Win32/Sirefef.R is a component of the iniquitous and widely-distributed ZeroAccess rootkit, which is identified by Microsoft under the umbrella term of the Sirefef family of Trojans. Win32/Sirefef.R may refer to one of several PC threats from this family, including malicious code that’s inserted into normal files like a virus, a Trojan dropper or a self-contained Trojan. Win32/Sirefef.R isn’t necessarily guaranteed to display symptoms of its existence, but Win32/Sirefef.R will always be included with other components of a ZeroAccess infection and can be involved in severe security attacks against your PC. SpywareRemove.com malware researchers strongly discourage any attempt to find or delete Win32/Sirefef.R without assistance from either a PC security professional or a suitable anti-malware application due to the high likelihood of severe system alteration and damage.
Win32/Sirefef.R: Out with the Old and In with the New
The label of Win32/Sirefef.R has been used to identify Sirefef-related PC threats since 2011. However, SpywareRemove.com malware researchers have also noted its resurgence in separate Sirefef components as of June 2012. So far, these distinct versions of Win32/Sirefef.R include:
- Trojan:Win32/Sirefef.R, a Trojan that’s incapable of infecting other files (although it may be loaded into memory and concealed within another process). This is the oldest variant of Win32/Sirefef.R that was noted in the middle of 2011.
- Virus:Win32/Sirefef.R, a Sirefef variant that can insert its code into other files without your consent. While SpywareRemove.com malware researchers haven’t finished analyzing Virus:Win32/Sirefef.R’s capabilities at the time of this writing, Sirefef-related viruses are particularly likely to infect web browser files in an attempt to steal confidential account-related information (for bank websites, FTP programs, etc).
- TrojanDropper:Win32/Sirefef.R, a component that’s used to install a predefined PC threat that’s included in its own body. TrojanDropper:Win32/Sirefef.R and similar PC threats may also attempt to reinstall their payloads if they’re detected as deleted.
Why Any Version of Win32/Sirefef.R on Your PC Should Be Worthy of Concern
Despite a lack of overt and observable symptoms in a standard Win32/Sirefef.R infection, any variant of Win32/Sirefef.R should always be considered a danger to your PC.
Removing Win32/Sirefef.R should never be done by manual methods if other options are available, since the presence of Win32/Sirefef.R is almost certain to be supported by other PC threats, especially additional Sirefef components. Files that are related to Win32/Sirefef.R may also be concealed in the Windows system folder and equally-sensitive locations.
Win32/Sirefef.R Automatic Detection Tool (Recommended)
Is your PC infected with Win32/Sirefef.R? To safely & quickly detect Win32/Sirefef.R, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect Win32/Sirefef.R What happens if Win32/Sirefef.R does not let you open SpyHunter or blocks the Internet?
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
Posted: July 6, 2012 | By SpywareRemove
Threat Level: 8/10
Rate this article:
Detection Count: 75