General

Chat

Trojan isnt going away

So I got this Trojan detected by Windows defenders: Trojan:Win32/Sirefef.AN

I have deleted it many times, even with Kasperskey, but no luck. It just keeps coming back! I've searched ways in doing it, but it wouldn't work. Don't ask about set the computer back "x" amount of days, because I am not even sure when I first got it. I searched up how to delete it, but I feel like I will mess it up, so I won't try it.

What can I do? I have an urge to reboot my entire computer (saving only important documents onto a USB file, like microsoft, pictures, work, etc.), but I am not entirely sure that the trojan itself will be deleted. What can I do?

August 6, 2012

15 Comments • Newest first

SmackBabies

[quote=ToxicEffect]smh @ people that even suggest doing a system restore; it doesn't remove viruses/malware. Malwarebytes & SuperAntiSpyware are your best bets. Download and run them full scan in safe mode.[/quote]

well... um... I really don't know how I should say this... but...

Safe mode with Networking doesn't work. I tried it several times, and at best i can get to is the welcome right after inputing the password

Reply August 6, 2012
Vuxrian

Malwarebytes is almost a guaranteed fix as long as you manage to get it running; Try a USB run like stated earlier.
And try Microsoft Security Essentials/Avast as your AV next time.

System restore as an almost last resort; try a month or so back.

Reply August 6, 2012 - edited
LordZubin

[quote=primalfurey]http://www.safer-networking.org/

http://www.malwarebytes.org/

download and run both.[/quote]

This.
If that doesn't work, run system restore and reset it to the last restore point. If that doesn't work, try your recovery disk. If that doesn't work, backup your own documents (not programs, just pictures, videos, schoolwork) and do a clean install of your OS.

Reply August 6, 2012 - edited
Amuro

[quote=SmackBabies]Also @maxdamage, kasperskey is a real antivirus that you have to pay for in order to get. (well, from what I know, since the one I got was bought with a disc)[/quote]

It's good that you have that covered (since Windows Defender is just an anti-spyware protection program). You should never have more than one anti-virus program active at once, so stick to kasperskey if it's been serving you well.

Reply August 6, 2012 - edited
SmackBabies

[quote=Amuro]Reformatting is the last thing you want to try, ever. Usually Malwarebytes will do the trick. If it doesn't work, don't consider reformatting until you've at least asked for help at the Avast forum (in the link I previously gave) - there are really experienced people over there who will almost certainly be able to solve the problem for you.[/quote]

Wow. Thank you so much. I will try these right now. Hopefully when everything is fixed, my computer will be running back up a lot faster.

Also @maxdamage, kasperskey is a real antivirus that you have to pay for in order to get. (well, from what I know, since the one I got was bought with a disc)

Reply August 6, 2012 - edited
Amuro

[quote=DomoGenesis]reformat.
Its probably a rat, im really familiar with these, theres no way to get it off if you've tried what you've said, reformat.[/quote]

Reformatting is the last thing you want to try, ever. Usually Malwarebytes will do the trick. If it doesn't work, don't consider reformatting until you've at least asked for help at the Avast forum (in the link I previously gave) - there are really experienced people over there who will almost certainly be able to solve the problem for you.

Reply August 6, 2012 - edited
Amuro

Whatever you do in safe mode (with networking) carries over once you restart normally. So if you download Malwarebytes on safe mode, it will be there when starting normally.

Reply August 6, 2012 - edited
SmackBabies

Thank you everyone that helped.

I will try what @angramainyu said and run malawarebytes just like what everyone said.
Just a question about computer in safe mode w/ networking: does malawarebytes go to the original desktop (when starting normally)? Or does it just stay there w/ networking

Reply August 6, 2012 - edited
xDracius

[quote=angramainyu]Restart your computer in safe mode with networking, and run Malwarebytes from there.[/quote]

What I always do. If it doesn't let Malwarebytes run, I use something called a TDSS killer to let it run.

Reply August 6, 2012 - edited
SmackBabies

[quote=Amuro][url=http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button]What about this?[/url][/quote]
I'm sent with an error 404 code...

This trojan is getting on my nerves

Reply August 6, 2012 - edited
Amuro

[quote=SmackBabies]in all seriousness... malawarebytes won't let me access to their home page. It directs me straight to google.[/quote]

[url=http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button]What about this?[/url]

Reply August 6, 2012 - edited
SmackBabies

[quote=primalfurey]http://www.safer-networking.org/

http://www.malwarebytes.org/

download and run both.[/quote]

in all seriousness... malawarebytes won't let me access to their home page. It directs me straight to google.

Reply August 6, 2012 - edited
Darkwolf6545

o.o I didn't know Windows Defender even worked lol

IIRC System Restore doesn't really work, so I would think about downloading Malwarebytes (as others have said) and running a scan.

Reply August 6, 2012 - edited
Amuro

Download Malwarebytes (if you don't have it already), and doing a thorough (full) scan using it.

If that doesn't solve the problem, [url=http://forum.avast.com/index.php?board=4.0]make an account here and ask for help.[/url] Essexboy over there has helped me once, and he's pretty amazing (make sure you follow his instructions carefully).

Reply August 6, 2012 - edited
TraceUserxBrawl

System Restore? Like.. a few days/weeks back, if you can

Reply August 6, 2012 - edited