Home Malware Programs Rogue Anti-Spyware Programs Ultimate Defender

Ultimate Defender

Posted: June 29, 2006

Threat Metric

Threat Level: 10/10
Infected PCs: 23
First Seen: July 24, 2009
Last Seen: January 9, 2019
OS(es) Affected: Windows

Ultimate Defender is a fake anti-virus application with close ties to other fraudulent AV products, including Bogema Security, Clean Security and Ultimate Guard. Ultimate Defender and related rogue anti-virus programs use deceitful installation methods to gain access to your PC. Once Ultimate Defender has a foothold on your hard drive, Ultimate Defender will create fake warnings and alerts that imply that the only way to restore normal functionality to your PC is by purchasing Ultimate Defender. However, buying Ultimate Defender will result in giving your credit card information to criminal entities, and the recommended solution is to delete Ultimate Defender, and all corresponding problems, with a legitimate anti-malware program.

The Countless Reasons Why Ultimate Defender is Only Interested in Defending Itself

SpywareRemove.com malware research team has observed that Ultimate Defender uses the functions, appearance, and even the same marketing and delivery strategies of other rogue anti-virus programs that have sprung up in late July and early August of 2011. These rogue AV products, sold at websites like Ultimblock.com, Ultimsecurity.com, Windowsdef.com, Ultimdefender.com and other Ultimate Defender clone sites, have no goal save to steal your money and credit card details. Some of the most well-defined and harmful characteristics of an Ultimate Defender infection include:

  • Fake infection warnings and scanner results. Ultimate Defender will feed you tidbits of false information that may make you believe that an innumerable array of viruses and other infections are teeming on your PC, but any system dysfunctional that you experience is more than likely to be caused by Ultimate Defender itself. In addition, Ultimate Defender can't detect or delete viruses even if you throw money away on purchasing its full version.
  • Problems using unrelated programs, especially anti-malware products such as anti-virus scanners. Ultimate Defender will block these programs to prevent you from learning that all of Ultimate Defender's proffered threat alert information is fake, as well as to stop you from deleting Ultimate Defender and related infections.
  • Complicity with Trojans that install similar rogue anti-virus programs. These Trojans, including Zlob and Fake Microsoft Security Essentials Alert, may create fake errors of their own and are capable of delivering multiple types of rogue security products, although the majority of payloads will be simple clones that alter program names and little else.
  • Attempts to steal your credit card information with a technically functional but worthless Ultimate Defender purchase form. Since Ultimate Defender can't do anything that Ultimate Defender or Ultimate Defender's website claims, buying Ultimate Defender is no better than throwing away your money. Even worse, the same criminals that run Ultimate Defender and its clones have been confirmed to make fake charges on vulnerable credit cards on a semi-regular basis.

Things to Know to Defend Your PC from Ultimate Defender

Many Ultimate Defender installation methods will use fake infection warnings to lure you into installing Ultimate Defender willingly, under the false pretense that Ultimate Defender actually could help your computer. SpywareRemove.com malware researchers have found that Ultimate Defender and the rest of its family of rogue anti-virus programs are closely-tied to fraudulent distribution strategies that use fake system scan displays and fake web browser updates.

"[Rogue security program name] Firewall Alert! – Scanning of your system is currently on, please waiting until the end. Your system affected by numerous virus attacks, [Rogue security program name] Firewall Alert recommends you to install proper software to protect your computer?"

If your computer's been infected with Ultimate Defender, try to avoid removing Ultimate Defender by manual means unless you have no other options. Like most rogue security programs, Ultimate Defender will make Registry changes and other advanced alterations to Windows that can't be undone solely by deleting Ultimate Defender's files.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Ultimate Defender may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

msole.dll File name: msole.dll
Size: 81.92 KB (81920 bytes)
MD5: 59a18c0876429e2a82f72706f911def8
Detection count: 21
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
msqnx.dll File name: msqnx.dll
Size: 172.03 KB (172032 bytes)
MD5: cf178a08700c0d45cad1ca9b10343ce7
Detection count: 13
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
msddx.dll File name: msddx.dll
Size: 184.32 KB (184320 bytes)
MD5: 25ebe018061218ab9af633bd85d858af
Detection count: 4
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
msdde.dll File name: msdde.dll
Size: 86.01 KB (86016 bytes)
MD5: 088eba1e445be04d4937d45bdf4c9bd4
Detection count: 1
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009

More files


  • Steve Armstrong UK says:

    I got Ultimate defender on my sons profile and couldnt get rid of it, the local computer shop wanted £60 to do a diagnosis and removel, i said no went home and deleted my sons profile and it seems to have gone. i have since turned my security systems up high. this ultimate defender is the wosrt spyware ive come across. if you have system restore that can get rid of it too.

  • alex says:

    ehy don't they just arrest the person who made it or at least get rid of the sites that have the trojan on them.

  • ghostrider01 says:

    alex, sometimes people who are managing the website don't even know that they spread the malware. The malware code is just inserted into their websites. Some of such persons can hide. Otherwise, thay create new viruses everyday and they spread in different ways, so it would be physically very hard to catch and arrest all those persons.

  • jan says: