How to fix ZeroAccess(Sirefef.R, Sirefef.B) with infected system file

Zero Access rootkit may be able to subvert the software that is intended to find it. Zero Access rootkit conceals other malware. Zero Access rootkit allows the attacker to mask intrusion and gain root or privileged access to the computer.

Zero Access rootkit works with Windows 32-bit and 64-bit.

Check your computer for Zero Access Rootkit problem

Removal of ZeroAccess(Sirefef.R, Sirefef.B) - infected services.exe.

Windows Vista/Seven 32 and 64-bit

June 29 2012

Requirements: UnHackMe Warrior

ZeroAccess Removal - Windows XP SP3 32-bit

Distinctive feature of this variant is infected system file:

You can check if your computer is infected using Task Manager.

Open "UnHackMe" - Rootkit Killer

Version 5.99.399 (June 28 2012)

Use Warrior boot CD or Warrior bootable USB stick for fixing rootkit problem:

Get UnHackMee Warrior here

  • BIOS was set up to boot from Warrior CD.
  • Starting Warrior CD...
  • Services.exe has been recovered.

    In addition the rootkit files were deleted:
    C:\WINDOWS\Installer\{b191330c-415d-5883-57c7-9de300728739}\ (hidden folder)

    {b191330c-415d-5883-57c7-9de300728739} is unique on each computer.

    N, 00000004.@,00000008.@,80000032.@, 80000000.@,000000cb.@,800000cb.@,00000001.@


    1. Simple. No need to have special computer skills for rootkit removal.
    2. Quick. Rootkit removal in one reboot.

    System requirements

    Windows 9x, 2000/2003/XP/2008/Vista/Seven or higher 32 or 64 bit.
    512 Mb RAM
    CD/DVD drive or USB stick.

    Purchase now!

    Purchase includes:

      UnHackMe Single License - Electronic Delivery

      Warrior CD Image - Electronic Delivery

    More information


    Please visit our support center: Ask your question

    People say:


    This solution works great. Thanks!


    Works as advertised. Keep up your good work guys!