This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Confirm removal of Win32:Sirefef-PL

10 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Why can´t you exactly log in? Do you get a connection error/page not found, does nothing happen when clicking on login, whats the reason?
It just never connects. Doesn't exactly lock up, cause I can go to other sites, just not this one. In addition there is now an .exe file present on the desktop that wasn't there before: SecurityCheck.exe that says it was created about an hour ago.
The security check was downloaded by yourself as requested from me. Clean your Internet Explorer cache, restart your computer and try again to log in.
I cleared the cache: unchecked Preserve Favorites website data, checked temp internet files and cookies, hit delete, then restarted computer. Still unable to connect to your website from that computer.
I can visit some news sites (Blues News, Huffington Post), but the "Back" button or the "Home" button don't take me back to my home page (Google). A click on "Install Chrome" from the Google home page hangs.
Scan with adwCleaner


Please download AdwCleaner to your desktop.


  • Run adwcleaner.exe.
  • Hit delete.
  • When the run is finished, it will open up a text file.
  • Please post its contents within your next reply.
  • You´ll find the log file at C:\AdwCleaner[S1].txt also.
# AdwCleaner v2.303 - Logfile created 06/11/2013 at 12:00:27 # Updated 08/06/2013 by Xplode # Operating system : Windows 7 Professional Service Pack 1 (64 bits) # User : Front Desk - FRONTDESK # Boot Mode : Normal # Running from : C:\Users\Front Desk\Desktop\adwcleaner.exe # Option [Delete] ***** [Services] ***** ***** [Files / Folders] ***** ***** [Registry] ***** Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof ***** [Internet Browsers] ***** -\\ Internet Explorer v10.0.9200.16576 [OK] Registry is clean. ************************* AdwCleaner[S1].txt - [626 octets] - [11/06/2013 12:00:27] ########## EOF - C:\AdwCleaner[S1].txt - [685 octets] ##########
Weird thing…

let´s check the services…
But first run this fixit! from Microsoft:


http://go.microsoft.com/?linkid=9726336&am…ypointid=MATSKB


Then scan with FSS:


Please download Farbar Service Scanner and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center
    • Windows Update
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.
The fixit thing didn't change the internet explorer issues. The only thing it found and suggested was a reset to default of the security settings. Farbar Service Scanner Version: 31-05-2013 01 Ran by [removed] (administrator) on 11-06-2013 at 12:22:28 Running from "C:\Users\Front Desk\Desktop" Windows 7 Professional Service Pack 1 (X64) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo IP is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Other Services: ============== File Check: ======== C:\Windows\System32\nsisvc.dll => MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit C:\Windows\System32\dhcpcore.dll => MD5 is legit C:\Windows\System32\drivers\afd.sys => MD5 is legit C:\Windows\System32\drivers\tdx.sys => MD5 is legit C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit C:\Windows\System32\dnsrslvr.dll => MD5 is legit C:\Windows\System32\mpssvc.dll => MD5 is legit C:\Windows\System32\bfe.dll => MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit C:\Windows\System32\SDRSVC.dll => MD5 is legit C:\Windows\System32\vssvc.exe => MD5 is legit C:\Windows\System32\wscsvc.dll => MD5 is legit C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit C:\Windows\System32\wuaueng.dll => MD5 is legit C:\Windows\System32\qmgr.dll => MD5 is legit C:\Windows\System32\es.dll => MD5 is legit C:\Windows\System32\cryptsvc.dll => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit **** End of log ****
Try it with that one.

http://go.microsoft.com/?linkid=9646978

If this didn´t help:


Download and run OTL

  • Download OTL by OldTimer and save it to your desktop.
  • Double click on the OTL.exe icon on your desktop. If you are using Vista, please right-click and select run as administrator
  • Click the "Scan All Users" checkbox.


    Note: If you are using a Windows 64bit machine, please make sure the checkbox next to Include 64Bit Scans is checked. It will be checked by default.

  • Push the [external image: Posted Image] button.
  • It will now begin to scan, please be paitent while it scans.
  • Two reports will open once it's done.
  • Please copy and paste them in your next reply:
  • OTL.txt <– Will be opened
  • Extras.txt <– Will be minimized

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI