How UltraSurf gets blocked

Symantec has published an article explaining how to block UltraSurf using Symnatec Enpoint Protection. This is done based on the finger prints that UltraSurf leaves.

How Ultrasurf is blocked

Ultrasurf can be identified when attemting to start or while running using several finger prints.  Every version of Ultrasurf has a certain finger print. These are used by Symantec Endpoint Protection (SEP) to block the Ultrasurf process. Below you can see the different fingerprints for the Ultrasurf variants available in the web (as they are listed by Symantec):

1. UltraSurf 9.4 (.exe)
     md5: 11bc744801b516d0b84fba5850ec8789
2. UltraSurf 9.4(.zip)
     md5: 8aed5412df0f621e399c78a7f408c6fb
3. UltraSurf 9.2 (.exe)
     4b498bcac14da546f420cd08bae1894b
4. UltraSurf 8.9 (.exe)
     f556271e1338dfc224cbebf6fe8f8eae
5. UltraSurf 8.8 (.exe)
     4e3a66482ef96368251d91b4f5ae0fda
6. Firefox add-on (.zip)
     md5: 6ce151b1b0ef8430031a8e9a69f38806

Symantec Endpoint Protection (SEP) can be used to block certain applications. These finger prints are exactly what SEP needs to identify a process and terminate it. For more details on the settings need to block Ultrasurf check the Symantec article.

UltraSurf alternatives

What if Ultrasurf is blocked for you? Well, the first thing you should do is to check for the latest version of Ultrasurf on Ultrareach.net. Every new version has a different finger print and there some chances the the latest version not be blocked (yet).

Also, you could consider alternatives. I recommend trying NotMyIP which is very similar to UltraSurf, but not as well-know. You could also consider Hotspot Shield, a free VPN solution.

Is Ultrasurf blocked for you? Are you trying to use it a school or at the office?