Trojan:Win64/Sirefef.C

By Domesticus in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	69

First Seen:	December 6, 2011
Last Seen:	June 6, 2022
OS(es) Affected:	Windows

Trojan:Win64/Sirefef.C is a Trojan-dropper which is installed by another Trojan-dropper named Trojan:Win64/Sirefef.J. The main purpose of Trojan:Win64/Sirefef.C is to enter the kernel mode, which would corrupt the PC system and enable cybercriminals to gain access and control over the infected computer system. Trojan:Win64/Sirefef.C can also download and install other malware infections. Trojan:Win64/Sirefef.C may also attempt to bypass detection and removal by anti-malware tools. Trojan:Win64/Sirefef.C is able to delete system files and disable relevant computer tasks so that it can execute malicious activities. Trojan:Win64/Sirefef.C may create and display numerous annoying pop-up ads which are mainly related to adult or other objectionable websites. Uninstall Trojan:Win64/Sirefef.C immediately after detection.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	Downloader.Generic12.SJF
eTrust-Vet	Win32/ZAccess.X
BitDefender	Trojan.Generic.6807105
Avast	Win32:Sirefef-AV [Drp]
Symantec	WS.Reputation.1
NOD32	Win64/Sirefef.C
Panda	Generic Trojan
Fortinet	W64/Sirefef.I
AhnLab-V3	Trojan/Win64.Zeroaccess
Antiy-AVL	Trojan/win32.agent.gen
Kaspersky	HEUR:Backdoor.Win64.Generic
eSafe	Win32.TRDownloader
Avast	Win32:Sirefef-JQ [Trj]
NOD32	Win64/Sirefef.I
McAfee	Generic.dx!bc3n

SpyHunter Detects & Remove Trojan:Win64/Sirefef.C

File System Details

Trojan:Win64/Sirefef.C may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	X.vir	686b479b0ee164cf1744a8be359ebb7d	17
Name: X.vir MD5: 686b479b0ee164cf1744a8be359ebb7d Size: 42.49 KB (42496 bytes) Detections: 17 Path: C:\Qoobox\Quarantine\C\Users\<username>\AppData\Local\2aecbf38\X.vir Group: Malware file Last Updated: May 20, 2021
2.	netbt.sys	1354f9630a38c5fc2a72370d8a304d81	11
Name: netbt.sys MD5: 1354f9630a38c5fc2a72370d8a304d81 Size: 185.85 KB (185856 bytes) Detections: 11 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 7, 2011
3.	X	637afbfb8b64d99ea55e5896e7d0f5d4	7
Name: X MD5: 637afbfb8b64d99ea55e5896e7d0f5d4 Size: 39.93 KB (39936 bytes) Detections: 7 Path: %LOCALAPPDATA%\84c72de9 Group: Malware file Last Updated: December 6, 2011
4.	smb.sys	58a8e2f69395757cb83015e9cdd63935	5
Name: smb.sys MD5: 58a8e2f69395757cb83015e9cdd63935 Size: 66.56 KB (66560 bytes) Detections: 5 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 8, 2011
5.	netbt.sys	780ad60738607d383fbebe006f82d1cd	5
Name: netbt.sys MD5: 780ad60738607d383fbebe006f82d1cd Size: 185.85 KB (185856 bytes) Detections: 5 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 12, 2011
6.	netbt.sys	639555df61917d90d6d9562d7ee55182	4
Name: netbt.sys MD5: 639555df61917d90d6d9562d7ee55182 Size: 187.9 KB (187904 bytes) Detections: 4 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 12, 2011
7.	dfsc.sys	1aff6ec8ec2538bf22fc12b7d6a5013e	4
Name: dfsc.sys MD5: 1aff6ec8ec2538bf22fc12b7d6a5013e Size: 75.26 KB (75264 bytes) Detections: 4 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 12, 2011
8.	cdrom.sys	80c3460c8df995980488fe3bcb62afaa	3
Name: cdrom.sys MD5: 80c3460c8df995980488fe3bcb62afaa Size: 67.07 KB (67072 bytes) Detections: 3 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 8, 2011
9.	X	be40a2578e862f1cecc9b9194f524201	3
Name: X MD5: be40a2578e862f1cecc9b9194f524201 Size: 42.49 KB (42496 bytes) Detections: 3 Path: C:\Users\<username>\AppData\Local\f60161b6\X Group: Malware file Last Updated: June 6, 2022
10.	ydze.exe	33a0ce99c5b02058fe6a3eff83c8627e	2
Name: ydze.exe MD5: 33a0ce99c5b02058fe6a3eff83c8627e Size: 135.68 KB (135680 bytes) Detections: 2 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: December 12, 2011
11.	redbook.sys	6dbd81d5b12b7f5b5923e85097fda1f0	2
Name: redbook.sys MD5: 6dbd81d5b12b7f5b5923e85097fda1f0 Size: 57.47 KB (57472 bytes) Detections: 2 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 7, 2011
12.	332120sys.dll	029cba18bd7b95e70c6fe7c30d4f0a22	1
Name: 332120sys.dll MD5: 029cba18bd7b95e70c6fe7c30d4f0a22 Size: 116.24 KB (116248 bytes) Detections: 1 Type: Dynamic link library Path: %WINDIR%\system32\config\systemprofile\Local Settings\Temp Group: Malware file Last Updated: December 8, 2011
13.	i8042prt.sys	921581c833f0bf071a6cfe8b3f7d0a13	1
Name: i8042prt.sys MD5: 921581c833f0bf071a6cfe8b3f7d0a13 Size: 54.78 KB (54784 bytes) Detections: 1 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 12, 2011
14.	igfxtrey.exe	ede045096826961e99e16947f886ddce	1
Name: igfxtrey.exe MD5: ede045096826961e99e16947f886ddce Size: 23.04 KB (23040 bytes) Detections: 1 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: December 7, 2011
15.	X	19c4b4657a8b9ce41711b21769bfa3fa	1
Name: X MD5: 19c4b4657a8b9ce41711b21769bfa3fa Size: 41.98 KB (41984 bytes) Detections: 1 Path: %LOCALAPPDATA%\ba51f720 Group: Malware file Last Updated: March 21, 2013
16.	%Temp%\[RANDOM CHARACTERS].exe
Name: %Temp%\[RANDOM CHARACTERS].exe Type: Executable File Group: Malware file

Registry Details

Trojan:Win64/Sirefef.C may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"Windows" = "%Temp%\[ RANDOM CHARACTERS].exe"

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan:Win64/Sirefef.C

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Trojan:Win64/Sirefef.C

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen