The latest version of VirusAlarm, aptly titled VirusAlarm2009, is a rogue security program designed to use fraudulent tactics to achieve its purposes to steal the targeted user’s money. The authors of VirusAlarm2009 are the same one responsible for creating Virus Melt and Virus Doctor.
VirusAlarm2009 will propagate itself by promoting misleading banners and pop-ups on various websites. If these banners or pop-ups are clicked on, the user is brought to a site where you are asked to download a trial version of VirusAlarm2009. If the user chooses to do this then the program has been executed and the PC will be flooded by phony warning messages and bogus scans. The scans are useless and provide highly exaggerated and even completely false results of existing infections.
VirusAlarm2009 uses another method to distribute itself, as well. SmitFraud is a Trojan downloader that is often installed in advance of VirusAlarm2009. Aside from the deluge of fictitious alerts and warnings, the PC will slow down to a near screeching halt because of this infection. This is another way to know that you have been infected.
Type: Rogue Security Application
Manual Removal Instructions:
Manual removal of VirusAlarm2009 does not come without any risk. Manual removal, if not done by an expert, always runs the risk of damage to the PC. Use caution if you decide to remove this program manually from your PC.
First, block the following sites:
Delete the following processes thoroughly:
Next, you must delete the following registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “6204703”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Virus Alarm”
Finally, be sure to remove each of the following files:
%Documents and Settings%\All Users\Application Data\17d4
%Documents and Settings%\All Users\Application Data\17d4\unins000.dat
%Documents and Settings%\All Users\Application Data\17d4\SysData
%Documents and Settings%\All Users\Application Data\17d4\SysData\vd952342.bd
%Documents and Settings%\All Users\Application Data\7c69f0c
%Documents and Settings%\All Users\Application Data\SysData
%Documents and Settings%\All Users\Application Data\SysData\avcfg.ini
If manual removal was less than successful, do not despair. VirusAlarm2009 is highly adaptable and is designed to come back if even one file was missed in the removal process.
Take heart and find a program that will do the work for you. ZookaWare PC Cleaner, for example, is an excellent spyware removal system that has had proven results in removing spyware. With years of experience, ZookaWare PC Cleaner can easily remove not only VirusAlarm2009 but any other existing malware you may have on your system.
ZookaWare PC Cleaner has a unique proprietary system that promises fast and painless removal process or your money back.