Home Malware Programs Trojans Trojan:Win64/Sirefef.U

Trojan:Win64/Sirefef.U

Posted: July 18, 2012

Threat Metric

Threat Level: 8/10
Infected PCs: 124
First Seen: July 18, 2012
Last Seen: November 7, 2021
OS(es) Affected: Windows

Trojan:Win64/Sirefef.U is a Trojan that contains rootkit capabilities and, thus, is hard to detect and remove by many security tools from the infected computer system. Trojan:Win64/Sirefef.U allows cybercriminals to steal and use your personal information such as passwords, user names, banking information, social security numbers, and many other for malicious intentions. Trojan:Win64/Sirefef.U can download and install other malware threats on the affected PC. Trojan:Win64/Sirefef.U infiltrates into the targeted computer surreptitiously and, once installed, displays a pop-up security alert. Trojan:Win64/Sirefef.U changes system settings, blocks access to security-related programs, deletes files, kills processes, modifies the Registry. Trojan:Win64/Sirefef.U is also used by attackers to spread rogue anti-spyware applications called Live Security Platinum and Smart Fortress 2012.

Aliases

Suspicious file [Panda]W32/Krap.A!tr [Fortinet]Win32.SuspectCrc [Ikarus]Mal/Encpk-ADD [Sophos]TR/Crypt.XPACK.Gen [AntiVir]Trojan.Rodricter.7 [DrWeb]Gen:Variant.Kazy.72908 [BitDefender]Trojan-Dropper.Win32.Dorifel.flp [Kaspersky]Win32/Simda.L [NOD32]Generic6_c.GQI [AVG]W32/Injector.JRX [Fortinet]Virus.Packed.AutoIt [Ikarus]Trojan.MulDrop3.56356 [DrWeb]UDS:DangerousObject.Multi.Generic [Kaspersky]a variant of Win32/Injector.JRX [NOD32]
More aliases (42)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%USERPROFILE%\8cac82a0-5016.exe File name: 8cac82a0-5016.exe
Size: 52.22 KB (52224 bytes)
MD5: 1bb937cb420ef7fb9772d6b98df99a61
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%
Group: Malware file
Last Updated: July 20, 2012
C:\TDSSKiller_Quarantine\06.02.2021_17.06.08\zaea0000\svc0000\tsk0000.dta File name: tsk0000.dta
Size: 6.65 KB (6656 bytes)
MD5: 5f22132c9153639762708909f156b33d
Detection count: 33
Mime Type: unknown/dta
Path: C:\TDSSKiller_Quarantine\06.02.2021_17.06.08\zaea0000\svc0000\tsk0000.dta
Group: Malware file
Last Updated: November 7, 2021
%TEMP%\0074b1b4.exe File name: 0074b1b4.exe
Size: 553.12 KB (553124 bytes)
MD5: dfb318a578131999f46d540c08e025dc
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: July 20, 2012

Additional Information

The following messages's were detected:
# Message
1Security Monitor: WARNING! Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk. To get rid of unwanted spyware and keep your computer safe you need to update your current security software. Click Yes to download official intrusion detection system (IDS software).
2Warning! Application cannot be executed. The file rdpclip.exe is infected. Please active your antivirus software.

Loading...