Windows PC Aid

From Wiki-Security, the free encyclopedia of computer security

Windows PC Aid Information
Type: Spyware
Analysis: Installs & gathers info from a PC without user permission.
Infection: By downloading freeware & shareware.
Symptoms: Changes PC settings, excessive popups & slow PC performance.
Detection Tool: >>> Download SpyHunter's Spyware Scanner <<<

SpyHunter's spyware scanner is intended to quickly scan and identify spyware on your PC. If you wish to eliminate spyware from your PC and prevent future spyware attacks, we recommend you buy SpyHunter's spyware removal tool, which includes full technical support and a Spyware HelpDesk to tackle spyware that is uniquely affecting your PC.
IE Alert:

If you are using Internet Explorer and can not download SpyHunter, please use a different browser like Firefox or Chrome.

Windows PC Aid is a rogue anti-spyware program designed by the VirusDoctor malware family. It targets PC and web users, who unknowingly download the rogueware into their desktop voluntarily or involuntarily. Although Windows PC Aid markets itself as PC security software, Windows PC Aid is in reality a misleading application that must not be downloaded at all costs. Most important of all, PC users need to refrain from buying any full-version Windows PC Aid software, which is usually promoted as a solution for the alleged virus infection. The truth of the matter is Windows PC Aid is the infection itself, and must be eliminated before the infiltration compromises the PC any further.

How Windows PC Aid Operates

Windows PC Aid counts several other fake anti-virus applications from Virus Doctor as its clones. These include Windows Malware Firewall, Windows Recovery Series, Windows Advanced User Patch and Windows Antivirus Rampart, among others. If you've had any experience dealing with these clones, you will realize that Windows PC Aid functions in roughly the same manner. It may be installed in any PC through a hoax website or a Trojan that downloads Windows PC Aid through a backdoor. It is also possible for this rogue anti-spyware tool to be installed through a drive-by download that installs itself without forewarning.

The creators of Windows PC Aid may also use search engine optimization tactics in order to position itself at the top of web searches, according to malware analysts. As this practice is a common strategy employed by these cybercriminals, it is possible to get a Windows PC Aid infection through questionable news websites or sites that offer free online malware scanning services.

The Corrupt Goals of Windows PC Aid

All of these tactics serve to achieve one purpose and one purpose only – convince you to pay up for full-version software of Windows PC Aid. Since Windows PC Aid presents itself as the only viable solution for the alleged virus infections, Windows PC Aid will coax you into buying its licensed version. However, Windows PC Aid will not eliminate the malware or fix any of the problems Windows PC Aid presents. If left in your computer, this fake anti-spyware program may introduce more malware and aggravate the infection. Paying for Windows PC Aid software is not only a fruitless expense, it is also an unfortunate way for you to compromise the state of your computer by purchasing a fake anti-virus tool.

The plague brought about by rogueware like Windows PC Aid is not seen to stop any sooner, especially as new types of rogue anti-spyware software are introduced almost daily, albeit repackaged under different names. Knowing how to differentiate between authentic PC security software and a rogue anti-virus application is an essential first step in steering clear of these malicious infestations.

Windows PC Aid is not created to aid in restoring the best execution of your computer. It is a malicious security program that should be erased without delay. Windows PC Aid will not offer you any advantage whatsoever. Delete Windows PC Aid from your system using licensed security software ASAP.

To check your computer for Windows PC Aid, download SpyHunter Spyware Detection Tool.

SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Windows PC Aid and other threats. If you detect the presence of Windows PC Aid on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Windows PC Aid.


Detection of Windows PC Aid (Recommended)

Windows PC Aid is difficult to detect and remove. Windows PC Aid is not likely to be removed through a convenient "uninstall" feature. Windows PC Aid, as well as other spyware, can re-install itself even after it appears to have been removed.

You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Windows PC Aid and other spyware, adware, trojans and viruses on your computer.

Run a Windows PC Aid scan/check to successfully detect all Windows PC Aid files with the SpyHunter Spyware Detection Tool. If you wish to remove Windows PC Aid, you can either purchase the SpyHunter spyware removal tool to remove Windows PC Aid or follow the Windows PC Aid manual removal method provided in the "Remedies and Prevention" section.

Method of Infection

There are many ways your computer could get infected with Windows PC Aid. Windows PC Aid can come bundled with shareware or other downloadable software.

Another method of distributing Windows PC Aid involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Windows PC Aid on your system. Windows PC Aid installs on your computer through a trojan and may infect your system without your knowledge or consent.

If you think you may already be infected with Windows PC Aid, use this SpyHunter Spyware dectection tool to detect Windows PC Aid and other common Spyware infections. After detection of Windows PC Aid, the next advised step is to remove Windows PC Aid with the purchase of the SpyHunter Spyware removal tool.


Windows PC Aid may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Windows PC Aid from your computer.

Remedies and Prevention

Windows PC Aid, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Windows PC Aid along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.

Install a good anti-spyware software

When there's a large number of traces of Spyware, for example Windows PC Aid, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Windows PC Aid and other types of spyware.

Remove Windows PC Aid manually

Another method to remove Windows PC Aid is to manually delete Windows PC Aid files in your system. Detect and remove the following Windows PC Aid files:


  • %AppData%\Windows PC Aid\ScanDisk_.exe
  • %CommonAppData%\58ef5\SP98c.exe

Other Files

  • %AppData%\Windows PC Aid\Instructions.ini
  • %AppData%\Microsoft\Internet Explorer\Quick Launch\Windows PC Aid.lnk
  • %Programs%\Windows PC Aid.lnk
  • %Desktop%\Windows PC Aid.lnk
  • %CommonAppData%\SPUPCZPDET\SPABOIJT.cfg
  • %CommonAppData%\58ef5\SPT.ico
  • %StartMenu%\Windows PC Aid.lnk

Registry Keys

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows PC Aid
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows PC Aid\DisplayIcon [unknown dir]\[unknown file name].exe,0
  • HKEY_CURRENT_USER\oftware\Microsoft\Windows\CurrentVersion\Run\Windows PC Aid”%CommonAppData%\58ef5\SP98c.exe” /s /d
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows PC Aid\DisplayName Windows Malware Firewall
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows PC Aid\DisplayVersion
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows PC Aid\UninstallString “[unknown dir]\[unknown file name].exe” /del
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows PC Aid\InstallLocation [unknown dir]
  • HKCU\Software\MicrosoftWindows\CurrentVersion\Uninstall\Windows PC Aid\Publisher UIS Inc.
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\LocalServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\LocalServer32\ [unknown dir]\[unknown file name].exe
  • HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
  • HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\ Implements DocHostUIHandler
  • HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\ProgID
  • HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\ProgID\ [unknown file name].DocHostUIHandler
  • HKEY_LOCAL_MACHINE\Software\Classes\Dumped_.DocHostUIHandler
  • HKEY_LOCAL_MACHINE\Software\Classes\Dumped_.DocHostUIHandler\ Implements DocHostUIHandler
  • HKEY_LOCAL_MACHINE\Software\Classes\Dumped_.DocHostUIHandler\Clsid
  • HKEY_LOCAL_MACHINE\Software\Classes\Dumped_.DocHostUIHandler\Clsid\ {3F2BBC05-40DF-11D2-9455-00104BC936FF}
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\FWCFG\MaxFileSize 1048576
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\FWCFG\EnableConsoleTracing 0
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\FWCFG\EnableFileTracing 0
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\FWCFG\ConsoleTracingMask -65536
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\FWCFG\FileDirectory %windir%\tracing
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\FWCFG\FileTracingMask -65536
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVWEBGRD.EXE
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVWEBGRD.EXE\Debugger svchost.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\About.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\About.exe\Debugger svchost.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe\Debugger svchost.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ad-Aware.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ad-Aware.exe\Debugger svchost.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe\Debugger svchost.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AluSchedulerSvc.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AluSchedulerSvc.exe\Debugger svchost.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV\Debugger svchost.exe

External links

PC Infected

If your computer is running slow, or making excessive popups, you may be infected with Spyware.

Click here to Download SpyHunter's Spyware detection tool.Click here

Disclaimer Information
This website, its content or any portion of this website is NOT affiliated with, connected to, or sponsored by Windows PC Aid or its creators in any way. This website does not advocate the actions or behavior of Windows PC Aid and its creators. Our objective is to provide Internet users with the know-how to detect and remove Windows PC Aid and other Internet threats.

The readers of this article should not mistake, confuse or associate this article to be an advertisement or a promotion of Windows PC Aid in any way. The content provided on this website is intended for educational or informational purposes and is provided "AS IS" with no warranties, and confers no rights.