SoftEther VPN User Forum

Posted: **Thu Dec 29, 2022 5:04 pm**

Hi!

A few hours ago, we have been victims of a scam try.

They sent us a "PDF" file that, it really was a scr file (a Windows screen saver). The file activated a SoftEther VPN process on the machine. I did not know about this software before, so I want to ensure that we successfully deactivated the process and any service on our machine.

Can you help me to know how can I verify that all SoftEther processes, services and files was removed?

Thanks in advance.

Posted: **Thu Dec 29, 2022 9:50 pm**

Your PC is already infected and removing only SoftEther may be insufficient. That said, proceed as admin:

Code: Select all

net stop sevpnserver
rd /s /q "C:\Program Files\SoftEther VPN Server"
reg delete "HKCU\Software\SoftEther Corporation" /f
reg delete "HKCU\Software\SoftEther Project" /f
reg delete "HKLM\Software\SoftEther Project" /f
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\SEVPNSERVER" /f

SoftEther VPN User Forum

Ensure SoftEther VPN is fully deactivated

Ensure SoftEther VPN is fully deactivated

Re: Ensure SoftEther VPN is fully deactivated