Another rogue antivirus program from the family of malware is windows PC aid. The distribution and installation of this rogue program is by means of Trojans. Windows PC aid detects false infections and sends many false security warnings and notices to make you realize that your computer is infected with many malicious software.Then, it insists you to buy the full version of this program. Be sure to note that this software is not capable to detect any infections, or free your system from such infections, nor it can protect your system from any future real threats.

This program is configured to automatically run whenever you login into the windows. This program will start to scan your system without any permission right after its launch. Fake scan result shows that your computer is infected with numerous viruses, and to remove these viruses, you have to buy the full version of Windows PC aid. Scan result, and the files that are mentioned in scan result are all false, and sometimes, they don’t actually exist on your computer. Thus, there is no danger in ignoring these scan results.

All of these warnings are false and you should ignore them all. It is important to remove windows PC aid as soon as possible. In order to remove this program, follow the instructions given below:

RemoveWindows PC aid processes

  1. Click on Start and then go for the option ‘Run’.
  2. Type tskmgr and press enter.
  3. This command will cause the Windows task manager to open.
  4. You can also open the Windows task manager directly by pressing the short cut keys ALT, CTRL and DEL all at a time.
  5. Find the ‘processes’ tab and click on it and then find the Windows PC aid processes.
  6. All the processes are listed under the column name called ‘image name’.
  7. Right click the processes and then select the option Delete.
  8. The Windows PC aid processes are:

Protector-[rnd].exe

%AppData%\Protector-[rnd].exe

Remove Windows PC aid registry key values

  1. Open Run using the start menu.
  2. Type regedit in it and press enter.
  3. Select the left pane of the windows registry editor and click on Edit.
  4. Now further click on Find and then enter the Windows PC aidregistry values in it one by one.
  5. Right click on the shown registry values and then press Delete.

The Windows PC aid registry values that must be removed from the computer are:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings ‘WarnOnHTTPSToHTTPRedirect’ = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System ‘DisableRegedit’ = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System ‘DisableTaskMgr’ = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System ‘DisableRegistryTools’ = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system ‘ConsentPromptBehaviorUser’ = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system ‘EnableLUA’ = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system ‘ConsentPromptBehaviorAdmin’ = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ‘Inspector’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings ‘net” = ’2012-6-4_7′

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings ‘UID’ = ‘otbpxlqhjd’

HKEY_CURRENT_USER\Software\Windows PC Aid

HKEY_CURRENT_USER\Software\ASProtect

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\alevir.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmdagent.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install[1].exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows PC Aid

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\npfmessenger.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protector.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\srng.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tsadbot.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\xp_antispyware.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Windows PC Aid

Remove Windows PC aid other files

  1. Open search and find out the following files.
  2. When you have located the files, select them and press delete.

%AppData%\Microsoft\Internet Explorer\Quick Launch\Windows PC Aid.lnk

%AppData% \Protector-[rnd].exe

%AppData%\Windows PC Aid\Instructions.ini

%Desktop%\Windows PC Aid.lnk

%Programs%\[random]\[random].exe

%Programs%\Windows PC Aid.lnk

%AppData%\Windows PC Aid\ScanDisk_.exe

%StartMenu%\Windows PC Aid.lnk

%AppData%\[random]\[random].exe

 

How to Remove Windows PC aid?
Tagged on:                         

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>