Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: Sirefef Removal!

11 Jul 2012   #1

Windows 7 Ultimate x64 Service Pack 1
 
 
Sirefef Removal!

Help guys, BitDefender just alerted me about being infected by the Sirefef trojan. These are the two particular variants BitDefender can't seem to remove:

*Sirefef.A - C:/Windows/System32/services.exe
*Sirefef.GY - C:/Windows/Installer/{84d3bf12-3c1a-e026-8b4e-76a071be099b}/U/00000004.@

Any idea how I can remove this bugger? Running Windows 8 Consumer Preview x64

My System SpecsSystem Spec
.

11 Jul 2012   #2

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Since this is a rootkit, the best/safest option would be a clean install.

You can try this tool - TDSSKiller

Anti-rootkit utility TDSSKiller

When the removal tool first launches, make sure to click on "Change parameters" & check all the boxes.

You could try the Windows 8 Recovery Options also:

http://www.dedoimedo.com/computers/w...-recovery.html
My System SpecsSystem Spec
11 Jul 2012   #3

Windows 7 Professional SP1 64-bit
 
 

I would take a look here: sirefef dot com :: virus removal instructions

It has specific instructions for manually removing sirefef. According to them TDSSKiller will not remove competely by itself.

Personally, I recommend a clean install, or if you have a system image, restore that.
My System SpecsSystem Spec
.


07 Oct 2012   #4

32 bit Windows 7 Home Premium
 
 
sirefe!cfg Virus

The particuarly viscious virus named sierfe!cfg totally locked me out of my computer. I got around it by using Windows SAFE boot and then did a complete system scan using Microsoft Security Essentials and it foune and deleted the Trojan Virus named sirefe!cfg All is OK now. However I am concerned that Microsoft Security Essentials permitted the virus to enter my computer ???? !!!!

The upon system lockout the virus present a screen that appears to be from the FBI telling me that I have violated some federal regulation and that the only way to unlock my computer is to purchase a Green Dot Money Card and then enter the ID number of that card into the "FBI" screen. The Gree Dot Card was to cost $200.00

I sent everything to the FBI and to Microsoft hopiing they can prevent this from happening to others.

E3
My System SpecsSystem Spec
07 Oct 2012   #5
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

ernesteengle, this is 'ransom' ware .... don't send any money!!
My System SpecsSystem Spec
07 Oct 2012   #6

Windows 7 Pro. 64/SP-1
 
 

To be safe I recommend changing all passwords using a computer that has not been infected.
My System SpecsSystem Spec
07 Oct 2012   #7

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by ernesteengle View Post
The particuarly viscious virus named sierfe!cfg totally locked me out of my computer. I got around it by using Windows SAFE boot and then did a complete system scan using Microsoft Security Essentials and it foune and deleted the Trojan Virus named sirefe!cfg All is OK now. However I am concerned that Microsoft Security Essentials permitted the virus to enter my computer ???? !!!!

The upon system lockout the virus present a screen that appears to be from the FBI telling me that I have violated some federal regulation and that the only way to unlock my computer is to purchase a Green Dot Money Card and then enter the ID number of that card into the "FBI" screen. The Gree Dot Card was to cost $200.00

I sent everything to the FBI and to Microsoft hopiing they can prevent this from happening to others.

E3
GOod Job that you contact microsoft .I hope they will update about this trojan in their updates....... Thanks for sharing the info with us .
My System SpecsSystem Spec
Reply

 Sirefef Removal!





Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:52 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33