VirusRay

VirusRay Description

VirusRay, or VirusRay 3.8, is a rogue spyware removal tool designed to trick users into purchasing its full rogue version by showing misleading warning messages on the Taskbar. VirusRay is usually downloaded and installed via ZLOB/MediaAccess Codec installer from an adult site. Once executed, VirusRay will scan your machine and use false positives in order to frighten you into purchasing the full version of the program.

Although VirusRay may appear to be undamaging, it is a security risk to your computer and it may actually expose you to more security threats by installing additional malware. Moreover, VirusRay is known to be a clone of AntiVirGear.

Home site for this rogue anti-spyware application is www.virusray.com

VirusRay Automatic Detection Tool (Recommended)

Is your PC infected with VirusRay? To safely & quickly detect VirusRay, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect VirusRay What happens if VirusRay does not let you open SpyHunter or blocks the Internet?

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	setup[1].exe	672
2	VirusRay 3.8.exe	475
3	%ProgramFiles%\VirusRay 3.8	468
4	unpfrwb.dll	468
5	VirusRay 3.8 Website.lnk	321
6	VirusRay 3.8.url	300

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.

The following newly produced Registry Values are:
HKEY..\..\{Value}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, value: {0ee82408-3eef-49e3-9370-f94cf2e4034a}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}VirusRay 3.8VirusRay 3.8.exeHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}VirusRay 3.8
The following CLSID's were detected:
HKEY..\..\{CLSID Path} {1AE427B0-E3B7-4D2E-A6B9-36605B0F214E}{BE096ECD-D62E-4B2D-BBA5-CBF9BFA4AB23}{45DB217B-965D-4917-A653-C2A871534B4C}{1D723C81-2C9F-44DD-8F94-A2D3A06845E9}{41FC2EBD-79F5-4FE0-8558-708DCB7FE255}{869B656B-142E-47E6-B4F6-973D17E80BBF}{DDA20808-84A0-48C3-902A-7E31FF47EA6B}{60FD2747-818B-4242-A041-4C1209F3D3A6}{78AA9209-DED5-4F37-93A0-89FBEE57E4FC}{9097FA96-8EFD-4D04-8024-C920AB56BBEA}{70F731FD-6C5F-4D46-A29C-6B97FABEF0D0}