This is the article on Win7 Defender fake antivirus removal. Surely, this program is malicious because it doesn’t use legal ways of entering your computer. In the majority of the cases this scam comes up after users click some malicious links supposedly leading to some online codecs necessary for watching certain online videos. However, in reality these links bring users to the installer of this malware.
Win7 Defender modifies your system considerably in order to be launched automatically each time you turn the PC on, without your approval. The scam immediately runs the fake scan of your system and then reports tons of fake threats. Finally, it asks users to buy its license which is not really capable of deleting real infections. What Win7 Defender can only do is to “detect” and “remove” fake (invented) threats.
So, how do we remove Win7 Defender malware from our computer? For this purpose it is recommended that users restart their computers into safe mode with networking, to avoid all kinds of blockages on the part of Win7 Defender virus. Then they should download and install GridinSoft Trojan Killer and run scan with it, having removed all malicious components associated with Win7 Defender hoax.
Win7 Defender removal guide:
Win7 Defender similar removal video:
Win7 Defender manual removal:
Associated files to be removed:
%CommonStartMenu%ProgramsWin 7 DefenderWin 7 Defender.lnk %CommonStartMenu%ProgramsWin 7 DefenderWin 7 Defender Help and Support.lnk %CommonStartMenu%ProgramsWin 7 DefenderRemove Win 7 Defender.lnk %CommonStartMenu%ProgramsWin 7 Defender %CommonAppData%pcdfdatavl.bin %CommonAppData%pcdfdatauninst.ico %CommonAppData%pcdfdatasupport.ico %CommonAppData%pcdfdatadefs.bin %CommonAppData%pcdfdataconfig.bin %CommonAppData%pcdfdataapp.ico %CommonAppData%pcdfdata[Random].exe %CommonAppData%pcdfdata %AllUsersProfile%DesktopWin 7 Defender.lnk
Associated registry entries to be removed:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "pcdfsvc" = "%CommonAppData%pcdfdata[Random].exe /min" HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = ""%CommonAppData%pcdfdata[Random].exe" /ex "%1" %*" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallpcdfdata HKEY_CLASSES_ROOT.exe "(Default)" = "[Random]"