Windows PC Aid is a rogue virus family member which is given a good name but in reality it is a worst malware that will bring havoc on your computer if your PC is infected with it. “Windows PC Aid” is a scamware designed by hackers to raise funds maliciously from innocent internet users. They intend to sell fake security softwares to people. For this purpose, several malicious websites owned by hackers use Trojans to drop the Windows PCAid virus into computers. The installation of this program is done very secretly without user permission. After infecting a computer, “Windows PC Aid” will appear to be a legitimate Microsoft program to aid windows users against viruses and spywares. It will run some fake scanner utility and then will tell the user that Windows PC Aid has detected some dangerous keyloggers and malwares on your PC that must be removed very soon. Windows PC Aid will display continuous popup windows on infected computers screen stating that it is recommended to take an action to fix the problems it has found on your machine. It will tell the user it has found problem with your Firewall. Simply, Windows PC Aid is a bogus software that will try its best to scare you of viruses and convince you that your PC is virus affected and you need the full version of “Windows PC Aid” software so it could help you get rid of viruses. Please do not believe Windows PC Aid and its promotions or any of its warnings. It is totally a fake program which can not help you clean your PC. It is recommended to remove this Windows PC Aid virus as soon as possible instead of buying it.
How to uninstall Windows PC Aid virus manually:
To remove this virus manually, complete the following set of tasks. Do not forget to create a backup before getting started to the manual removal guide.
To prform manual removal steps, you may need to learn,
How to stop a process
How to delete registry entries
Stop Windows PC Aid processes:
Protector.exe
Disable Windows PC Aid DLL files:
npswf32.dll
Removee Windows PC Aid Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
There are more similar entries, you should let spyware Doctor to identify them.
Delete Windows PC Aid files:
%AppData%\Protector-[rnd].exe
Auto Removal
To remove this virus Automatically, We suggest following tools:
Malware Bytes Anti-Malware (Download)
HitMan Pro Anti-Malware (Download)
OK’ If it’s giving you 5 min berfoe it restarts then kill the program and berfoe it restarts download malware bytes anti malware. Update it and run it.Also’ After you kill the process go do a file search and delete as many of the files as you can find that go with this infection. If you can it will buy you more time.