BestCrypt modules remain after uninstallation

Please follow these steps to remove residual BestCrypt modules manually:

1. Make sure BestCrypt is not listed at Control Panel --> Programs --> Uninstall a program. If it does, select BestCrypt, click Uninstall and reboot your PC after the process is finished.

2. Open "Device Manager": press 'Win'+R, type 'devmgmt.msc' and click 'OK'.

- if "BestCrypt bus controllers" entry exists - it means that BestCrypt driver was not uninstalled properly. Uninstall it manually as follows:

- expand the entry, right-click on the "BestCrypt bus controller for ..." subitem and run "Uninstall" command;

3. Delete all files from the Jetico home folder (default paths are C:\Program Files (x86)\Jetico\BestCrypt for 64-bit architecture systems and C:\Program Files\Jetico\BestCrypt for 32-bit architecture systems)

4. Delete these driver files from C:\Windows\System32\drivers\ :

-bcbus.sys

-bcfnt.sys

-bcswap.sys

-fsh.sys

-BC_*.sys - algorithm drivers

-moh.sys

-mhk.sys  

-MftWipeFilter.sys

5. Open Windows Registry Editor: press 'Win'+R, type 'regedit' and click 'OK', then delete the following registry keys:

HKEY_CURRENT_USER\Software\Jetico

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Jetico  

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BestCrypt

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\bcbus

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\bcfnt

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\*** - algorithms

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\bcswap

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\fsh

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\moh

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\mhk

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MftWipeFilter

6. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDLLs and delete Jetico entries highlighted on the screenshots below:

7. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\ and modify following entries:

Important note!

These registry keys contain "Upper Filters" subkeys that must be processes carefully (click 'Modify'):

a. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}

"UpperFilter" subkey contains two names - "bcfnt" and "PartMgr" and maybe some other names

You should delete "bcfnt" but leave the others intact.

b. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96F-E325-11CE-BFC1-08002BE10318}

"UpperFilter" subkey contains  - "mouclass" and "moh" and maybe some other names

You should delete "moh" but leave the others intact.

c. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}

"UpperFilter" subkey contains  - "kbdclass" and "mhk" and maybe some other names

You should delete "mhk" but leave the others intact.

8. Reboot.