Posted: July 4, 2012

Win32/Sirefef.FB.Gen Description

Win32/Sirefef.FB.Gen is a component of a Sirefef Trojan or ZeroAccess Rootkit infection that's often found infecting services.exe – a native component of Windows. Because Win32/Sirefef.FB.Gen was only added to the databases of many PC security companies late in June of 2012, your anti-malware applications may be unable to find Win32/Sirefef.FB.Gen if they haven't been updated. Like all members of this family, Win32/Sirefef.FB.Gen should be considered a high-level threat to your computer, since Win32/Sirefef.FB.Gen can be found in browser hijacks, sabotaged security software, the installation of other PC threats or usage of your computer's resources to commit fraud and other crimes.

When the Game's Crack Decides to Crack Your PC

Because Win32/Sirefef.FB.Gen is just one piece of a multiple component infection for a variant of Sirefef, Win32/Sirefef.FB.Gen is almost never found alone and doesn't have any known means of distributing itself or infecting other computers. Under normal circumstances, Win32/Sirefef.FB.Gen infections are accompanied by other Sirefef components and installed by an associated Trojan dropper. Trojan droppers for Win32/Sirefef.FB.Gen and closely-related PC threats are often distributed as fake key generators, game cracks and other forms of software piracy-promoting applications.

After the installing Trojan has completed its payload, other components, including Win32/Sirefef.FB.Gen, may be injected into normal system processes or installed as compromised files that replace the original ones (which may be deleted, in some cases necessitating a reinstall of Windows). Win32/Sirefef.FB.Gen, in particular, has been seen infecting Windows\System32\services.exe, AKA the Services and Controller application that starts and terminates services. Accordingly, malware researchers note that Win32/Sirefef.FB.Gen has a high chance of being involved in the arbitrary termination of other programs and Windows features (especially security-oriented ones).

Win32/Sirefef.FB.Gen's Small Piece of the Whole Sirefef Puzzle

Win32/Sirefef.FB.Gen may block you from using anti-malware programs that could remove both Win32/Sirefef.FB.Gen and related PC threats, but manual deletion for high-level threats like a ZeroAccess rootkit is never recommended. Instead, you should attempt to block Win32/Sirefef.FB.Gen and other components of the Sirefef infection by booting your PC from a removable media-based device. From an uninfected OS, you can scan your PC and delete Win32/Sirefef.FB.Gen safely with appropriate software.

PC threats that malware researchers have also seen associated with Win32/Sirefef.FB.Gen infections include (but aren't restricted to):

  • HTML/ScrInject.B.Gen – a heuristic detection for a malicious script that's injected into a web page (to steal personal information, display extra advertisements, etc.).
  • Win32/InstallCore.D
  • The Babylon Toolbar, an adware program that promotes itself as a translation utility. However, malware researchers note that recent versions of the Babylon Toolbar have been updated to remove many potentially malicious functions.
  • Win32/Agent.TEO Trojan

Adjoining this are other components of a Sirefef infection, such as Trojan:Win32/Sirefef.AC, Trojan:Win32/Sirefef.AB, Trojan:Win32/Sirefef.S and Virus:Win32/Sirefef.D.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Win32/Sirefef.FB.Gen may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Home Malware Programs Rootkits Win32/Sirefef.FB.Gen

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.