Aegix PC Security Support
Help for Aegix PC Security on Windows: how to reach us, answers to common questions, and a complete list of what the app can change on your PC — with how to undo each change.
- Nothing changes without your OK
- Undo in Settings › System changes
- Admin rights only per action
- No services, drivers or scheduled tasks installed
Last updated: · applies to Aegix PC Security 1.2.4 and later (direct download and Microsoft Store version). See also the privacy policy and the terms of use.
1. Get help
E-mail admin@cryosim.com. Aegix is made by a small team: we read every message and reply as soon as we can, but we cannot promise a fixed response time.
To help us help you, please include:
- the Aegix version (Settings › About) and your Windows version;
- what you clicked, what you expected and what happened (a screenshot helps);
- if something failed, the latest log file from
%LOCALAPPDATA%\Aegix\logs. Logs contain no passwords; please check them before sending.
2. Frequently asked questions
Is Aegix PC Security free?
Yes. There is no account, no subscription, no in-app payment and no ads.
Does Aegix replace Microsoft Defender?
No. Aegix works with Microsoft Defender, which is part of Windows: its threat scan can start a Defender quick scan and it shows Defender’s status. Aegix never turns Defender off and never adds Defender exclusions.
Will Aegix change anything on my PC without asking?
No. Aegix only changes a Windows setting, file or registry value after you click the action and confirm it. If the action needs administrator rights, Windows also shows its own permission prompt (UAC). Web Shield and Safe DNS never change your hosts file or DNS settings in the background — a list update is applied only when you click it.
Why does Windows ask for administrator permission?
Some fixes change settings that belong to the whole PC (for example the firewall, the hosts file or machine-wide startup programs). Aegix itself always runs with normal rights. For such a fix it starts a second copy of itself with administrator rights for that one task only; that copy does the task and closes. If you decline the prompt, nothing is changed.
How do I undo a change?
Open Settings › System changes. Every change Aegix made is listed with the date; press Undo next to it, or Undo all Aegix system changes to reverse everything at once (Windows asks for administrator permission once). Many features also have their own off switch, such as Web Shield › Turn off or Safe DNS › Back to automatic.
How do I remove Aegix completely?
First open Settings › System changes and choose Undo all Aegix system changes. Then uninstall it in Windows Settings › Apps › Installed apps › Aegix PC Security › Uninstall. See section 4 for the folders that stay behind and how to delete them.
My PC is managed by my employer or school. Can I use Aegix?
You can use the checks and the scan. Before changing system settings, ask your IT team: their policies may undo the change or forbid it. Where a Windows policy controls a setting (for example Remote Desktop or Storage Sense), Aegix tells you and does not change it.
Web Shield blocks a site I need.
Open Web Shield and add the site to your allowed sites, then apply the list; or turn Web Shield off. To report a site that is wrongly listed, e-mail us the address.
How do I stop the anonymous usage counts?
Settings › Privacy: switch off “Share anonymous usage counts”. The privacy policy lists everything the app sends.
What can I keep in the Vault?
The Vault page (called Passwords before version 1.3.0) holds passwords, photos and videos, files and notes, all encrypted on the PC behind one PIN or Windows Hello. You can tag any item and filter the list to show everything with a tag. Passwords sync with Aegix on your phone as before. Photos, videos, files and notes are not synced: to move them between Aegix on your phone and the PC (either way), use Vault › Export encrypted backup (.aegixvault) on one device and import the file on the other. The Vault is free on the PC.
I forgot or lost what was in my Vault. Can you recover it?
No. Everything in the Vault is encrypted on your devices with keys we never receive. Use Vault › Export encrypted backup (.aegixvault) to keep your own copy, and password sync to keep your passwords on more than one device.
How is Aegix updated?
The Microsoft Store version is updated by the Microsoft Store. The direct-download version checks cryosim.com for a signed update. Aegix never installs other software.
3. What Aegix can change on your PC — and how to undo it
This is the complete list of changes Aegix PC Security 1.2.4 can make outside its own data folder. The rules behind every row:
- You decide. Each change happens only after you click the action and confirm it in Aegix. Actions marked “admin” also need your approval in the Windows admin prompt (UAC); nothing happens if you decline.
- Admin rights for one task at a time. Aegix starts with normal rights. An admin action runs in a separate copy of Aegix started for that single task, which only accepts a fixed list of tasks and checked values, and closes when done. Aegix installs no services, drivers or scheduled tasks and does not keep running as administrator.
- The old value is kept. Before an admin change, Aegix saves the previous value in
%ProgramData%\Aegix\undo, a folder only administrators and Windows can read or write. The admin copy of Aegix never writes into your user folders. - Everything is listed. Settings › System changes lists each change with its date, an Undo button (or the reason it cannot be undone), and Undo all Aegix system changes (one admin prompt).
- Never: Aegix never turns off Microsoft Defender or adds Defender exclusions, never changes or deletes Microsoft’s own scheduled tasks, never creates scheduled tasks or services, never stops or removes remote-access programs (it only reports them), never edits browser profile files, and never deletes your documents for good: files you choose to delete go to the Recycle Bin.
Security check (admin)
| What changes | Where on your PC | When | How to undo |
|---|---|---|---|
| Turn on Windows Firewall | Firewall state of the Domain, Private and Public profiles (netsh advfirewall set allprofiles state on) | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | System changes › Undo puts back the previous state of each profile |
| Turn off Remote Desktop | HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server › fDenyTSConnections = 1. Not changed when a Windows policy controls it. | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | System changes › Undo restores the previous value |
| Turn off Remote Assistance | HKLM\SYSTEM\CurrentControlSet\Control\Remote Assistance › fAllowToGetHelp = 0. Not changed when a policy controls it. | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | System changes › Undo restores the previous value |
| Turn User Account Control back on | HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System › EnableLUA = 1, ConsentPromptBehaviorAdmin = 5, PromptOnSecureDesktop = 1 (the Windows defaults) | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | System changes › Undo restores the previous values (a restart may be needed) |
| Turn off SMB1 (old file-sharing protocol) | Windows feature SMB1Protocol disabled; SMB server setting EnableSMB1Protocol = false; HKLM\SYSTEM\CurrentControlSet\Services\mrxsmb10 › Start = 4 and MRxSmb10 removed from LanmanWorkstation › DependOnService | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | System changes › Undo restores the previous feature state and values (a restart may be needed) |
| Turn off the Guest account | The built-in Guest account (the one ending in -501) is disabled | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | System changes › Undo enables it again if it was enabled before |
| Turn on Defender protection against unwanted apps (PUA) | Microsoft Defender preference PUAProtection = Enabled | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | System changes › Undo restores the previous setting |
| Update Defender virus definitions | Asks Microsoft Defender to download its latest definitions (Update-MpSignature) | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | Cannot be undone, and does not need to be: these are Microsoft’s own updates that Windows also installs by itself |
| Turn off AutoPlay | HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers › DisableAutoplay = 1 (your account only, no admin) | Only after you click it and confirm in Aegix | System changes › Undo restores the previous value |
Other buttons on this page only open the matching Windows Settings or Windows Security page; Windows makes those changes, not Aegix.
Scan for Threats
| What changes | Where on your PC | When | How to undo |
|---|---|---|---|
| Disable a startup entry (your account) | The value is removed from HKCU\Software\Microsoft\Windows\CurrentVersion\Run, \RunOnce or \Policies\Explorer\Run; a copy is kept in HKCU\Software\CryoSim\Aegix\DisabledAutoruns | Only after you click it and confirm in Aegix | Restore in the scan results, or System changes › Undo: the value is written back exactly |
| Disable a startup entry (all users, admin) | The value is removed from HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \RunOnce, \Policies\Explorer\Run or the WOW6432Node Run / RunOnce keys; a copy is kept in HKLM\Software\CryoSim\Aegix\DisabledAutoruns | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | Restore, or System changes › Undo: written back only from that admin-only copy |
| Disable a Startup-folder shortcut | Your Startup folder (%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup): the file is moved to %LOCALAPPDATA%\Aegix\data\scan\disabled_startup. All-users Startup folder (%ProgramData%\Microsoft\Windows\Start Menu\Programs\StartUp, admin): moved aside, with the original path and a SHA-256 of the file recorded in HKLM\Software\CryoSim\Aegix\DisabledStartup | Only after you click it and confirm in Aegix; all-users folder also needs UAC | Restore, or System changes › Undo: moved back to the same place (all-users: only if the file is unchanged) |
| Disable a scheduled task found by the scan | The task is disabled (never deleted). Tasks under \Microsoft\ and tasks made by Microsoft are refused. | Only after you click it and confirm in Aegix; Windows may also ask for admin approval | Restore, or System changes › Undo: the task is enabled again |
| Turn off a suspicious proxy | HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings › ProxyEnable = 0 and AutoConfigURL removed (old values saved) | Only after you click it and confirm in Aegix | Restore, or System changes › Undo: the saved values are written back |
| Disable a suspicious hosts-file line | Only a line the scan flagged in C:\Windows\System32\drivers\etc\hosts is commented out with # Aegix disabled:; every other line stays byte for byte | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | Restore, or System changes › Undo: the comment mark is removed |
| Delete a flagged file | The file you chose goes to the Recycle Bin | Only after you click it and confirm in Aegix | Restore it from the Windows Recycle Bin |
| Defender quick scan | Runs Microsoft Defender’s own quick scan (MpCmdRun.exe -Scan -ScanType 1) with normal rights; Defender settings are not changed | When you run a scan with the Defender option ticked | Nothing to undo (Defender handles anything it finds) |
Remote-access programs and browser extensions or policies found by the scan are only reported; Aegix opens the matching Windows or browser page so you can decide.
Web Shield and Safe DNS (admin)
| What changes | Where on your PC | When | How to undo |
|---|---|---|---|
| Web Shield on / update | A block of lines 0.0.0.0 <domain> between # >>> Aegix Web Shield (do not edit) and # <<< Aegix Web Shield in C:\Windows\System32\drivers\etc\hosts. Lines outside the block are not changed. Copies of the hosts file are kept in %ProgramData%\Aegix\shield; the DNS cache is flushed. The threat list is signed by CryoSim and checked by the app before use. | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC). A new list is applied only when you click “Apply update” — never in the background. | Web Shield › Turn off removes the whole block, or System changes › Undo |
| Safe DNS on | DNS servers of each connected network adapter set to Cloudflare’s malware-blocking servers 1.1.1.2, 1.0.0.2, 2606:4700:4700::1112, 2606:4700:4700::1002; the previous servers of each adapter are saved first | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | Safe DNS › Back to automatic, or System changes › Undo: each adapter gets its previous DNS servers back (automatic, or the ones you had set) |
Apps & startup
| What changes | Where on your PC | When | How to undo |
|---|---|---|---|
| Turn a startup app off or on | The same switch Task Manager uses: a StartupApproved value under HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run or \StartupFolder (your apps), or the same keys under HKLM including \Run32 (apps for all users, admin). The app’s own Run entry or shortcut is not removed. | Only after you click it and confirm in Aegix; all-users apps also need UAC | The same switch, or System changes › Undo restores the previous value |
| Turn a sign-in scheduled task off or on | The task is enabled or disabled (schtasks /Change); never deleted or created. Microsoft tasks and tasks under \Microsoft\ are refused. Services are listed only. | Only after you click it and confirm in Aegix; Windows may also ask for admin approval | The same switch, or System changes › Undo |
| Turn notifications off for an app | HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\<app> › Enabled = 0 (only for apps Windows already lists) | Only after you click it and confirm in Aegix | The same switch, or System changes › Undo |
| Remove a forced browser home page or search engine | Only the home-page, start-up page and search-engine policy values under Software\Policies\Google\Chrome, Microsoft\Edge, BraveSoftware\Brave (HomepageLocation, HomepageIsNewTabPage, ShowHomeButton, NewTabPageLocation, RestoreOnStartup, RestoreOnStartupURLs, DefaultSearchProvider…) and Mozilla\Firefox (Homepage, SearchEngines\Default). In HKCU (your account) or HKLM (all users, admin). Other policies stay. An exact copy is saved first. | Only after you click it and confirm in Aegix; all-users policies also need UAC | System changes › Undo (Restore) writes the saved values back exactly |
| End a process | The program you choose is closed (only programs in your own session; Windows and Aegix are protected) | Only after you click it and confirm in Aegix | Cannot be undone: start the program again. Unsaved work in it is lost. |
| Uninstall an app | Starts that app’s own uninstaller (or Windows’ removal for Store apps) | Only after you click it; the uninstaller asks its own questions | Reinstall the app |
Pop-up blocking (off by default) only closes pop-up windows of apps you added yourself; it changes no settings. Choosing a default browser opens Windows Settings, where Windows makes the change.
Storage and clean-up
| What changes | Where on your PC | When | How to undo |
|---|---|---|---|
| Deep cleanup: your temporary and cache files | Folders named in the app before you clean: %TEMP% (files older than 1 day); %LOCALAPPDATA%\Microsoft\Windows\Explorer (thumbcache_*.db, iconcache_*.db); %LOCALAPPDATA%\Microsoft\Windows\WER; %LOCALAPPDATA%\CrashDumps; Edge and Chrome Cache, Code Cache, GPUCache, ShaderCache, GrShaderCache; Firefox cache2; %LOCALAPPDATA%\D3DSCache, NVIDIA\DXCache, AMD\DxCache. Files in use are skipped; links are never followed. | Only after you click it and confirm in Aegix. Temporary-file cleaning is off by default everywhere in the app; automatic clean-up is off by default. | Cannot be undone: these files are deleted, not moved to the Recycle Bin. Windows and your apps create them again when needed; your documents are not touched. |
| Deep cleanup: Windows temporary and cache files (admin) | C:\Windows\Temp (older than 1 day); C:\Windows\SoftwareDistribution\Download; the Delivery Optimization cache; %ProgramData%\Microsoft\Windows\WER\ReportArchive and \ReportQueue; C:\Windows\MEMORY.DMP and C:\Windows\Minidump; *.log / *.cab older than 7 days in C:\Windows\Logs\CBS and \DISM. Files in use are skipped. | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | Cannot be undone (deleted caches, error reports and old logs). Aegix never deletes Windows.old; it opens Windows Disk Cleanup for that. |
| Empty the Recycle Bin | All drives’ Recycle Bin (only if you tick it) | Only after you click it and confirm in Aegix | Cannot be undone |
| Large files, duplicates, Downloads › Delete | The files you choose go to the Recycle Bin | Only after you click it and confirm in Aegix | Restore them from the Recycle Bin |
| Downloads › Move into type folders | Files in your Downloads folder are moved into sub-folders such as Downloads\Pictures; nothing is overwritten | Only after you click it and confirm in Aegix | Move them back by hand; nothing is deleted |
| Storage Sense | HKCU\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy › 01 (on/off), 04 (clean temporary files), 2048 (how often). Not changed when a policy controls it. | Only after you click it and confirm in Aegix | The same switch, or System changes › Undo restores the previous values |
Toolbox
| What changes | Where on your PC | When | How to undo |
|---|---|---|---|
| Flush DNS | Clears the Windows DNS cache (ipconfig /flushdns); admin only if Windows requires it | Only after you click it and confirm in Aegix | Nothing to undo: the cache refills by itself |
| Renew IP address | ipconfig /release then /renew; the connection drops for a few seconds; admin only if Windows requires it | Only after you click it and confirm in Aegix | Nothing to undo |
| Reset network | netsh winsock reset and netsh int ip reset: Windows network settings back to their defaults. A restart is offered (you can cancel it). | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | Cannot be undone: Windows replaces the old settings with its defaults. VPN or proxy apps may need to be set up again. |
| Clean up old Windows components | Dism.exe /Online /Cleanup-Image /StartComponentCleanup (removes superseded components in WinSxS) | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | Cannot be undone: updates installed before the clean-up can no longer be uninstalled |
| Install Windows updates | Installs the pending Windows software updates shown in the app through Windows Update (no drivers, no optional or feature updates; the confirmation tells you that the updates’ licence terms are accepted, as Windows Update does). Aegix never restarts the PC by itself. | Only after you click it, confirm in Aegix and approve the Windows admin prompt (UAC) | Not from Aegix: most updates can be removed in Windows Settings › Windows Update › Update history › Uninstall updates |
| Repair taskbar | Restarts File Explorer and deletes %LOCALAPPDATA%\IconCache.db and %LOCALAPPDATA%\Microsoft\Windows\Explorer\iconcache_*.db | Only after you click it and confirm in Aegix | Nothing to undo: Windows rebuilds the icon cache |
| Restart File Explorer / Clear clipboard history | File Explorer is restarted / your clipboard history is cleared | Only after you click it and confirm in Aegix | Cannot be undone (clipboard history) |
| Game Mode | HKCU\Software\Microsoft\GameBar › AutoGameModeEnabled | Only after you click it and confirm in Aegix | The same switch, or System changes › Undo |
Aegix’s own files and settings
| What changes | Where on your PC | When | How to undo |
|---|---|---|---|
| App data | %LOCALAPPDATA%\Aegix: settings, the list of system changes (data\changes.json), scan results, the encrypted Vault (passwords, photos, videos, files and notes), caches and logs | While you use the app | Delete the folder after uninstalling (see below) |
| Admin data | %ProgramData%\Aegix: undo (previous values for Undo), shield (hosts-file copies), logs (log of admin tasks). Administrators and Windows only. | When an admin action runs | Delete the folder after Undo all and uninstalling (admin rights needed) |
| Backups of disabled startup entries | HKCU\Software\CryoSim\Aegix and HKLM\Software\CryoSim\Aegix | When you disable a startup entry in the scan | Removed when the entry is restored; the empty keys can be deleted in Registry Editor |
| Start with Windows | Microsoft Store version: the Windows startup task of the app package (see Windows Settings › Apps › Startup), off until you turn it on. Direct-download version: HKCU\Software\Microsoft\Windows\CurrentVersion\Run › Aegix. | When you turn it on in Settings | Settings › Startup and closing; removed on uninstall |
4. Before you uninstall: undo all
Open Aegix › Settings › System changes › Undo all Aegix system changes before you uninstall. Windows asks for administrator permission once, and every change that can be reversed is put back. Uninstalling the app on its own does not reverse settings you asked Aegix to change (for example the Web Shield block in the hosts file or Safe DNS).
What stays on the PC after you uninstall:
- changes you did not undo (see section 3), and changes that cannot be undone by their nature;
%LOCALAPPDATA%\Aegix(your settings, the encrypted Vault, the list of changes) and%ProgramData%\Aegix(previous values and logs). They are kept so a reinstall keeps your Vault and can still undo earlier changes. The direct-download uninstaller offers to delete%LOCALAPPDATA%\Aegix; otherwise delete both folders yourself.
Already uninstalled without undoing? Reinstall Aegix: the list in Settings › System changes comes back from
%LOCALAPPDATA%\Aegix, so you can use Undo all and uninstall again. Or by hand: remove the lines between the two
Aegix Web Shield markers in C:\Windows\System32\drivers\etc\hosts (Notepad run as administrator), and set
DNS back to automatic in Windows Settings › Network & internet › your connection › DNS server assignment.
If you need help, e-mail admin@cryosim.com.
