Win64/Sirefef.AE is a notorious Trojan created by the internet hackers and infects your computer through vulnerability or security program exploits. This infection is promoted through hacked sites that use exploits to install this program onto your computer without your permission. Once installed, it disguises itself in root of the system and it becomes complicated for anti-virus software to detect and remove it.
Mainly, this virus targets to attack computers with 64 bits. It has been known to download adware or malicious files onto your computer. When Win64/Sirefef.AE starts its attack on the system, you will find your computer stuck frequently. Sometimes when you restart the computer, you may get blue screen of death. The virus may allow cyber criminals to track your computer and steal your personal information. Thus, it compromises your privacy and security. Besides those bad behaviors, it still involves more potential threats that may ruin your system. It may display annoying popups while you surf the web or even hijack your browser or even keep redirecting you to other malicious sites. In conclusion, this threat should be removed as soon as possible in order to save your PC well.
1. Reboot your computer to safe mode with networking. As your computer restarts but before Windows launches, tap “F8” key constantly.
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.
b. All malicious files and registry entries that should be deleted:
%Documents and Settings%\[UserName]\Application Data\[random]
%AllUsersProfile%\Application Data\.exe(Win64/Sirefef.AE)
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Random
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Random.exe
If you failed to remove Win64/Sirefef.AE with the instructions above or need any assistant, you are welcome to contact YooCare experts to resolve all the problems completely.
Published by & last updated on August 17, 2012 4:54 pm
Leave a Reply
You must be logged in to post a comment.