hi guys, i'm facing a problem with a virus that my antivirus can't rid of, it's called "win64/sirefef.B" and my antivirus "Microsoft security essential" shows that it's in a file named "consrv.dll" in system32 on "c" drive.
when i remove it or quarantine it and restart my computer windows won't start so i would be obligated to restore my PC to an earlier point before removing the virus PS: I've searched the internet for a solution and nothing worked not a software nor a manual removal.
so if any one has an idea about how to remove it i would appreciate it.
I'd try downloading and installing Avira free antivirus. In the options (or during install, I forgot) there is an option to load the antivirus in a safer way, I presume before anything else and as soon as the system starts, select that too it might help in your case.

PS: Sorry I see your problem is not only getting rid of the virus but more like keeping the computer working after that :)
If someone has the same version of windows maybe they can send you this problematic file and you can replace it manually. You can check the DLL version by right-clicking on it. Windows has some protection system for DLLs so you might also have to disable that before replacing the DLL.
You could also try a system restore from the Windows CD/DVD if your computer is not booting. But I'm less confident about this option, because by now your system would probably be in a quite different state then when it was newly installed, due to all the updates that were applied... so I'd keep that as last resort.
I've searched the .dll file too it's not a system file but it usually holds on a trojan to it, so i know that it is the virus file but every time i remove it it cause that the system won't start.
so your system can't boot up without this file ? so get a virus free version of this file try downloading this http://www.dlldll.com/conserv.dll_download.html and replace it with the file that contains the virus,am not sure if this will work since i don't know if a virus on your computer is infecting this file or the file itself got a trojan.
Download Hiren's BootCD 15.1 and boot it to your system, use the virus/malware/spyware scanners to get rid of the virus and then reboot to windows, if Windows is not booting consider doing a repair install using your Windows CD
the problem is that i don't have the windows CD my version of windows came with the laptop when i bought it. and due to download limits i can't download anything before 12 and I've already tried a lot of removal tools and none of them worked , and m.sabra the file it self is a virus, Microsoft security essential says that it's win64/sierfef.b and Avira free antivirus says that it is TR/ATRAPS.Gen2 .
go to any store and get one. Couple months ago I found a windows xp at a very cheap price.
What a pain in the ass.

You didn't say what version of Windows you had--if you are using Vista or Win 7, try booting up using the CD and try the "repair" option (just buy the CD/DVD at a store--LL5K or less). I have had problems (not virus related, thank God), and I have been able to resolve them by using that option. If you have to re-install windows, you should have most of the information on your hard drive. You may have to redo some shortcuts, but most of your data should be safe.

Good luck
thanks for the help i'll buy the cd and try that option , but the cd have a cracked version of windows or a copy and mine is genuine wouldn't it cause conflect between those two versions?
6 days later
Malwarebytes
its all you need

edit: have you done a recovery disc of your windows?
I've used Hiren's 15.1 which is a combination of all cleaning recovery tool it has Malwarebytes and I've used it along with 10 other like it and all of them removed the virus but the problem is that after removing it windows will have trouble loading .And yes I've made a recovery disk and i've already tried it neither the repair nor the recovery part worked .(PS: i think the virus got into my registry and messed it up)
then do a registry clean after that remove your hdd and connect your hdd to another pc (as a secondary drive don't boot from it) clean the virus and replace the file from a clean one (you can get the file on the internet if not get it from a random win7 pc,which edition does not matter only the 32x 64x matters)
Man buy a copied version of windows for 5000 LL , all versions are available in stores.. remove the virus and then perform a chkdsk /r from windows cd and that's it.
I've removed the virus and I've performed a chkdsk (with the windows CD and without my hp laptop has its own recovery settings) and none of that worked, I've sent my laptop to an expert and if he failed to recover my computer he'll just backup all my files on an external hard drive and then re install windows, but thanks for your advises any way, I appreciate it.
mate, you're gonna pay for something you could have done it yourself
Hehe, i'm not gonna pay it's a relative of mine who's the expert but thanks for the concern