Yes this really sucks. The fact that:
1) many of use used Vircurex for alt-MM-coins (I was even advertised with referral)
2) you just can't change payout addresses
3) Vircurex just got hacked (apparently)
Together that means I can throw my account away, and lost coins.
Might be Vircurex pure fail but common... it sucks, it really does.
I think I will never want to depend on hosted wallets again.
But running all alt-chains on your own machine is a pain too.
Yes, this is a problem. Bitparking has read only addresses and the owner of the private key for the registered address basically owns the funds. What you might be able to do is ask Vircurex for the private key for the addresses. You could import these into your own client, withdraw, then immediately transfer. It's unlikely any hacker is constantly monitoring the alt coin wallets. It may not be possible for Vircurex to provide this though.
You don't need to run all alt-coins all the time on your own machine. You can run once, get an address, register with that and never run the client again until you want to use the funds. You can even withdraw from bitparking without needing to run your client. This is how I do things.
Someone asked me if they could sign a message using one of the keys (ie. the bitcoin key) to prove ownership of the other addresses and have them changed. The problem with this is it leaves the pool open to social engineering. If the bitcoin key was kept on Vircurex too I don't know if it's the hacker then trying to withdraw funds from the pool. It's a bad situation. I'm open to suggestions.