What Is Windows Ultimate Defender?
Windows Ultimate Defender, also known as UltimateDefender and SpyDefender, is a malware application that reports false threats on the computer and leads users to downloading installation files that will ultimately harm their machine. Upon its execution, users will be prompted to purchase a full license of the application in order to remove the threats. Windows Ultimate Defender must not be confused with Windows Defender, a useful anti-spyware tool created by Microsoft.
-
Symptoms and Behavior
-
Windows Ultimate Defender is one of the many fake anti-spyware programs out there. This trojan first shows up in the form of a pop-up and urges users to protect themselves by installing the program. Once the user has accepted, it installs in the background and initiates a fake computer scan that claims to have found Trojan.MetaMorf.F amongst other threats. The user is prompted to pay in order to proceed with the removal of the fake findings. However, this won't solve the problem.
Machines It Affects
-
Ultimate Defender affects computers with older operating systems, including Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows Server 2003 and Windows 2000. However, Windows Vista users have also reported the threat.
-
Prevention
-
Protect yourself with proper anti-spyware and virus protection and keep it up to date. Microsoft offers Windows Defender and Microsoft Security Essentials for free, but there are other effective applications out there. Look for reviews of the most popular anti-spyware software on reputable websites such as CNET Download. If a suspicious pop-up appears on your screen, don’t rush; press Alt+F4 on your keyboard to close the window without interacting with any of the buttons offered. Clicking "OK," "Cancel," or the “X” button can lead to undesired results. Try using a web browser alternative to Internet Explorer. Although malware can come from any web browser, Internet Explorer tends to be more vulnerable to attacks.
Removal
-
If you have become a victim of Windows Ultimate Defender, turn off “System Restore” to avoid duplication of the malware files. Make sure your antivirus program has the latest virus definitions and updates, and restart your computer in “Safe Mode.” Run a full system scan with your antivirus software, and follow instructions to remove the threats. Click “Start,” then “Run;” type “regedit” and click “OK.” Backup your registry as a preventive measure and then find and remove these sub keys:
HKEY_ALL_USERS\Software\Ultimate Defender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ultimate Defender
HKEY_LOCAL_MACHINE\SOFTWARE\Ultimate Defender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Ultimate Defender
Exit the registry editor, restart the computer and make sure Windows Ultimate Defender has been removed. You can then turn on System Restore.
Other Removal Options
-
Removing a virus or a trojan is no easy feat, so if you don’t feel confident enough to follow the manual steps, there are freeware tools that will automatically remove Windows Ultimate Defender. However, you must use these at your own risk, as you never know where they came from and if they will effectively remove the threat.
-
References
Resources
- Photo Credit computer virus image by Marina Bartel from Fotolia.com