Vista Smart Defender scam. How to remove

Vista Smart Defender stands for the fake anti-spyware application, coming from the same virus family as PC Defender Plus. This program is rightfully classified as a rogue, i.e. program that imitates scanning of your system and reports the bunch of unreal threats to scare users. The reason why the program wants to scare them is because then it also prompts them into buying the full version of this fake anti-malware, supposedly able to remove infections from your computer. In fact, this application is totally unable to assist you in elimination of spyware from your system.

So, Vista Smart Defender is smart, but it is only smart for tricking and ripping users off. It will never be smart enough to help users remove real security threats from their systems. With so many vulnerabilities today, a lot of users are in a great need of search for the proper anti-malware application. The Internet is full of many anti-spyware tools, and all of them claim to be the best. Yet, this can’t be the truth about Vista Smart Defender.

Vista Smart Defender displays all sorts of fake security alerts and warnings to scare users. They appear while the fake scan is taking place, and once it is over. Needless to mention, you must ignore all scary alerts and warnings associated with Vista Smart Defender. Below please find some of them, which are the most frequent to appear:

Vista Smart Defender Firewall Alert
Iexplore.exe is infected with Trojan.JS.Fraud.ba. Private data can be stolen by third parties, including credit card details and passwords.
Windows recommends activate Vista Smart Defender

System Security Alert!
Vulnerabilities found
Background scan for security breaches has been finished. Serious problems have been detected. Safeguard your system against exploits, malware and viruses right now by activating Proactive Defence.

System Security Alert!
Unknown program is scanning your system registry right now! Identify the theft detected!

Vista Smart Defender, therefore, is a program which you must ignore and remove at once. The quicker you get rid of it the better! If you experience any troubles deleting it, please follow our simple and clear malware uninstall tips as described in the section below.


Vista Smart Defender similar removal video at YouTube:

Removal sequence of steps:

  1. Download the installer of GridinSoft Trojan Killer from the direct link http://trojan-killer.net/download.php from some different clean (uninfected computer), for example, available at your work or with your friends or relatives
  2. Copy the installer of GridinSoft Trojan Killer onto your USB/Flash drive
  3. Transfer the USB/Flash drive to the PC infected with Vista Smart Defender
  4. Copy the installer of GridinSoft Trojan Killer to the desktop of the infected PC
  5. Run the installer of GridinSoft Trojan Killer as Administrator (right-click the installer with your mouse and select the respective option)For XP users: Right-click the installer of GridinSoft Trojan Killer with your mouse and click “Run as…”. Uncheck the box “Protect my computer and data from unauthorized program activity” and click OK.
  6. Install GridinSoft Trojan Killer, make sure to uncheck the box “Start Trojan Killer” at the end of installation process
  7. Run GridinSoft Trojan Killer as Administrator (right-click the desktop icon of GridinSoft Trojan Killer with your mouse and select the respective option)
  8. Update GridinSoft Trojan Killer, run the scan and remove all infected items found during the scan with Trojan Killer
    Vista Smart Defender remoavl tool
    Trojan Killer – removal of Vista Smart Defender
  9. Restart your computer to apply the changes after malware removal
  10. Additionally, make sure to scan your system with Kaspersky’s TDSS Killer downloadable here.

Associated files:


%commonappdata%\pcdfdata\[rnd].exe
%commonappdata%\pcdfdata\app.ico
%commonappdata%\pcdfdata\config.bin
%commonappdata%\pcdfdata\defs.bin
%commonappdata%\pcdfdata\support.ico
%commonappdata%\pcdfdata\uninst.ico
%commonappdata%\pcdfdata\vl.bin
%commondesktopdir%\Vista Smart Defender.lnk
%commonprograms%\Vista Smart Defender\Vista Smart Defender.lnk
%commonprograms%\Vista Smart Defender\Vista Smart Defender Help and Support.lnk
%commonprograms%\Vista Smart Defender\Vista Smart Defender.lnk

Associated registry entries:


HKCU\Software\Microsoft\Windows\CurrentVersion\Run\pcdfsvc %commonappdata%\pcdfdata\[rnd].exe /min
HKCU\Software\Classes\.exe
HKCU\Software\Classes\.exe\ [rnd_2]
HKCU\Software\Classes\.exe\Content Type application/x-m
HKCU\Software\Classes\.exe\DefaultIcon
HKCU\Software\Classes\.exe\DefaultIcon\ %1
HKCU\Software\Classes\.exe\shell
HKCU\Software\Classes\.exe\shell\open
HKCU\Software\Classes\.exe\shell\open\command
HKCU\Software\Classes\.exe\shell\open\command\ "%commonappdata%\pcdfdata\[rnd].exe" /ex "%1" %*
HKCU\Software\Classes\.exe\shell\open\command\IsolatedCommand "%1" %*
HKCU\Software\Classes\.exe\shell\runas
HKCU\Software\Classes\.exe\shell\runas\command
HKCU\Software\Classes\.exe\shell\runas\command\ "%1" %*
HKCU\Software\Classes\.exe\shell\runas\command\IsolatedCommand "%1" %*

Leave a Comment


*