Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Trojan.Sirefef virus, problems removing it

19 May 2012   #1
iDennisW

Windows 7 Professional x64
 
 
Trojan.Sirefef virus, problems removing it

Since a couple of days, Microsoft Security Essentials has been giving alerts about Trojan.Win32(and 64)/Sirefef.(various shit)

Says it succeeds in removing them but they return every couple of minutes. Reboot after removal didn't help a thing, nor running Malwarebytes and TDSSkiller.

Any advice? Preferably some fancy combofix method with logs, conventional antivirus solutions haven't shown to help so far.

Thanks in advance!


My System SpecsSystem Spec
.

19 May 2012   #2
windude99

Windows 7 Professional x64 Service Pack 1
 
 

Quote   Quote: Originally Posted by iDennisW View Post
Since a couple of days, Microsoft Security Essentials has been giving alerts about Trojan.Win32(and 64)/Sirefef.(various shit)

Says it succeeds in removing them but they return every couple of minutes. Reboot after removal didn't help a thing, nor running Malwarebytes and TDSSkiller.

Any advice? Preferably some fancy combofix method with logs, conventional antivirus solutions haven't shown to help so far.

Thanks in advance!
Try running Malwarebytes in Safe Mode and be sure to remove everything that comes up (make sure their checkboxes are enabled) Also, clear out all of your browser's cache. In Internet Explorer, click on the gear in the top right and select internet options. Then, find where it says browsing history in the middle of the page and click on delete. In the window that pops up, check all of the checkboxes except the one at the top that says "preserve favorite's website data" and select delete.
My System SpecsSystem Spec
19 May 2012   #3
iDennisW

Windows 7 Professional x64
 
 

Cleared the cache, went into safe mode to run MalwareBytes but it shut down the computer halfway through the scan twice in a row; weird.

Anyway, MSE is still detecting the trojans every couple of minutes, got any more suggestions?
My System SpecsSystem Spec
.


19 May 2012   #4
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

In a case where a PC is compromised by a rootkit, your best & safest option is to do a clean install. Cleaning out a rootkit isn't easy and there's always the chance that something was left behind.

Clean Install Windows 7

If however you do not have this option or wish to try & save the PC, have a look at this site & follow the directions:

How to completely remove ZeroAccess/Sirefef rootkit (Removal Guide)

If the infection is still present, try running one of these tools:

Trojan.Zeroaccess Removal Tool | Symantec

This tool is designed to remove the infections of Trojan.Zeroaccess and Trojan.Zeroaccess.B.

Norton Power Eraser (This tool includes a rootkit scan)

Norton Power Eraser | Free Tool |Easily remove scamware that traditional virus scanning can

Quote:
Because Norton Power Eraser uses aggressive methods to detect threats, there is a risk that it can select some legitimate programs for removal. You should use this tool very carefully. If you accidently remove a legitimate program, you can run Norton Power Eraser to review past repair sessions and undo them.
My System SpecsSystem Spec
Reply

 Trojan.Sirefef virus, problems removing it




Thread Tools





Similar help and support threads
Thread Forum
Unable to fix Action Center notifications after virus Win64/Sirefef.B
Stupidly, I managed to get the Win64/Sirefef.B virus onto my PC. Thankfully my virus scanner caught it before it could do any serious damage, but it's still left me with a few problems. Notably, the following: Security Center service was removed (I've since fixed this) Windows Firewall...
System Security
trojan virus sirefef removal
I have the sirefef virus and the computer reboots every minute even in safe mode with networking. I am able to access the task manager but I can not find any process with the trojan name to stop nor can I figure out which process I should stop. Any help would be greatly appreciated.
System Security
Want are the best afforable anti-virus for a trojan virus
what anti-virus would be great at getting rid of a trojan virus some of the anti virus i have used told me i had one but could not delete it.
System Security
Trojan win64/ sirefef.b and .J
Dell laptop has sirefef.b trojan sirefef.j trojan and win32/alureon.TK These are all trojans. The laptop has MicSecEssentials, and malwarebytes free version, both of which I put onto the computer after the viruses were there. system Specs: Dell Inspiron intel i3 2130 2.3 ghz 4gb ddr3...
System Security
Problems removing anti virus icon
I am using Windows 7 Home Premium 32bit, and I recently unistalled my Avira anti-virus program to install Avast. The problem is that the Avira icon under Control Panel/Sytem and Security is still there! I tried using Revo uninstaller with Hunter Mode and still nothing worked. Any help of how to get...
System Security
Help with removing new Trojan
Well didn't take long...my girlfriend's computer with a brand new Win 7 Pro installation has a Trojan...Bit Defender stops it from accessing the Internet and Quarantines it...but it keeps reappearing as a new name. The location is always the same though as shown in the attached JPG. The Folders...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 14:24.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App