User complaints against Kaspersky are on the rise, as the anti-virus software deleted itself and auto-installed UltraAV on devices across the U.S. Kaspersky’s transition to UltraAV resulted from the government’s decision to move the software to the Entity List in the U.S., which kept a record of all the services that were deemed a national security concern. 

In June, the Russian cybersecurity company was banned from selling its antivirus services and providing software updates within the region, which was their primary reason for slowly withdrawing from the United States.

Kaspersky’s transition to UltraAV was abrupt and unexpected despite the earlier warning the company had provided. While the email had mentioned an eventual partnership with the company for continued services, no one had expected the automatic switch. 

Kaspersky antivirus UltraAV switch

Kaspersky Auto-Installs UltraAV and Leaves Users Alarmed

After a recent ban of Kaspersky products in the U.S., the company began slowly shutting down its services and laying off its workers in preparation for their withdrawal from the region. According to BleepingComputer, in early September, the company sent out an email reassuring customers that they would still be able to seek reliable cybersecurity protection from another company, UltraAV. 

The update was helpful for users who wanted to continue to receive anti-virus protection and had yet to find a replacement, but the email made no mention of when the transition could be expected and how users could opt in or out of the services. As it turns out, there was no option to choose the service as Kaspersky auto-installed UltraAV for all its users after deleting its own files from its users’ devices. Customers who had a subscription to the Kaspersky VPN and found the UltraAV VPN installed on their systems. 

The Kaspersky antivirus switch to UltraAV came as a shock to users who woke up to find the foreign software already installed with no sign of Kaspersky on their systems. Many users were alarmed that some form of malware had installed itself on their system, deleting their existing antivirus in the process.

What was worse was that while Kaspersky had self-deleted and installed UltraAV, the process of deleting UltraAV was a lot more complex for some users. A few who tried to delete it found it reinstalled on their systems by rebooting it, which added fuel to the “malware” fire. Reports also suggest that systems have slowed down or faced additional issues trying to run the Pango Group’s UltraAV, which has further turned them away from using the software. 

A statement on the Kaspersky community forum is now available to reassure users that the switch was intentional to provide “continued protection for US-based customers that will no longer have access to Kaspersky’s protections.” Below the statement however, users from regions outside of the U.S. have also complained about losing access to Kaspersky antivirus and being forced to switch to UltraAV. 

The Kaspersky representative responded to the issue with a clear statement, “Only users of US licenses were updated to Ultra apps. If you are in Australia, it means you are using a US license for some reason. Please contact our Support team if you have any questions.” Users appear rightfully disgruntled at the lack of proper communication from both companies. There is also considerable suspicion surrounding UltraAV, with users unable to find any reasons and tests to show that it is a trustworthy antivirus. 

Why Did Kaspersky Transition to UltraAV?

On June 20, the Department of Commerce’s Bureau of Industry and Security (BIS) announced a prohibition on Kaspersky Lab, Inc. “from directly or indirectly providing anti-virus software and cybersecurity products or services in the United States or to U.S. persons.” The prohibitions extended to the company’s affiliates, subsidiaries, and parent companies, creating a total block on any services provided by the firm. 

As a result of the ban, the company was no longer able to sell to new customers but even existing customers would no longer be able to receive access to updates. The software was initially banned on devices used by federal agencies, but the wider ban came soon after. The administration reported that due to the Russian government’s ability to exploit companies, Kaspersky’s access to U.S. customer information was a threat to national security. Despite Kaspersky’s denial of involvement with the government or lack of any intention of sharing their resources to hurt the U.S., the company was irrevocably banned from the states.

Kaspersky believes that “the Department of Commerce made its decision based on the present geopolitical climate and theoretical concerns, rather than on a comprehensive evaluation of the integrity of Kaspersky’s products and services.” 

The statement goes on to say, “Kaspersky has implemented significant transparency measures that are unmatched by any of its cybersecurity industry peers to demonstrate its enduring commitment to integrity and trustworthiness. The Department of Commerce’s decision unfairly ignores the evidence.” Regardless of their defense, the company had no choice but to withdraw from the region.

The company was banned from entering into any new agreements with customers as of July 20, 2024, and customers were offered time till September 29, 2024, to find an alternative. Kaspersky’s transition to UltraAV was a thoughtful offer, but users were largely unsatisfied with their decision to pick a less-known brand to replace them.

From online discussion forums, it is evident that many users are determined to switch to Bitdefender or other antivirus platforms that are better known and highly reviewed so they can trust the software on their devices. Kaspersky’s choice to delete itself and force install UltraAV has rubbed a majority of the customers the wrong way.