BleepingComputer.com: Tricky Virus infection good luck

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Tricky Virus infection good luck

#1 User is offline   raymanvh 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 5
  • Joined: 09-September 11

Posted 09 September 2011 - 11:20 PM

Ok so here is the deal I have been dealing with this computer virus for a couple nights now on a friends computer. The problem is the infection known as win64 sirefef.b it has caused me much trouble. I will first start off telling you the procedure I have been through: First off when I got the computer it did not boot so I pulled out my hirens boot cd and booted to a mini xp OS from there I proceeded to run Superantispyware. This was able to get rid of a vast majority of things and let the computer boot up. I then proceeded to boot the computer into safe mode and I ran malewarebytes and superantispyware again fully updated on both until it knocked out about another 50 or so infections. Now I have Microsoft Security Essentials (MSE) on the computer and it detects a the virus/rootkit known as win64 sirefef.b if I allow MSE to delete this infection then the computer no longer boots and throws up a bsod saying that compsrv is missing. I however restored the system to a date before removing the infection so my OS was once again bootable and proceeded to do these steps again. The computer still has win64 sirefef.b and I preventing MSE from deleting it currently. Also just fyi the infection does not allow any windows defender programs to run and it also redirects me from any microsoft websites. I would appreciate any help thanks.

#2 User is offline   ranget 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 224
  • Joined: 29-January 11
  • Gender:Male

Posted 10 September 2011 - 04:41 AM

hi there

i would like you to


1- Boot in safe Mode with networking
2- Do a Full scan with : Malware byte antimalware , Superantispyware , DRweb cureit

let's see what will happen
Anime ,J Drama Fan

#3 User is offline   raymanvh 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 5
  • Joined: 09-September 11

Posted 10 September 2011 - 05:45 PM

I already did this as stated in the original post they do not detect the infection. I have done all the necessary scans I do a lot of computer repairs and have dealt with many infections/rootkits so I know what I am doing. I am kind of looking for help from an administrator/moderator for any helpful hints.

#4 User is offline   raymanvh 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 5
  • Joined: 09-September 11

Posted 15 September 2011 - 06:08 PM

please close topic

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users