A new Trojan attacks your PC? Virus or unwanted thing ‘Win32/Sirefef.R’ detected in file ‘ C:\Windows\System32\Services.exe. Action performed: Deny access. My computer is infected with the Win32/Sirefef.R virus? My Anti-Software, keeps notifying the virus every minute or so, is there any solution to delete it?

What is Win32/Sirefef.R? Virus Sirefef keeps coming back?

Win32/Sirefef.R is a new Trojan detected by Microsoft Security Essentials. It is updated from Trojan:Win32/Sirefef.AH and hard to be removed via a normal anti-virus. For virus win32 sirefef.R reboots your computer in a minute, and you may receive the message that windows has encountered a problem then it will shut down you computer. Improved detection and removal of ZeroAccess rootkit modifications: Win64/Sirefef.B, Win64/Sirefef.Y, Trojan:Win32/Sirefef.P, Win32/Sirefef.R. Once has been downloaded, you might find out the infected computer, which reboots with a message that windows has found an error. Several users  attached the hard drive to another computer and did a scan with MSE, and it found the virus in services.exe. When they tried to follow the prep. guide, but there is not time to do anything before it reboots.Currently, lots of computer users had tried everything and desperate and they kept looking for a solution on many websites with the problems of others. Nothing help on the infected computer. It doesn’t seem to have done anything apart from just appearing all the time saying it’s been quarantined by their anti-virus stuff. And it is stuffing Google up a bit. When people click on things and they are redirected to a weird page. One example that from one of the victims: My computer has been infected by Win32/Sirefef.R showing the following message “Windows has encountered a critical problem and will restart automatically in one minute. Please save your work now”. How do I remove it? The Win32/Sirefef.R virus comes from several versions of sirefef, even if you have downloaded several anti-spyware including eset and stopzilla, but none works. Hurry up to drag it away from your computer forever!

To get an easy way to remove the cunning virus, YooCare PC online service is recommended for you:

Key sentences to judge if your computer has been infected this Trojan Virus

A. Your computer is rebooting just in a few minutes.

B. When you open the Task Manager, you can find some strange progresses which you never found before.

C. Some of your computer functions are unavailable or some normal legal program can’t run or there are unusual conditions of them.

D. It always constantly happens that your system has errors somewhere. Your search results kept redirecting to some other sites you have never seen.

E. Lately, your computer system will be totally destroyed.

What the best solution to get rid of Win32/Sirefef.R virus as my antispyware won’t be able to help?

You are really having trouble with the Win32/Sirefef.R virus for it keeps coming back from time to time after a reboot. I downloaded from MS a malicious tool remover from their update newletter. After that it is auto restarting and couldn’t figure out what to do. Infact the Microsoft security essentials is unable remove the virus. My computer is unusable because of this virus, it won’t give me time to get any solution. Since I open the computer it gives me notice that it is going to close in a minute for Windows has found an errors and I can not act with any antivirus and worst of all is that I do not know much about computers,  what could be done to resolve this problem? Many users are so frustrate with this virus. Lucky they have another laptop with them to seek solutions. Manual removal of Sirefef.R Virus step by step guide is below.

Best Way to Remove Win32 Sirefef R Step by Step:
Please follow these steps to get rid of the Win32/Sirefef.R virus manually:
Step 1: Press CTRL+ALT+DEL or CTRL+SHIFT+ESC. Open the Windows Task Manager.
If that didn’t work, try another way. Press the Start button and click on the Run option. This will start the Run tool. Type in taskmgr and press OK. This should start the Windows Task Manager

Step 2: Within the Windows Task Manager click on the Processes tab. Find the process by name. random.exe related to Win32/Sirefef.R. Then scroll the list to find required process. Select it with your mouse or keyboard and click on the End Process button. This will kill the process.

Video Show You on How to Modify or Change Windows Registry:

Step3: Remove malicious files of Win32/Sirefef.R virus

Win32rundll.exe
C:\Windows\System32\services.exe
C:\Windows\Installer\{df7afafe-cca6-9ebd-e886-e53ca2584d5e}
C:\Windows\System32\DRIVERS\ipinip.sys
C:\Windows\System32\DRIVERS\nwlnkflt.sys
C:\Windows\System32\DRIVERS\nwlnkfwd.sy

Step4: Delete malicious registry entries of Win32/Sirefef.R virus.

HKEY_CLASSES_ROOT\clsid\{0bc6e3fa-78ef-4886-842c-5a1258c4455a}
HKEY_CLASSES_ROOT\agihelper.AGUtils
HKEY_CLASSES_ROOT\TypeLib\{647B16D8-AD7B-4983-82D7-82A270FC9E6D}
HKEY_CLASSES_ROOT\agcutils.AGSearchHook
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Random
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Random.exe

Note:If you failed to remove Win32/Sirefef.R virus with the method above, please consult YooSecurity certified professionals to remove it completely.

Published by Tony Shepherd & last updated on July 2, 2012 11:46 am

Leave a Reply