Skip to content
This repository has been archived by the owner on Mar 31, 2024. It is now read-only.

How do I remove this tool from my system? #183

Closed
Toyv2 opened this issue Oct 31, 2023 · 2 comments
Closed

How do I remove this tool from my system? #183

Toyv2 opened this issue Oct 31, 2023 · 2 comments
Labels
documentation Improvements or additions to documentation question Further information is requested

Comments

@Toyv2
Copy link

Toyv2 commented Oct 31, 2023

oh no! i ran the file on my own device and the startup still persists (start up)?? why are all my security sites blocked (uac bypass + block sites) tho? and why are most of my files name .rose.encrypted (ransomware) ...? please help.

how do i remove this software from my device?

@gumbobrot
Copy link
Contributor

gumbobrot commented Nov 1, 2023

Hi! So first you need to delete this directory:

  1. Enter the appdata dir through pressing Windows + R and writing %APPDATA%. https://i.imgur.com/Zlf19zM.png
  2. Find the directory rose & delete it. https://i.imgur.com/WHQ2e0z.png ("löschen" means delete in german)

And then the reg entry:

  1. Enter the regedit by pressing Windows + R and then put in regedit. https://i.imgur.com/7TE1sFk.png (may require admin)
  2. At the top path write down this and hit enter: Computer\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. https://i.imgur.com/Sk5CTqA.png
  3. On the right side you should see the reg entry rose. Right click it and press delete. https://i.imgur.com/6iDet2G.png

I hope this works for you. If you have chosen to Block sites or encrypt your files over the ransomware, please Look into the resources/utils folder. There you'll find some files to revert these things.

  • the decrypter allows you to decrypt all your important data, but you'll need the key. the standard encryption dir is C:/Users.
  • our unblocker will allow you to invoke all security sites again (such as virustotal, avast etc.)
    (both tools need you to have python installed, preferably version 3.11.5)

@gumbobrot
Copy link
Contributor

Enjoy your day!

@gumbobrot gumbobrot added documentation Improvements or additions to documentation question Further information is requested labels Nov 1, 2023
@gumbobrot gumbobrot changed the title How to turn off if you ran it on your pc (logger) help! this software is installed on my device. how can i remove it and prevent the start-up call?? Nov 1, 2023
@gumbobrot gumbobrot pinned this issue Nov 1, 2023
@0xRose 0xRose locked as resolved and limited conversation to collaborators Nov 1, 2023
@gumbobrot gumbobrot changed the title help! this software is installed on my device. how can i remove it and prevent the start-up call?? How do I remove this tool from my system? Nov 2, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
documentation Improvements or additions to documentation question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants