VirusAlarm2009

The latest version of VirusAlarm, aptly titled VirusAlarm2009, is a rogue security program designed to use fraudulent tactics to achieve its purposes to steal the targeted user’s money.  The authors of VirusAlarm2009 are the same one responsible for creating Virus Melt and Virus Doctor.
VirusAlarm2009 will propagate itself by promoting misleading banners and pop-ups on various websites.  If these banners or pop-ups are clicked on, the user is brought to a site where you are asked to download a trial version of VirusAlarm2009.  If the user chooses to do this then the program has been executed and the PC will be flooded by phony warning messages and bogus scans.  The scans are useless and provide highly exaggerated and even completely false results of existing infections.
VirusAlarm2009 uses another method to distribute itself, as well.  SmitFraud is a Trojan downloader that is often installed in advance of VirusAlarm2009.  Aside from the deluge of fictitious alerts and warnings, the PC will slow down to a near screeching halt because of this infection.  This is another way to know that you have been infected.

Type: Rogue Security Application

Manual Removal Instructions:
Manual removal of VirusAlarm2009 does not come without any risk.  Manual removal, if not done by an expert, always runs the risk of damage to the PC.  Use caution if you decide to remove this program manually from your PC.
First, block the following sites:
virusalarm-scanvirus.com
Delete the following processes thoroughly:
VAlarm.exe
VMelt.exe
SetupReleaseXP[1].exe

Next, you must delete the following registry values:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Virus Alarm
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\VAlarm.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “6204703”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Virus Alarm”

Finally, be sure to remove each of the following files:
unins000.dat
vd952342.bd
avcfg.ini
%Documents and Settings%\All Users\Application Data\17d4
%Documents and Settings%\All Users\Application Data\17d4\unins000.dat
%Documents and Settings%\All Users\Application Data\17d4\SysData
%Documents and Settings%\All Users\Application Data\17d4\SysData\vd952342.bd
%Documents and Settings%\All Users\Application Data\7c69f0c
%Documents and Settings%\All Users\Application Data\SysData
%Documents and Settings%\All Users\Application Data\SysData\avcfg.ini
SetupReleaseXP[1].exe
If manual removal was less than successful, do not despair.  VirusAlarm2009 is highly adaptable and is designed to come back if even one file was missed in the removal process.
Take heart and find a program that will do the work for you.  ZookaWare PC Cleaner, for example, is an excellent spyware removal system that has had proven results in removing spyware.  With years of experience, ZookaWare PC Cleaner can easily remove not only VirusAlarm2009 but any other existing malware you may have on your system.
ZookaWare PC Cleaner has a unique proprietary system that promises fast and painless removal process or your money back.

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Stefan Faur says:

    I was surfing around the internet 2 days ago and I just clicked on a link by mistake and VirusAlarm2009 ended up on my PC. I had no idea how to remove it and I found SpyZooka by chance. This is the best antispyware software I ever seen!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php