Win32sirefef.ez trojan cannot be deleted.

Hi Melboy,
Sorry for my silence. Everything seem to be ok but I still think my machine is a bit slow as compared to its speed previously even though the hard disk is free as compared to before.

Also, when performing boot scan with Avast, previously it runs before windows xp loads bt now it runs after Windows Xp Slogan appears and disappear.

Consequently, I stil don't feel comfortable with the options that appear when windows is loading. I mean, the option I mentioned in my last post. I think, I just want only Windows option showing and every other option removed.

Thanks..

Hi xrisem

We can remove the Recovery Console if that's what you want, but I'd ask you to consider leaving it.

Having it installed won't affect the normal running & functionality of Windows at all. Likewise it wont affect the running of Avast's boot scan. Nothing loads at start up unless you choose the option to enter the Recovery Console when you're presented with the option before Windows boots.

The Microsoft Windows Recovery Console is a special environment that enables you to carry out some tasks & repairs outside of normal Windows. It can be helpful in the event you have a problem, such as you not being able to boot into Windows - hence the reason it is installed by Combofix.

There's a description of what the Recovery Console is on the Microsoft Support site in this knowledgebase article: http://support.microsoft.com/kb/314058

The options you see at boot up are stored in the boot.ini file. Removal of the Recovery Console will require the editing of your boot.ini

--------------

Boot.ini Check

• Open Notepad.
• Copy and Paste everything from inside the Code Box below into Notepad (Do not include Code:)

@Echo off

xcopy C:\boot.ini "%userprofile%\desktop\" /h

attrib -s -h "%userprofile%\desktop\boot.ini"

ren "%userprofile%\desktop\boot.ini" bootini.txt

Del %0 

• Go to File >> Save As
• Save File name as Look.bat
• Change Save as Type to All Files and save the file to your Desktop.
• It should look like this:

Now double click on the desktop Look.bat to run the batch file. It will self-delete when completed and produce a notepad text file named bootini on your desktop.

Post the contents of that file in your next reply & let me know whether you would still like to remove the Recovery Console, or leave it installed.

a lack of response,