Alert level

Trojan:Win64/Sirefef.AC

(?)

Encyclopedia entry
Updated: Oct 30, 2012  |  Published: Jul 30, 2012

Aliases
Not available

Alert Level (?)
Severe

Antimalware protection details
Microsoft recommends that you download the latest definitions to get protected.
Detection last updated:
Definition: 1.133.350.0
Released: Aug 25, 2012
Detection initially created:
Definition: 1.131.1006.0
Released: Jul 30, 2012


 

Summary

Trojan:Win64/Sirefef.AC is a component of Win64/Sirefef - a multi-component family of malware that uses stealth to hide its presence on your computer. The family consists of multiple parts that perform different functions, such as downloading updates and additional components, hiding existing components, or performing the payload.

Caution: Win64/Sirefef is a dangerous threat that uses advanced stealth techniques in order to hinder its detection and removal. As a consequence of being infected with this threat, you may need to repair and reconfigure some Windows security features. Please see Additional remediation steps in this entry for more information.



 

Symptoms

There are no common symptoms associated with this threat. Alert notifications from installed antivirus software may be the only symptoms.



 

Technical Information (Analysis)

Trojan:Win64/Sirefef.AC is a component of Win64/Sirefef - a multi-component family of malware that uses stealth to hide its presence on your computer. The family consists of multiple parts that perform different functions, such as downloading updates and additional components, hiding existing components, or performing the payload.

For more information, please see the Win64/Sirefef family entry elsewhere in our encyclopedia.

Caution: Win64/Sirefef is a dangerous threat that uses advanced stealth techniques in order to hinder its detection and removal. As a consequence of being infected with this threat, you may need to repair and reconfigure some Windows security features. Please see Additional remediation steps in this entry for more information.


 



 

Prevention



 

Recovery

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an up-to-date, Microsoft security solution.

Some Sirefef infections may prevent you from running your Microsoft security solution. If this happens, you should uninstall your antivirus, reinstall it, then run a full-system scan. You can read about how to uninstall a program here.

The following Microsoft products detect and remove this threat:

Additional remediation steps

Sirefef makes lasting changes to your computer’s security settings that may need to be repaired. Sirefef stops and deletes a number of different security-related services on your computer. When using Microsoft security solutions to clean a Sirefef infection, these services will be restored to the Windows default installation settings.

The following Microsoft Fixits can be used for additional repair and configuration:

Provide feedback