Severity scale  
  (75/100)

Windows Ultra Antivirus. How to Remove? (Uninstall Guide)

removal by - -   Also known as Windows Ultra-Antivirus | Type: Malware
12

Windows Ultra Antivirus is a fake antivirus that aggressively works on trying to get the money from unaware PC users. This program stealthily gets inside the system first and additionally displays tons of fake alerts and scanners reporting about dangerous malware detected. Of course, this is a typical way how Windows Ultra-Antivirus seeks to make its victims concerned about their computers and additionally tries to push them into purchasing licensed its version which in reality is fake. Keep in mind that Windows Ultra Antivirus must be categorized as Rogue anti-virus and that you must remove it from your computer without any delay. Check your computer with Reimage anti-spyware if you are infected with Windows Ultra Antivirus.

HOW CAN I GET INFECTED WITH WINDOWS ULTRA ANTIVIRUS?

Typically to rogue programs, Windows Ultra Antivirus is also distributed with a help of trojans that are set to get inside the system through security holes and vulnerabilities found. Additionally, these trojans download all malware files on victim's computer and set it to start as soon as infected PC is rebooted. As a result, rogue starts running startup scanners and displays numerous alerts that all report about non-existent malware. Be sure that you won't find these 'threats' with a help of legitimate anti-malware program and you may also have some troubles when trying to find Windows Ultra Antivirus files because it uses rootkits in order to prevent its removal. Finally, this rogue starts asking for a license payment to get those mythical things removed.

If you are interested how these Windows Ultra-Antivirus alerts look like, here is an example:

Security Warning!

Your computer is not checked for viruses! System scan isrecommended. Press “scan” to check.

As you must have already realized, it’s critical to be careful with this application because the only thing it seeks is your money. Windows Ultra Antivirus reports only fake infections on your machine while in reality these threats are not there. Be sure that this is done for the only reason – this malware tries to persuade you that some serious security issues have been spotted on your computer and now you should remove them using Windows Ultra Antivirus licensed version. Please, never do that! The only real threat you have on your computer is the same Windows Ultra Antivirus, so be sure you use reputable anti-spyware program and eliminate it from your PC.

HOW TO REMOVE WINDOWS ULTRA ANTIVIRUS?

In order to remove Windows Ultra Antivirus, we highly recommend running a full sysytem scan with Reimage. If you can't launch the program, we recommend running msconfig first and disabling all unknown startup entries. After doing that, scan with Spyhunter anti-malware to get rid of all infected files from your computer.

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Ultra Antivirus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Windows Ultra Antivirus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
Plumbytes
We are testing Plumbytes's efficiency (2012-07-30 02:51)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2012-07-30 02:51)
Hitman Pro
Webroot SecureAnywhere AntiVirus
Windows Ultra Antivirus screenshot
Windows Ultra Antivirus snapshot

Windows Ultra Antivirus manual removal

Kill processes:
[random.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_[random2]
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_[random2]\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_[random2]\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_1FE50
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_1FE50\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_1FE50\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\112da10e6b8dcd07
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_[random2]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_[random2]\0000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_[random2]\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_1FE50
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_1FE50\0000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_1FE50\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random2]
HKEY_CURRENT_USER\Software\WinUltraAntivirus
random2 - name of the rootkit file name.
Delete files:
%System%\drivers\[random2].sys, like %System%\drivers\142da10e6b8dcd07.sys

Removal guides in other languages


Information updated:

Comments on Windows Ultra Antivirus

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)