Recommended
Aug 17, 2012

Can’t Remove Win64/Sirefef.B Virus? – Trojan Manual Removal Help

Are you facing a big issue that whenever you log on the computer, a pop-up box appears saying that a critical error has been detected and the computer will reboot in one minute? Do you realize that Win64/Sirefef.B is making chaos on your computer now? Follow the instructions on this page to remove this Trojan effectively.

Win64/Sirefef.B Description:

Win64/Sirefef.B is a tricky Trojan infection that uses advanced rootkit techniques to evade detection and removal by security software. Even if you can detect it from Microsoft Security Essentials, it is still difficult to be removed. The virus can keep coming back without users’ permission. What is worse? You will be unable to take any action against the infection since it will make your computer shut down with 1 minute.

Users always get this virus installed when they are clicking some malicious ads or visiting some malicious sites, as well as opening unknown downloaded files. If you have these activities online, then there may be a reason that you have this Trojan on your computer. Once downloaded, this virus will gather your personal information and send to a remote server to future attack your PC. It also may hijack the affected web browser and cause unwanted redirects to suspicious websites. For the sake of your compute, you had better delete this tricky Trojan as soon as possible.

Please take caution when you perform the manual guide below. Manual removal is a risky job, any mistake may lead to system crash immediately. If you need any help, please live chat with YooCare experts now.

Symptoms of Trojan Infection:

Computer slows down dramatically.
System crashes suddenly and repeatedly.
Open backdoor and download other threats.
Let hackers remotely access your PC secretly.
Track your personal activities on the Internet.
Compromise your personal information and privacy.

Manual Removal Guides:

1. Reboot your computer to safe mode with networking. As your computer restarts but before Windows launches, tap “F8” key constantly.

2. Show hidden files and folders.

Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.

Click the View tab.

Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.

3. Open Registry entries. Find out the malicious files and entries and then delete all.

Attention: Always be sure to back up your PC before making any changes.

a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.

b. All malicious files and registry entries that should be deleted:

%AllUsersProfile%\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%AllUsersProfile%\Application Data\.exe
%UserProfile%\Desktop\Win64/Sirefef.B

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run .exe

Video Shows You How to Safely Modify Windows Registry Editor:

If you failed to remove this Trojan with the instructions above or need any assistant, you are welcome to contact YooCare experts to resolve all the problems completely.

Published by & last updated on August 17, 2012 4:58 pm

Leave a Reply

Your email address will not be published.

Problems with your PC, Mac or mobile device?

Live Chat Now

Thanks for using YooCare Services!

Here're some of the support team members who are passionate about their works and support our customers 24/7.

As Seen On