Recommended Posts

I've never heard of Malwarebytes NOT removing something in the FREE version. I haven't used in several months, though, so I can't say for sure.

Here are some free bootable AV CDs:

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

You also might try http://en.kioskea.net/faq/13346-windows-delete-the-files-in-c-recycle-bin

Link to comment
https://www.neowin.net/forum/topic/1128510-virus-alert/#findComment-595424954
Share on other sites

I also checked with Maleware Bytes scan....got 3 objects detected .....but FREE version does not have removal facility .

False, your virus looks like it is in a protected system folder which the AV software does not have permissions to. Not really sure why you assume that the free version doesn't remove infections, because it does. You need to look into taking ownership of the Recycle Bin folder

Link to comment
https://www.neowin.net/forum/topic/1128510-virus-alert/#findComment-595424958
Share on other sites

where is the remove feature here ? This is the scan result of Maleware Bytes.

How do I remove detected objects ?

bytes_zps3d57270c.png

>>>>Yeah Id say that, Empty Recycle Bin.

Recycle Bin is already empty !....restarted machine ...no improvmenet.

Probably in Show Results.

Link to comment
https://www.neowin.net/forum/topic/1128510-virus-alert/#findComment-595425068
Share on other sites

I still wish Malwarebytes would take the superantispyware approch and show us what it finds as it finds it. Nothing is more annoying than when you do a scan on someones machine and it finds 1 infection in memory but you don't get to know what that infection is until 1 hour after the scan is complete. Only to find out it's mywebsearch.

Link to comment
https://www.neowin.net/forum/topic/1128510-virus-alert/#findComment-595425088
Share on other sites

I still wish Malwarebytes would take the superantispyware approch and show us what it finds as it finds it. Nothing is more annoying than when you do a scan on someones machine and it finds 1 infection in memory but you don't get to know what that infection is until 1 hour after the scan is complete. Only the find out it's mywebsearch.

Yep, I hate that too, makes me want to hit stop to see what it was, but then I cba to wait for another scan in-case it finds something at the end

Link to comment
https://www.neowin.net/forum/topic/1128510-virus-alert/#findComment-595425118
Share on other sites

Ok from what I read it is a new Trojan (Some people just have too much time on their hands) discovered in mid December, which is why malwarebyes can't remove it because it does not know how

Sirefef, or ZeroAccess, is a Trojan that infects machines by exploiting a browser, through a third-party plugin, via an email attachment/link or it?s downloaded by other malicious software (malware). Once on the machine, it creates an environment where new threats can be installed without detection by most security software and then downloads these threats. Because it prevents antivirus software attempting to remove it, Sirefef is very difficult to remove, often requiring a complete system reinstall.

http://land.viprebusiness.com/sirefef/?adv=2005&loc=1067&gclid=CPnhwZqYxbQCFQSg4Aod4iIAWQ

this may help

http://blog.teesupport.com/how-to-remove-trsirefef-bp-1-malware-manual-removal-of-trsirefef-bp-1-virus/

but if the system is compromised already i would reload from a clean backup but that's just my humble opinion because I have found many a time a lot of these 'removal tips or tools' are more trouble than they are worth...good luck

Link to comment
https://www.neowin.net/forum/topic/1128510-virus-alert/#findComment-595425162
Share on other sites

Iv`e just cleaned a lappie with this on using boot cd`s. Look like you were actually pretty lucky as it normally locks you out of the computer (ransomware). You have been caught blah blah blah, send some money via wire transfer and you can your computer back sort of thing :pinch:

Start sandboxing your browser...

Link to comment
https://www.neowin.net/forum/topic/1128510-virus-alert/#findComment-595426316
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Server Summit had a heap of announcements, ADCS changes are baller.
    • Nice, hope they *finally* fixed the issue with the NTFS driver where the system would completely brick during large file copies using the built in driver. It's been broken for years requiring me to use the older, slower, NTFS-3G FUSE driver.
    • Windows 11 KB5094126 BSODing, freezing, forcing BitLocker lockout, breaks OneDrive, and more by Sayan Sen Microsoft released Windows 11 KB5094126 and KB5093998 last week as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. While Microsoft has so far not acknowledged any major problems with the release, some users online are running into problems. These range from OneDrive and Dropbox access issues, BitLocker recovery lockouts, to blue screens and BSODs. The most common one seems to be happening with HP systems wherein affected users say they hit 0xc0430001 BSOD (blue screen of death) error code after the KB5094126 update. We wonder if this could be related to the recent bug we covered on HP devices wherein the ongoing Secure Boot certificate updates are leading to similar issues. While we are not certain, users affected by this issue likely need to ensure that the boot.stl file is included on the installation media (such as a USB installer or ISO), if the above-mentioned dynamic updates are deployed. If this file is missing, computers may fail to boot from the installation media and could display the error 0xc0430001. This STL file is used by Secure Boot to verify that the boot files are trusted, so it must match the same Windows version and system architecture. To ensure the file is included, Microsoft recommends using the Update WinPE script, which automatically updates the image and handles the required files. Alternatively, you can manually copy the boot.stl file from the Windows\Boot\EFI folder on a Windows device and place it in the matching folder on your installation media before deploying the updated image. Aside from blue screening some users also note their systems have been freezing following the update. This could be happening to Lenovo PCs specifically. In the case of the OneDrive and Dropbox access issues, a user figured out that there could be a conflict with UAC. He explained: "Okay, so I did some digging, and in our environment KB5094126 breaks OneDrive and Dropbox in Explorer. I went through all our GPOs and found out that the combination of disabling UAC and having my user being a local admin breaks OneDrive in Explorer. ... If I enable UAC again, then it works, even with KB5094126 still installed." Hopefully, Microsoft will look into these issues. Source: Microsoft forum (link1, link2, link3, link4), Reddit (link1, link2, link3, link4)
    • It is when it's a desktop in my house though for a PC that's lightly used and not really important when it is. If it was a laptop, it would be a different story. The real solution is varied and begins starting at post #22 in that thread.
  • Recent Achievements

    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      508
    2. 2
      +Edouard
      198
    3. 3
      PsYcHoKiLLa
      138
    4. 4
      ATLien_0
      90
    5. 5
      Steven P.
      81
  • Tell a friend

    Love Neowin? Tell a friend!