Is your computer infected with Win32/sirefef.ev Trojan and you don’t know how to remove it? After following the instructions in many forums, you still believe to be infected? Well, you can get your problem fixed with the methods here.

What is Win32/Sirefef.EV? How do i remove it from my computer?

Win32/Sirefef.EV is a dangerous Trojan horse detected by MSE or NOD 32 ESET. Once your computer has contracted with this virus, so after one day or two, and not long after seeing your computer slow down then many users ran online antivirus as per the virus removal guide and found nothing. You have Kaspersky installed and it didn’t detect anything until recently where it showed: “Generic Host process for win32 services is trying to access malicious software. Trojan programs: Trojan.win32.small.bmph and Win32/Sirefef.EV”. It showed users the same message for two other Trojans: trojan.win32.small.bmpi and trojan.win32.zapchast.acao. At that time the avp.exe process associated with Kaspersky was running at 99% CPU making it extremely difficult to run the tools on user’s computers. Win32/Sirefef.EV might spread from some false webpages, and an expected file attachment could still be infected with a virus, without the sender knowing it. You will need to deal with such annoying issue to keep your computer free of viruses.

To save your computer, Live Chat with YooSecurity Expert Now, or you can follow the manual removal guide below to get your problem fixed. (For advanced computer users)

The easy way to deal with Win32/Sirefef.EV from Windows XP, Windows Vista or Windows 7

Many computer victims get headache about this terrible Win32/Sirefef.EV virus for it keeps coming back from time to time.  Have anti virus software, it said i had been infected with a bunch of Trojan viruses so you scanned your whole computer and quarantined all the viruses it found. The you log onto the computer and your wallpaper doesn’t show up, the message pops up about 10 times that says “Win32/Sirefef.EV”. You tried some things posted on many websites, but problem is still there. The effectively way to get rid of this virus is manual removal. As manual removal is a safe and effective way, so it is helpful, but it is just for advanced computer users.

Basic steps to manually remove Win32 Sirefef EV infection

Press Ctrl+Alt+Del keys together and stop all processes of the Trojan in the Windows Task Manager.

Let’s open the Registry Editor, search and remove registry entries generated by Trojan horse.

All associated files of Win32/Sirefef.EV should be removed.

C:\Documents and Settings\Users\Local Settings\Application Data\{da6b21f3-b802-b086-40c3-5ab8e12cebcd}\n
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\WINDOWS\system32\grpconv.exe

C:\WINDOWS\Installer\{da6b21f3-b802-b086-40c3-5ab8e12cebcd}\n (Rootkit.0Access)
C:\WINDOWS\Installer\{da6b21f3-b802-b086-40c3-5ab8e12cebcd}\U\00000001.@ (Trojan.Small)
C:\WINDOWS\Installer\{da6b21f3-b802-b086-40c3-5ab8e12cebcd}\U\80000000.@ (Trojan.Sirefef)
C:\WINDOWS\Installer\{da6b21f3-b802-b086-40c3-5ab8e12cebcd}\U\800000cb.@

Video Tutorial On How to Modify or Change Windows Registry:

Registry Entries That Generated By The BlacoleRef Infection

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\random thing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\

Note: Please feel free to get YooCare/YooSecurity 24/7 online support anytime you get stuck or when you feel it’s tough to clean out Win32/Sirefef.EV Virus.

Published by Tony Shepherd & last updated on November 14, 2012 1:31 pm

Leave a Reply