Original Comment
Lol
More like Why did I hear happy music
*Megalovania intensifies*
Orange tech : i found death behind your door *and he want to give you a small "gift"*
Although I’m a mechanical engin, I always hyped by these knowledge.
Shout out to all the cybersecurities!!!
even thought this is an tutorial it's so satisfying to watch
its not, hes just doing it and explaining it
"There's no escape"
Random indian guy : "Hello guys, today I will teach you how to escape this No Escape virus"
Indians always are the best technicians and idk why
@@ratiomaster8062 ikr
Lol
@@ratiomaster8062 not neccesarily the best, but when you have a population of like 1/7th of the total population, competition becomes a problem. Basically if you want to make it somewhere good, you gotta be spending your whole life behind a book. Or your parents gotta be rich
@@ratiomaster8062 they're scammers
Virus: no escape
This guy: escapes
Virus: wait, that's illegal
This guy: *I AM HACK GOD*
Virus: I don't have such weaknesses
This guy: *yes*
@@bl1zz8rds82 *how could. h e*
@@Tripminei mi mi mi "i'M tHe cREitOr oF tHe mALwARe nO esCApE " fu** you
@@Tripminei you its ez ;-;
This man does a better job that legitimate anti-virus centers.
THIS IS SO TRUE
No? Yk you have to turn off ur anti virus for it to work if u don’t the Anti virus will not let it run
all ill tell you is that aint no one could follow you step by step, reminds me of those minecraft building tutorials anyway, keep up the good work my g
please translate from gibberish is this supposed to be a compliment
What my grandparents see when I change the HDMI
correct LOL
lmao
Underrated
@@isnipe2k301 not really. I’ve seen this type of comment on almost every type of video.
LMAOAOAOOAO
imagine if someone just casually has their password as "death"
Probably the Death members (it's a metal band)
me when pc
Ooo
mine is: "suicide"
@@voonillathemalo DOnt do it
TH-cam's algorithm is still serving this video.
Just goes to show it's a good dish
The goodest guy to destory this no escape! 10/10
I love how the virus is trying to be so edgy and scary but he just shows everyone how to delete it lol
ikr
candyland in the background makes it so much better
Ikr
But 1 question: how did he record during restart?
edit: thanks yall
@@flytude well i dont know
"Do you want to enjoy the last minutes of your computer?" Ornage Group tech: No
Doomguy in Ancient Gods 2:
You know... he should've said "F--- you virus!"
@@leothefieryhedgemouse6576 this is the internet, don't be afraid to swear
Ornage
@@anagames4601 Ornage
damn you know what you are doing bro, you have a lot of talent with tech
you have successfully escaped from the “No Escape.exe” malware ¡Good job!
*"if there is a problem,that's mean there's also a solution"*
-unknown
True
I agree
Or "The impossible is possible, all you gotta do is make it so"
@@PhilVyn46137 I can jump on the moon if I wanted to?
@@robertinoo1507 ...Umm.. Yeah?
This guy is so smart it's just a meme at this point, he's doing this with ease. I did not understand anything after the 1 minute mark.
I would’ve thrown my computer in the garbage if I got this virus
i was legit like
Ah yes.
*W O R D S*
@@WhyHandlesIMeanFroggchamp bruh that's the dumb way at least try to fix it with this method and imagine a guy that gets this malware on his pc when a 9 year old is trying to pirate a dumb game
@@mintyboi711 yeah though. If a video like this existing I could just copy what he does
Yep me too
I just watched it for no reason, it was really that good of a video.
Same
NO WAY IT WORKS TYSM (some fills were missing but no problem) LIKE FR YOR A LEGENDE I ALREADY TRYED DOING EVRY THING DAMN TY
I love how the music is so cheerful yet the footage looks like satan's personal pc
Personal personal computer
Very cool
Oh right, postal has vehicles now. Very funny assholes.
satan made me play postal 3 please dont play it sucks ass
ppc
5 year old me after installing "free minecraft": oh look at this app,no.escape,what's that? _three seconds later_ *_M U M_*
Hi (●’◡’●)ﾉ teacher Duolingo, help me learn some language please🙏😓
@@basedSkeleton uhh
konichiwa god me uh
no dios uno
@@Kridstal Spanish or vanish
@@aurexify SI MUCHO TACO
@@basedSkeleton yeh a skeleton
such an enjoyable watch :3
thanks for the interesting video
You are really good at removing Viruses, OGT! I'm always removing Real Viruses if I have on my HP Laptop!
אחי מצאתי מישהו ישראלי כאילו wtf
@@hypixelplayerbelike6376 זה רק אני
Dude who made this virus seeing people playing with his virus as a game :
👁️👄👁️
It was made as a creepypasta...
that guy must have felt cheated on
@@blunderingfool Still a virus
Life hack B)
The creator of that virus has a channel called "enderman"
the scariest thing here isnt the virus but the fact youre so good at coding
The fact that im not smart then i cant do that without knowledge
The scariest thing here is the intro sonf
This is not really classed as 'coding' but I gotta admit man knows his way around windows
There was no coding involved here
@@pez2536 god the ptsd
THANK YOU SO MUUUCHHH I NEEDED THIS THANK YOUUUUU!!!!
this is some next level stuff dude
I like how the malware you installed is like “bro you sure?”
NoEscape: you can't defeat me, wrecked fool.
this person who just deleted it: *I am 4 parallel universes ahead of you.*
Me reading this comment: *I feel 1000 parallel universes ahead of you two*
@@Soredli lol
I uninstalled my computer and reinstalled it
Dogyann?
i know but he can
Orange Group Tech: have fun dying.
great way to gain a customer. Will be in touch sometime soon! ;)
I watched the WHOLE video knowing that I don't need it later... I hope I'll get an award for that
NICE JOB YOU WATCHED A TWELVE MINUTE VIDEO I'M SURE YOU'RE THE FIRST PERSON TO EVER DO THAT WOOOWWWW
"Best malware"
**Proceeds to cutely anihilate it's existance in less than an hour**
proceeds to cutely get gruesomely murded
FRR
NoEscape.exe:you can't escape
Me: c a n d y l a n d a t 8 9 0 v o l u m e
NoEscape.exe: *turns into Flood Escape 2*
Malware: *cutely dies,sweats and plays with broken toes*
*and also makes a tutorial out of it*
>"do you want to enjoy las..."
>"No"
>Proceeds to escape
Chad
How so many likes I can't even get 1
@@baconwhopper bro he’s only got 69 whatchu on ‘bout
@@Ransarya funny number haha
@@Ransarya he got 69420 mins wdym bro
''Maybe, just maybe, there is an escape'' is a phrase that fills me with determination
My respect bro ,you are incredible:0
This man is so brave he straight up rejected a computer virus when it was "being nice"
And he also uses brave browser
@@bread3448 brave is superior
@@traumedged brave steals your personal data like password and shii and sell them to hackers
@@jerry4325 Thats ironic because their ads literally say we dont do that haha
@L42 Jerry that's bold claim, buddy. You have any source to back it up?
Orange Group Tech: *Escapes*
NoEscape.exe: *Wait that's illegal*
Yes
dun dun dun! lol
Lol
@• noescape go brrrrrrrrr
bro escaped the noescape
still a fun vid to watch after 2 years
intructions clear, i prayed for u
_Renames file to "YesEscape.exe"_
ez
you deserve an award
Yescape
Ez ik
Haha
XDDDDDD "ez" no ez this hard virus to delete.
This: "There's no escape."
OGT: "No escape? More like a challenge."
Not even a challenge for him
“it’s just a little tickle”
@@cewkie dapz power
Dang dude I had no clue what was going on this whole video but it was interesting lol 😂
Wow!😮😮😮 This guy is a legit engineer!🤯
When my sister download "Sims 7"
XD
Is this story based on True story or?
i litealy asked for spider man and then i got sims 7 excuse me what the fuck
teknic
@@UtraxTV Nope
My parents explaining how they got to school back in the day:
Your joke doesn't make any sense at all, wtf ?
LordRegex the person who made this video is showing us that it’s very difficult to get rid of NoEscape.exe. I made this joke because I find this similar to how parents say ‘I had to walk to school from my house which was an hour away’
Yeeeees xD
Me explaining how I got to online school to my kids
yes
This takes me back to early 2000's :3 cool days imma tell ya that.
I had also that virus, but you really helped me , thanks !
No way dude followed it like a tutorial
Me not having enough storage to download NoEscape.exe: I have beaten you
Me that dont have windows: im outsmarting your outsmarting
I have -1KB storage
Me not downloading noescape.exe: you fool you have fallen for one of the classic blunders I am 4 parallel universes ahead of you I have already found an escape
@@Noname-fd7pc its a lie,dont believe him kiddo
@@Noname-fd7pc r/whoosh
The background music really adds a lot to the horror aspect
yes the music looks like from a horror movie
@@leitinho4851 it is
@@leitinho4851 Thea not the best
CONGRATS!!!🥳
Currently watching this trying to fix my computer, thanks, I don’t even know how it works when virus running tho
Him rebooting into NoEscape.exe is like going back to the final boss battle after doing every sidequest.
Fr
This comment made my day
What 😂
Exactly
memories broken
The virus: Shows to be scary and creepy
The music: 😃🎶💃
Oh
low budget roblox tycoon music
@@okok-oe5sr lol
@@okok-oe5sr lol
don't you guys dare make a chain
This is the best video, it help me delete the virus no escape!
I love this videos is just so satisfying
Him removing the virus by deleting certain files and stuff while I try just deleting the virus icon
I always delete the files of virus so it won't work even if it has the icon.
@@yichedplayz gaylords dont speak.
@@oreo741 what I was recommended this
Imagine they forget to protect the calls to the icon file resource and the virus crashes
Lol
We guys just cry if we got this virus
But this Legend man installed it on his pc for just a video to help people
Dude respect to this man👍👍
this is actually very impressive
When your brother downloads "Free Minecraft":
Its paonful i know that coz i downloaded free minecraft and huzuni
What
@@Ordlnary_Gamer i mean painful
@@Ordlnary_Gamer bc i have viruses
@@Overr010 huzuni is safe wym
"Do you want to enjoy the last minutes of your computer?"
this guy: no
no *closes window*
No escape: *Hes too powerful!*
r u dumb
am i talking about foxy
@️urso amarelo Golden x toy Chica da fuck
@️urso amarelo Golden x toy Chica ?
bruh what the fuck
Tysm, 2 Years l8r still woorks installed for a meme and I was jus gonna throw my pc away but I stumbled upon this video.
Probably the most popular malware removal video ever.
Some of you would be thinking "Hey but endermanch already did that", but afaik endermanch did not document the software that he coded during his removal video. Here's an alternate method.
EDIT: He put up the download link to bootdata after this video's views surpassed his lol.
To those wondering how I managed to record this video, it's because the removing of the malware was done on a Virtual Machine (VM).
I'm gonna add "music" to the list of blocked words
th-cam.com/video/NKcsENlAcRg/w-d-xo.html i found the thing he use
@@lukaschristmann9890 not the windows PE software but his boot sector fix software
Maybe its included? I dont really know yet
@Apple PlayZ its Enderman not enderman bruh
Ok, but Enderman don't done that. He changed registry editor and rebooted his VM
NoEscape.exe : You can't escape
OGT : *escapes*
NoEscape.exe : *surprised pikachu face*
NoEscape: you weren't sapost to do that
@@demodertf2 ah yes sapost
You: made cringe surprised pikachu face comment
Me: thats dumb
You: Surprised pikacu face
@@TheHeroWhoAsked i mean yeah i was kind of trying to make a joke were i used a pikachu face comment at his pikachu face comment :(
NoEscape: WAIT THATS ILEGAL
How in the world! You are one of a kind!
wow this is an really good thing bc my phone got infected thanks for this
"There is no game."
"There *is* a game."
"There is no escape."
"There *is* an escape."
"There is heaven."
"There is hell."
"There is no virus."
"There *is* an virus."
@@iixemi a*
@@iixemi ma'am (I assume you are at a gender near feminine because of your name) this is IGP-00365-23 here to inform you that you just violated Article No. 1553 Section 2 which states; The use of the determiner "an" is specifically for subjects or objects that starts with a vowel. You used it as a determiner before a word that starts with a consonant, for this I must bring you to the nearest IGP station so you can give us an explanation for why you missed used the said determiner. Thank you for your time
there is there no there yes
Imagine if he accidentally gets this malware again, he knows exactly what to do lmao
🤣
like he ever could get malware on accident! hes a genius!
When a warning appears ? I don’t think so
@@mjnavarro3250 warning: no escape exe is iMpOsIbLe to escape
@@A_Person177 a normal computer user* it's not hard to figure it out
man the tutorial are so good thx.
I love how this asked him do he want to enjoy last mins on his computer and he just answered no. XD
it's like:
"It's not my last seconds *uno reverse card*"
Noescape.exe: ŃØ ĘŠĆÄPĘ
Orange group tech: im boutta end this mans whole career
Thx for 129 likes!!! I appreciate it a lot and a ton!!!