OneNote related malware plants Sirefef.N trojan whenever OneNote used

Have some sort of a rootkit which is triggered every time I use OneNote 2007.  Various malware/virus/rootkit scanners have not been able to find the malware which triggers only when OneNote is used.  Using OneNote predictably causes the malware/rootkit to repeatedly plant a Sirefef.N trojan which is recognized by the real-time security software (MSE), removed and then reappears.  Tried uninstalling and reinstalling OneNote to no avail.  Given this known cause/effect relationship between OneNote and the malware, how can one manually track the malware down which keeps eluding full scans by various anti-malware software?


Posting this in the Office2007/OneNote/WinXP forum as well as the Microsoft Security Essentials forum.



Question Info

Last updated September 4, 2019 Views 418 Applies to:

To avoid confusion & duplication of effort, please post any/all further follow-up in replies to your still-ongoing thread in the Microsoft Security Essentials forum =>


~Robear Dyer (PA Bear)
Microsoft MVP (Windows Client) since October 2002

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.