dyfica.ab trojan

[jonathan]

AVG found 2 trojans. At the end of the scan it refers to only having found 1
trojan, it also says that DYFICA.AB cannot be healed as it is an "embedded
object".

I ran Adaware as well and that found nothing.

The computer is used by my parents to send and receive web email. It is not
used at any other time on the internet except to update AVG and Adaware
files. My questions are:

1. What does this trojan do?
2. Can I just leave things as they are?

Thanks for any useful advice.

 

[David H. Lipman]

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the signature files (pattern files) by obtaining the ZIP file.
For example; lpt381.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode and shutdown as many applications as possible
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point


* * * Please report back your results * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html




| AVG found 2 trojans. At the end of the scan it refers to only having found 1
| trojan, it also says that DYFICA.AB cannot be healed as it is an "embedded
| object".
|
| I ran Adaware as well and that found nothing.
|
| The computer is used by my parents to send and receive web email. It is not
| used at any other time on the internet except to update AVG and Adaware
| files. My questions are:
|
| 1. What does this trojan do?
| 2. Can I just leave things as they are?
|
| Thanks for any useful advice.
|
|

 

[Sir_George]

jonathan,

The file "dyfica.ab" is an alias for "troj_holistyc.a" and the following
site will provide some useful information;

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_HOLISTYC.A

Under "Description" at the above site, scroll to the "Solution" entry and
read the information provided.

HTH

 

[jonathan]

Thanks, but my parents live a long way away and can just about see well
enough to follow my instructions over the phone on how to update AVG. Your
advice is not going to be appliable for several months, which is why I
wondered wether it's something that can be left alone. Do you have any idea
what this trojan does?

 

[jonathan]

Cheers, will check this out first thing in the morning.