Remove Win 7 Smart Defender (uninstall guide)

A question has been raised on Yahoo.Answers recently on how to get rid of Win 7 Smart Defender. We’ve investigated the case and tested this program on our test workstation. This application is a fake anti-malware tool from the same family as Win 7 Defender and PC Defender Plus. This program can be installed without user’s consent, normally its installer is spread supposedly as some codec that is necessary for watching online videos. In fact, upon execution of such file, the malware is being brought into the system.

Win 7 Smart Defender attacks computers that have Windows 7 as the main operating system. It acts like a rogue security software, running the fake scan of your system and displaying the large list of fake threats and infections. The goal of this scam is to make users persuaded their computer is in a dangerous condition, i.e. full of viruses and serious infections. There’s some truth in this statement, but the thing is that Win 7 Smart Defender is most probably the infection # 1 on your computer.

While running, this malicious utility displays the large list of faulty security statements, warnings and notifications, such as:

Win 7 Smart Defender Firewall Alert
Iexplore.exe is infected with Trojan.JS.Fraud.ba. Private data can be stolen by third parties, including credit card details and passwords.
Windows recommends activate Win 7 Smart Defender

System Security Alert!
Vulnerabilities found
Background scan for security breaches has been finished. Serious problems have been detected. Safeguard your system against exploits, malware and viruses right now by activating Proactive Defence.

System Security Alert!
Unknown program is scanning your system registry right now! Identify the theft detected!

Without a doubt, you must ignore all such deceitful statements of Win 7 Smart Defender rogue. And, of course, please do not buy this scam ever! It can only ruin your system, but surely will not help your computer become cleaner. With this said, please carefully follow the malware removal guide that we’ve developed to assist you in successful removal of Win 7 Smart Defender scam from your computer.

Win 7 Smart similar removal video at YouTube:

Removal sequence of steps:

  1. Download the installer of GridinSoft Trojan Killer from the direct link http://trojan-killer.net/download.php from some different clean (uninfected computer), for example, available at your work or with your friends or relatives
  2. Copy the installer of GridinSoft Trojan Killer onto your USB/Flash drive
  3. Transfer the USB/Flash drive to the PC infected with Win 7 Smart Defender
  4. Copy the installer of GridinSoft Trojan Killer to the desktop of the infected PC
  5. Run the installer of GridinSoft Trojan Killer as Administrator (right-click the installer with your mouse and select the respective option)For XP users: Right-click the installer of GridinSoft Trojan Killer with your mouse and click “Run as…”. Uncheck the box “Protect my computer and data from unauthorized program activity” and click OK.
  6. Install GridinSoft Trojan Killer, make sure to uncheck the box “Start Trojan Killer” at the end of installation process
  7. Run GridinSoft Trojan Killer as Administrator (right-click the desktop icon of GridinSoft Trojan Killer with your mouse and select the respective option)
  8. Update GridinSoft Trojan Killer, run the scan and remove all infected items found during the scan with Trojan Killer
    Win 7 Smart Defender remoavl tool
    Trojan Killer – removal of Win 7 Smart Defender
  9. Restart your computer to apply the changes after malware removal
  10. Additionally, make sure to scan your system with Kaspersky’s TDSS Killer downloadable here.

Associated files:


%commonappdata%\pcdfdata\[rnd].exe
%commonappdata%\pcdfdata\app.ico
%commonappdata%\pcdfdata\config.bin
%commonappdata%\pcdfdata\defs.bin
%commonappdata%\pcdfdata\support.ico
%commonappdata%\pcdfdata\uninst.ico
%commonappdata%\pcdfdata\vl.bin
%commondesktopdir%\Win 7 Smart Defender.lnk
%commonprograms%\Win 7 Smart Defender\Win 7 Smart Defender.lnk
%commonprograms%\Win 7 Smart Defender\Win 7 Smart Defender Help and Support.lnk
%commonprograms%\Win 7 Smart Defender\Win 7 Smart Defender.lnk

Associated registry entries:


HKCU\Software\Microsoft\Windows\CurrentVersion\Run\pcdfsvc %commonappdata%\pcdfdata\[rnd].exe /min
HKCU\Software\Classes\.exe
HKCU\Software\Classes\.exe\ [rnd_2]
HKCU\Software\Classes\.exe\Content Type application/x-m
HKCU\Software\Classes\.exe\DefaultIcon
HKCU\Software\Classes\.exe\DefaultIcon\ %1
HKCU\Software\Classes\.exe\shell
HKCU\Software\Classes\.exe\shell\open
HKCU\Software\Classes\.exe\shell\open\command
HKCU\Software\Classes\.exe\shell\open\command\ "%commonappdata%\pcdfdata\[rnd].exe" /ex "%1" %*
HKCU\Software\Classes\.exe\shell\open\command\IsolatedCommand "%1" %*
HKCU\Software\Classes\.exe\shell\runas
HKCU\Software\Classes\.exe\shell\runas\command
HKCU\Software\Classes\.exe\shell\runas\command\ "%1" %*
HKCU\Software\Classes\.exe\shell\runas\command\IsolatedCommand "%1" %*

Leave a Comment


*