How to run
remove_persistence() from cyber_modules/persistence.py and prints one of two messages:
remove_persistence() returns a Tuple[bool, Path] — the boolean indicates whether anything was actually removed, and the path is the marker location that was checked.
What it removes
- Windows
- Linux
- macOS
- Deletes the registry value
VirusHunterAgentunderHKCU\Software\Microsoft\Windows\CurrentVersion\Run - Kills any running
VirusHunter.exeandpythonw.exeprocesses - Removes the marker file at
cyber_modules/simulated_startup/system_defender_autorun.txt
How to manually verify cleanup
After running the tool, confirm that nothing was left behind:- Windows
- Linux
- macOS
Open Registry Editor (Confirm there is no
regedit) and navigate to:VirusHunterAgent value. Then check Task Manager to verify no VirusHunter.exe or pythonw.exe processes are running.Output messages explained
| Message | Meaning |
|---|---|
Removed simulated persistence marker: <path> | The marker file existed and was deleted; platform-specific cleanup also ran. |
No persistence marker found at: <path> | The marker was already absent — either the game was never started, or cleanup already ran. |
“No persistence marker found” does not guarantee the platform-specific entries were already clean. If you suspect a stale registry entry or crontab line from a previous session, verify manually using the steps above.