App Review UltraAV Antivirus 2024

It is advised to take all reviews with a grain of salt. In extreme cases some reviews use dramatization for entertainment purposes.
Content created by
Shadowra

Shadowra

Level 36
Thread author
Verified
Top Poster
Content Creator
Malware Tester
Well-known
Sep 2, 2021
2,582
UltraAV is an American antivirus developed by Pango, also owner of UltraVPN, using MaxSecure's Indian engine.
Kaspersky, banned from the USA, sold its American base to Pango and discreetly installed UltraAV.
The new publisher guarantees an equivalent level of protection, so let's check it out.



User interface :
The interface is very basic and few settings are available.
On installation, UltraAV asks you to create an account and... redirects you to the payment page! Very limited...
Since I have an American license, I was able to migrate my subscription to UltraAV.
The software is very light, but you can feel that the paintwork is very fresh, even sloppy, as many options are not yet available...

Web protection: 8/10
UltraAV stopped malicious downloads with its interceptor, with the exception of 2 RemcosRAT-infected files which were installed without being blocked by UltraAV.
RemcosRAT injects explorer.exe to be fully active and escape antivirus detection.

Fake crack : 0,75/1
The 2 files are blocked but a CPL passes the protection, using rundll32.exe ..

Malware Pack : Remaining 45 files out of 179.
While the pack was being analyzed and the interceptor was disabled, malware from my pack ran without any action on my part!
I clearly suspect that the RemcosRAT infection is behind these actions, controlled by a cyber-criminal in action on the virtual machine.

As far as execution after analysis and activation of the interceptor is concerned, UltraAV shines by its flagrant non-blocking!
All executions were completed successfully. UltraAV blocks very few actions, and catches too little malware after execution, leading to infection of the machine at breakneck speed.
I don't understand Kaspersky's choice, as it used to be an excellent piece of software...

Final scan :
UltraAV : 22
NPE : 44
Malwarebytes : Unable to run an analysis... Malware blocks MalwareBytes update...
KVRT : 62 (Infection Memory)

Final opinion:

UltraAV is a young antivirus with a very questionable selection of products.
Using a very aggressive marketing strategy, since they've won back Kaspersky's American customer base, the publisher has released a completely sloppy antivirus.
The software is very limited, inefficient and with some very obscure choices, such as forcing you to create an account on installation and asking you to subscribe without being able to test it! (It is now possible to test it, but this is not highlighted on the site).
I'm very disappointed by this software, and don't recommend it at all.
 

Bot

AI-powered Bot
Apr 21, 2016
4,315
Thank you for your detailed review of UltraAV Antivirus 2024. It's concerning to hear about the issues you've encountered, especially with malware detection and aggressive marketing strategies. Your feedback is valuable for potential users.
 

Shadowra

Level 36
Thread author
Verified
Top Poster
Content Creator
Malware Tester
Well-known
Sep 2, 2021
2,582
Thank you for your detailed review of UltraAV Antivirus 2024. It's concerning to hear about the issues you've encountered, especially with malware detection and aggressive marketing strategies. Your feedback is valuable for potential users.

The publisher's choices are highly questionable, especially promising “security as before” when the software is completely sloppy and ineffective...
In detection, it's very bad, it has nothing to defend itself.
 

Bot

AI-powered Bot
Apr 21, 2016
4,315
The publisher's choices are highly questionable, especially promising “security as before” when the software is completely sloppy and ineffective...
In detection, it's very bad, it has nothing to defend itself.
Thank you for sharing your concerns about UltraAV Antivirus 2024. It's unfortunate to hear that the software didn't live up to its promises. Your feedback will certainly help others make informed decisions about this product.
 

Jonny Quest

Level 21
Verified
Top Poster
Well-known
Mar 2, 2023
1,081
I suppose most of us aren't surprised by the results of this made on the fly, sloppy AV that Kaspersky thought to replace their excellent product with.

I had previously tried to give them the benefit of a doubt that they cared, but, did they even vett this AV on their end before pushing it out, doesn't seem that way does it.

It's almost like a payback to the US customers for their being banned? "Here, take this, at least we did something, and we'll take care of it all from our end".
 

TuxTalk

Level 12
Verified
Top Poster
Well-known
Nov 9, 2022
576
Well K's revenge must be like this @oldschool

K : You ban me ?
K: No problem i give you a superb US antivirus in return
K: ( Silently thinking ) So we can finally make sure those Americans are going to be infected
K: So they will call us and lift the ban.
K: Win win situation, we wipe out some infected machines and we back in business !

1727515600645.png
 

bazang

Level 6
Jul 3, 2024
265
I had previously tried to give them the benefit of a doubt that they cared, but, did they even vett this AV on their end before pushing it out, doesn't seem that way does it.
Eugene Kaspersky is a capitalist and the UltraAV group offered him a very profitable deal. There is nothing surprising nor sinister about the decision.

Eugene purchased a licensed a white-label (re-branded) version of Pango VPN for his Kaspersky product. Anyone using Kaspersky VPN has been using the Pango VPN and did not even know it. Pango re-labeled HotSpot Shield to Kaspersky VPN.

The parent company of The Pango Group was AURA. AURA purchased Pango years ago, but it recently split Pango off. Pango Group brought its own set of IT security and related products with it after the split.


The UltraAV scan engine was developed by an Indian firm named Max Secure Software, and purchased by AURA years ago.


The executives and investors behind AURA, The Pango Group, Max Secure Software - they all have been involved in white-label products for a long time. They have also been technology investors that have grown their companies through purchases of smaller companies. These company and product line names are well-known to those in-the-know.

AURA, The Pango Group, Max Secure Software and others are valued in excess of $3 billion USD. The people behind AURA have been at the game for over 20 years.

This did not make any sense for customers. A Pango was doing well and the customers suck.
The key executives behind AURA and The Pango Group are not information system security experts. They are business development, finance and financial management wizards. The top executives have ties to investment banking firms and regional finance markets.

All of the top executives at AURA, The Pango Group, Max Software and investors are Indian.They are all India-based companies or have origins in India or continued support operations based in India (Hyderabad, Bangalore, Chennai, etc). US companies have been doing business with these various companies for decades, particularly the AURA group and its subsidiaries.

K: So they will call us and lift the ban.
K: Win win situation, we wipe out some infected machines and we back in business !
No. This will not happen.

Kaspersky software is banned. That is it. Eugene Kaspersky and his companies are not banned from conducting business within the United States. He will generate just as much profit as he did before without Americans installing his security software. He does not need people to install his software to generate profit.

The problem is not Kaspersky software. The problem is Eugene Kaspersky's very close relationship with the Russian Federal Security Service (FSB) and the significant number of Kaspersky staff that previously worked within Russian intelligence and security services or have continued ties to the FSB - as in they have personal relationships (e.g. married to current personnel or familial connections - brothers, sisters, fathers, mothers, etc that work for the FSB, for example) with FSB and other Russian military or security agency personnel.

Or could Kaspersky have said to American citizens on his way out of the country, "Here, this is what you deserve. :censored:
Kaspersky sent multiple emails to all those with active subscriptions. Those emails explained in detail the transition to UltraAV. As is typical of most users, they paid no attention to the emails.
 

bazang

Level 6
Jul 3, 2024
265
The publisher's choices are highly questionable, especially promising “security as before” when the software is completely sloppy and ineffective...
In detection, it's very bad, it has nothing to defend itself.
The core of UltraAV product is antivirus scan engine and other modules purchased by AURA (an Indian company) from Max Secure (another Indian company). The Pango Group (split-off from AURA) is an Indian company.

A US address does not mean a US company. The owners are Indian. The investment and operational finance money is all Indian. Managed by Indians and financed by Indians.

Everybody on the AURA, The Pango Group, and the Max Secure side - they are all leading Indian technology company executives that have been around for a long time. They are all well-known within the IT security product industry.
 

tofargone

Level 4
Jun 24, 2024
174
Call me cynical after so many years of watching the Gov mess up, especially the last 16 years, not counting "Trump" and I think Kaspersky (this is MHO) probably was catching the US Gov's nasty software, doing sneaky stuff, and the Gov said "Russia, Russia, Russia, and kicked Kaspersky out of the US. The turned to us and said "We are just protecting you, it's for the children". Then most people said "Oh OK"
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top