Home Malware Programs Fake Warning Messages Unlimited Defender Firewall Alert

Unlimited Defender Firewall Alert

Posted: July 25, 2011

'Unlimited Defender Firewall' Alert is a fake warning message that's used by the rogue security program Unlimited Defender. The poorly-worded 'Unlimited Defender Firewall' Alert will insist that multiple viruses are infecting your PC, but our SpywareRemove.com malware research team has found that these virus alerts and other Unlimited Defender warnings are only false positives. Rather than having genuine anti-virus or other security features, Unlimited Defender fakes these features to steal your credit card information. Pay no heed to 'Unlimited Defender Firewall' Alert and similar pop-ups and remove Unlimited Defender by using an actual security program.

Where 'Unlimited Defender Firewall' Alert Came From

'Unlimited Defender Firewall' Alert appears on your computer when you've been infected by Unlimited Defender or one of its clones. Some of the Unlimited Defender clones that our SpywareRemove.com research team has found consist of: Ultimate Scan, Ultimate Guard, Clean Security and Defender Unlimited. There are two primary ways of becoming infected with an 'Unlimited Defender Firewall' Alert-spewing rogue security program:

  • Becoming infected with a Trojan, such as Zlob or Fake Microsoft Security Essentials Alert, that installs rogue anti-spyware applications similar to Unlimited Defender. These Trojans can infect your PC by using drive-by-download scripts or by pretending to be media player updates.
  • Visiting a website that's linked to Unlimited Defender or one of its clones. Some currently-known websites that our SpywareRemove.com research team has dug up include unlimdefender.com, unlimguard.com, ultimate-guard.com, Clean-security.com and Ultimate-scan.com. These websites may convince you to willingly install Unlimited Defender or exploit scripts to force a rogue security program onto your PC. In many cases, such websites will pretend to initiate an online scan that finds viruses and other PC threats.

'Unlimited Defender Firewall' Alert: A Not-Very-Convincing Virus Warning

The websites noted above are all maintained by the same criminals that use Unlimited Defender and similar rogue anti-spyware products to steal your credit card information. To this end, Unlimited Defender will create 'Unlimited Defender Firewall' Alert pop-ups and other warnings that don't accurately reflect on your PC integrity, but try to instill panic so that you'll spend money at unlimdefender.com.

'Unlimited Defender Firewall' Alert will manifest with the following message (with some minor variations, depending on the name of the rogue security program):

"Unlimited Defender Firewall Alert! – Scanning of your system is currently on, please waiting until the end. Your system affected by numerous virus attacks, Unlimited Defender Firewall Alert recommends you to install proper software to protect your computer?"

Based on the unprofessional grammar alone, it should be sufficiently obvious that 'Unlimited Defender Firewall' Alert isn't a real virus alert and has no ability to protect your PC. Even if you follow 'Unlimited Defender Firewall' Alert's instructions, you'll only be sent to a purchasing form for Unlimited Defender.

Any purchase of rogue anti-spyware software that uses 'Unlimited Defender Firewall' Alert pop-ups or other fake warnings should be avoided, since this will result in fraudulent and needles charges to your credit card. In fact, the same company that's responsible for 'Unlimited Defender Firewall' Alert-based software has also acquired a reputation for making repeated credit card charges and should never be trusted.

Our SpywareRemove.com malware experts recommend using a good anti-virus product in Safe Mode to remove Unlimited Defender and get rid of all 'Unlimited Defender Firewall' Alert pop-ups.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Documents and Settings\[USER NAME]\Application Data\[RANDOM CHARACTERS]

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = '0'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http=127.0.0.1:8992'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS].exe"
Loading...