Severity scale:  

Windows Ultra Antivirus. How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - -   Also known as Windows Ultra-Antivirus | Type: Malware

Windows Ultra Antivirus is a fake antivirus that aggressively works on trying to get the money from unaware PC users. This program stealthily gets inside the system first and additionally displays tons of fake alerts and scanners reporting about dangerous malware detected. Of course, this is a typical way how Windows Ultra-Antivirus seeks to make its victims concerned about their computers and additionally tries to push them into purchasing licensed its version which in reality is fake. Keep in mind that Windows Ultra Antivirus must be categorized as Rogue anti-virus and that you must remove it from your computer without any delay. Check your computer with Reimage anti-spyware if you are infected with Windows Ultra Antivirus.


Typically to rogue programs, Windows Ultra Antivirus is also distributed with a help of trojans that are set to get inside the system through security holes and vulnerabilities found. Additionally, these trojans download all malware files on victim's computer and set it to start as soon as infected PC is rebooted. As a result, rogue starts running startup scanners and displays numerous alerts that all report about non-existent malware. Be sure that you won't find these 'threats' with a help of legitimate anti-malware program and you may also have some troubles when trying to find Windows Ultra Antivirus files because it uses rootkits in order to prevent its removal. Finally, this rogue starts asking for a license payment to get those mythical things removed.

If you are interested how these Windows Ultra-Antivirus alerts look like, here is an example:

Security Warning!

Your computer is not checked for viruses! System scan isrecommended. Press “scan” to check.

As you must have already realized, it’s critical to be careful with this application because the only thing it seeks is your money. Windows Ultra Antivirus reports only fake infections on your machine while in reality these threats are not there. Be sure that this is done for the only reason – this malware tries to persuade you that some serious security issues have been spotted on your computer and now you should remove them using Windows Ultra Antivirus licensed version. Please, never do that! The only real threat you have on your computer is the same Windows Ultra Antivirus, so be sure you use reputable anti-spyware program and eliminate it from your PC.


In order to remove Windows Ultra Antivirus, we highly recommend running a full sysytem scan with Reimage. If you can't launch the program, we recommend running msconfig first and disabling all unknown startup entries. After doing that, scan with Spyhunter anti-malware to get rid of all infected files from your computer.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Ultra Antivirus you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Ultra Antivirus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Windows Ultra Antivirus snapshot
Windows Ultra Antivirus

Windows Ultra Antivirus manual removal:

Kill processes:

Delete registry values:















random2 - name of the rootkit file name.

Delete files:
%System%drivers[random2].sys, like %System%drivers142da10e6b8dcd07.sys

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions

Removal guides in other languages