Hi!
A few hours ago, we have been victims of a scam try.
They sent us a "PDF" file that, it really was a scr file (a Windows screen saver). The file activated a SoftEther VPN process on the machine. I did not know about this software before, so I want to ensure that we successfully deactivated the process and any service on our machine.
Can you help me to know how can I verify that all SoftEther processes, services and files was removed?
Thanks in advance.
Ensure SoftEther VPN is fully deactivated
-
- Posts: 1319
- Joined: Sun Feb 14, 2021 10:31 am
Re: Ensure SoftEther VPN is fully deactivated
Your PC is already infected and removing only SoftEther may be insufficient. That said, proceed as admin:
Code: Select all
net stop sevpnserver
rd /s /q "C:\Program Files\SoftEther VPN Server"
reg delete "HKCU\Software\SoftEther Corporation" /f
reg delete "HKCU\Software\SoftEther Project" /f
reg delete "HKLM\Software\SoftEther Project" /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\SEVPNSERVER" /f