Home > Threats > VirusRay

What is VirusRay

Posted on 5 November 2007 under Rogue Programs

1. What is VirusRay?

VirusRay is a rogue computer security application having intent to frighten PC owner by displaying alerts about system disorder. Being spread by a Trojan.Zlob under .dll file extensions, it claims to "remove spyware and malware from the PC, receive frequent updates of a new threats, monitor and protect your PC from all malware infections." But all you get is fictitious alerts and warnings about virus existence. This rogue program will not make you system secure, even after you purchase licensed version, so do not make any payments! To act with discretion and to avoid future PC disorder, it is recommended to remove VirusRay as early as possible.
Also known as VirusRay 3.8.

Related threats: VirusHeat, AntiVirGear, SpywareQuake, VirusProtect

2. VirusRay screen shot:


3. How to remove VirusRay:

  1. Internet connection might be disabled or Internet browser might be blocked by VirusRay, so it won't be possible to download any files to infected computer. In this case please download all files required for VirusRay removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove VirusRay download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove VirusRay.

  5. Restart the computer to complete VirusRay removal procedure.

4. VirusRay files:

VirusRay 3.8.exe, vray_setup.exe (setup file)

5. Hijackthis entries:

O4 Entries
O4 - HKLM\..\Run: [VirusRay 3.8] "C:\Program Files\VirusRay 3.8\VirusRay 3.8.exe" /h
O22 Entries
O22 - SharedTaskScheduler: bokard - {ab75cc7d-2751-4144-a278-5462d5a5884c} - C:\WINDOWS\system32\dfrep.dll