Win32:Sirefef-HO [Rtk] and consrv.dll

Viruses and worms
1

Hi,
I was trying to change my advanced sharing settings and I found that none of my changes would stick. I did some troubleshooting and found that I had problems with the firewall settings. When I tried to change them I got error code 0x80070424. I googled the code and saw that it could be a problem with malware so I checked my avast and found the consrv.dll in my virus chest and the virus description Win32:Sirefef-HO [Rtk]. Now I don’t know if this is related but I had a problem with the Win 7 AnitVirus 2012 a couple of months back, um twice and got rid of it. From what I’ve been reading whatever I’ve got now is a little more tricky than the other so I figured I would start from scratch here. I’ve read that there are many associated issues with this malware but I don’t seem to have any as far as I can tell.

Please please if someone can lend me a hand I would be extremely grateful.

2

Oh also, I tried scanning the file in the virus chest and would get a McAfee trojan removed pop up. My McAfee expired ages ago so I assume this is part of the virus as well?

3

does that mean you have avast and McAfee installed ?

installing multiple AV can/will create all kind of mysterious windows errors and false positive detections

read reply from quietman7
http://www.bleepingcomputer.com/forums/topic186533.html

you need to uninstall one AV…and then run a removal tool to clear any leftover files that may conflict

run and reboot http://singularlabs.com/uninstallers/security-software/

4

follow this guide and attach (not copy and paste) logs from Malwarebytes / OTL / aswMBR
http://forum.avast.com/index.php?topic=53253.0

when done a malware removal specialist will be notified…may take seceral hours before he arrive

5

Um, yes kind of. McAfee came on the computer and refused to uninstall. I think I might have gotten rid of it. Also thanks for trying but we’ve decided to back up our important files to an external hard drive and do a reinstall, in all honesty it seems easier. However, is there anything you can recommend to avoid this in the future?