Remove spyware, rogue-antispyware, adware. Removal tools, tips and guides.

Remove Trojan:Win64/Sirefef.Y to get access to genuine Google’s search results

Trojan:Win64/Sirefef.Y is a detection name that refers to payload of the infection. In particular, the items detected under the above name are involved into search results replacement so that Google list generated in response to user’s request is blocked and, instead of that, a fake search results list is loaded, with all links of interest to hackers that control the trojan. Alternatively, the malware immediately loads the websites earning small revenue to the hackers. However, enormous number of victims provide eventually considerable revenue to the hackers.
In order to complicate the removal of Trojan:Win64/Sirefef.Y, Max++ rootkit is applied. It is detected as a part of Sirefef malware though.
Detection methods other than above may refer, first of all, to the rootkit protection associated with the malware, hence the threat can be detected under names consisting of such components as “Max++” , “ZeroAccess”.
Click here to prevent unwanted moderation of web-traffic by malicious trojan – get rid of Trojan:Win64/Sirefef.Y and other infections found by free scanner.

Trojan:Win64/Sirefef.Y behaviour and details:


  • Trojan:Win64/Sirefef.Y may seriously slow your computer;
  • Trojan:Win64/Sirefef.Y may be difficult to remove manually;
  • Trojan:Win64/Sirefef.Y may generate other fake alerts;
  • Trojan:Win64/Sirefef.Y is the consequence of other malware infections;
  • We recommend to remove Trojan:Win64/Sirefef.Y automatically.

 Automated removal:

It is critically important to remove Trojan:Win64/Sirefef.Y, yet there might be a number of other threats to deal with. Without a doubt, presence of one infection on your PC increases the odds of having more than one threat, other things being equal, for every infection definitely weakens computer system.

The tool to get rid of Trojan:Win64/Sirefef.Y takes the above consideration into account as it detects the infections through entire hard and removable memory submitted in order that it can delete the specified parasites. It is a multi-purpose solution to satisfy the variety of your computer protection needs. In the meantime, its ability to perform the extermination of rogue in question has been tested specifically, and empirical evidence available that it does cope with the task.

Trojan:Win64/Sirefef.Y Uninstaller

Trojan:Win64/Sirefef.Y manual removal instructions:

Incorrect or incomplete deletion happens when one or more constituents of deleted rogue are omitted and/or harmless files and registry values are abolished instead. Such improper act rather harms than cures. If you stand for the manual procedure and is about to apply it, please completely delete the rogue in a strict accordance with the list below.

Remove Trojan:Win64/Sirefef.Y files:

%System%\drivers\[RANDOM CHARACTERS].sys


C:\WINDOWS\system32\[random name].dll

Remove Trojan:Win64/Sirefef.Y registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘Yes’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer “NoDesktop” = ’1?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1?

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = ’0?

Related removal guides:

  1. How to remove Sirefef.AH and Sirefef.AC infections
  2. Remove Trojan.Sirefef.BV virus
  3. Get rid of Trojan:Win32/Sirefef.P as is or as a part of larger infection
  4. Removal of Win32/Sirefef.AG terminates unwanted loading of various pages
  5. Get rid of Easy A-Z search and 7search redirects to freely load Google search result items and more


Comments are currently closed.