How do you reboot in safe mode when you have Downloader Dyfica AJ?

Answer 1

To boot in safe mode, restart your computer, as soon as it starts to power back on, start pressing the F8 key and don't stop until you get to a screen that will list a set of choices. Choose safe mode and then continue with the removal process.

Made some progress of sortsagainst the Dyfica.AJ.Dyfica.AJ is sophisticated, is in many places, and transmits secure info and online ordering secure info if you place an online order without knowing it is on your computer.

Only AVG antivirus actually saw, even detected Dyfica.AJ, even though it could not remove it by healing. I first had to disable System Restore (in Control Panel)then had to delete all old System Restore backup files (a separate set of steps)

Dyfica.AJ wouldn't let me reboot into Safe mode using F8. It crashed my computer every time I tried to even so much as click on it inside of %temp% (from an open IE window)

IMPORTANT: before the delete in safe mode I had to do an uninstall of a program it had installed called Bridge from inside of Control Panel > Add Remove Programs this was another part of the optimizer.exe program which is all part of Dyfica.AJthe Bridge program must be removed in order to free up the files inside the temp files that need to be deleted.

Finally I found another way into safe mode. Getting into safe mode: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406using Start > Run > msconfig > System Config Utility .>

Use Safe Mode checked then and only then while in safe mode could I delete this file called optimizer.exe. This was the file name containing the Trojan bridge called Dyfica.AJ.

Dyfica.AJ has an active mode, as the file optimize.exeit also has a hidden DORMANT or HYBERNATION MODE, as in:also deleted other places Dyfica was hiding, was in GIF images and file namescommon path was: C:\Documents and Settings\(my user name)\Local Settings\Temporary internet Files\Content.E5\

Further infected files and folders (inside Content.IE5) were:P2H15Y85\SE751D~1.HTMP2H15Y85\CIRCUI~1.GIF57QH190L\CLEAR^~1.GIF57QH190L\BLUE T~1.GIF57QH190L\B01596~1.JPE57QH190L\BD0C 1~1.GIF8P2NW9AJ\SHOP M~.GIF8P2NW9AJ\S L 1 ~1.GIF8P2NW9AJ\SE7B1A~1.HTM8P2NW9AJ\ICON B~1.GIF

AVG included these files in the log of files which it could not open or examine.

AVG indicated there was infection within the Temporary Internet Files folder. These were the file names there which it could not open while in safe mode, open IE, then enter directory one at a time then enter for eachtill you get to these files, delete them, then empty recyle bin and protected filesthen after removed the optimizer.exe in safe mode, went back and scanned again with AVG, and also scanned with Adware using custom configuration for deep scan.

I also had Dyfica.AJ identified by AVG 6. It quarantined it to virus vault. From there I merely deleted. I have done scans since which show nothing.

I also deleted it, but it keeps coming back....what's more, it varies its timing between appearances (or should I say detection). For example, after the first 'erasure," I did twelve AVG scans that all showed clear, then, the virus was re-detected. This pattern of detection, deletion, re-detection has continued for several weeks now.

I know it's still in there and don't know how to get rid of it, so it seems that I'm just a sitting duck, waiting for the other shoe to fall.

I have only been able to get around this program with a system restore using the system restore disk, Period. I have dealt with optimizer.exe, ist.exe, sidefind, dyfica, blah blah. System restore is the only way that we have found. We have tried every major for-pay and free program. None have sucessfully removed the programs on an ongoing basis. They reappear based on dormancy protocols b uilt into the program. You can thank Avenue Media N.V. for the problem. They suck and so do these self-installing programs. There is no such thing as free software. You will pay.Ted in Vero Beach, FL