Trojan:win32/Sirefef.AK is a terrifying computer infection that comes from the same family as Trojan:Win32/Sirefef.AL, Trojan:Win32/Sirefef.AG as well as Trojan:win32/Sirefef:AC. Basically, this virus propagates via network based bundled/encrypted downloads, USB drive based malware installations and many others ways. It includes backdoor capabilities that allow it to open network ports to download and install additional malware threats onto the infected computer. After it is downloaded, this malicious Trojan may deactivate various Windows functions such as Registry Editor, Task Manager, and Folder Options. What’s worse, it conceals its occurrence running low in the system’s background, and corrupting processes for staying in your workstation for as long as possible. But what makes people concern is this Trojan will gather your personal data such as credit card info, log in numbers and then connect to a remote IRC server and forward the data to cybercriminals. What Trojan:win32/Sirefef.AK can do is to increase the risk of the security. Hence, it is kindly suggested users to eliminate it as soon as possible.
It can bypass the legit security tools and destroy your computer secretly.
It prevents you from opening some application because the files are corrupted.
It can make your browser redirected to all kinds of malicious websites.
It is able to allow remote hacker access the compromised system for illicit purpose.
Note: Trojan:win32/Sirefef.AK is a highly dangerous Trojan created by the internet hackers and infects your computer through vulnerability or security program exploits. Once found, an immediate removal is needed. You can chat with an expert now to further know about this virus.
Trojan:win32/Sirefef.AK can infect via many ways:
From malicious drive-by-download scripts from corrupted porn and shareware / freeware websites.
Through spam email attachments, media downloads and social networks.
When clicking suspicious popups or malicious links.
Open unknown email or download media files that contain the activation code of the virus.
Note: No matter how does the virus access your PC, users should know that there are no tools can remove this virus automatically at this moment, it is suggested users not spend much time in downloading or paying any security software which claims can delete this stubborn virus. It is totally useless. To completely get rid of this pest, professional manual guide is needed.
1. Reboot your computer to safe mode with networking. As your computer restarts but before Windows launches, tap “F8” key constantly.
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.
b. All malicious files and registry entries that should be deleted:
%System%\drivers\[RANDOM CHARACTERS].sys
%Temp%\[random]
C:\WINDOWS\system32\[random name].dll
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyServer” = :0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1
Manual removal of Trojan:win32/Sirefef.AK requires Expertise, Please take care before performing the steps. If you failed to remove this Malware, you are welcome to contact PC expert to fix the problem.
Published by & last updated on August 18, 2012 4:17 am
Leave a Reply
You must be logged in to post a comment.