What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Conteneur Activex FBI warning [Solved]

14 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Hello Greg,

Bet your wanting to get me out of your hair :) We have a saying around these removal forums that the absence of symptoms does not guarantee a clean system, what aswMBR found may be a false positive but lets check it.




You need to enable windows to show all files and folders, instructions Here

Go to VirusTotal and submit these files for analysis, just use the BROWSE feature and then Send File , if it says this file has been checked before, have them recheck it. When the scan is done just copy and paste the link back to this forum for me to see.

C:\Users\Greg\AppData\Local\Logitech\nefjtsst.dll <–This file


If the site is busy you can try this one
http://virusscan.jotti.org/en
Post #17
Ha! No, Ken… not tired of hearing from you at all. Quite the opposite actually. Without your help I'd still be looking at that annoying FBI screen and my machine would be unusable. I absolutely appreciate how thorough you've been. :)

If I did this correctly, here's the URL for the file I checked:

https://www.virustotal.com/en/file/d66a0513…sis/1370121708/

And here's the summary, too, just in case:


SHA256: d66a0513f74e177082d0f4830cfb6ee15c76c82eeb639a5b553096da1177593c
SHA1: 711dd797b185e70a0b2de7bc88f08a496b32ecd6
MD5: b80e610e2c0ab720ae3c8b2fd94ad74b
File size: 678.0 KB ( 694272 bytes )
File name: nefjtsst.dll
File type: Win32 DLL
Detection ratio: 17 / 47
Analysis date: 2013-06-01 21:21:48 UTC ( 0 minutes ago )
Post #18
Lets get rid of that file, its showing that its most likely infected

Thanks for sticking with me though this whole process. I have been at this for almost 12 years and malware is funny, you never know what its going to install next.


Open OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :OTL
:Services

:Reg

:Files
C:\Users\Greg\AppData\Local\Logitech\nefjtsst.dll


:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]
  • Then click the Run Fix button at the top. <–Not run Scan
  • Let the program run unhindered, reboot when it is done
  • Then post the results of the log it produces
Post #19
Updated OTL Log: All processes killed ========== OTL ========== ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== C:\Users\Greg\AppData\Local\Logitech\nefjtsst.dll moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Greg ->Temp folder emptied: 86930372 bytes ->Temporary Internet Files folder emptied: 198877049 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 45371604 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 1275 bytes User: Public ->Temp folder emptied: 0 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: UpdatusUser.Greg-PC2 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 316.00 mb OTL by OldTimer - Version 3.2.69.0 log created on 06012013_164721 Files\Folders moved on Reboot… C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. PendingFileRenameOperations files… Registry entries deleted on Reboot…
Post #20
Great, lets do this. I will keep this thread open for you for a few days, use Firefox and lets see if there are any redirects, if there are please let me know so we can fix it
Post #23

Hows it going, everything ok ??


Hi, Ken.

Sorry for the delayed response - I didn't get the email notification that there had been another reply on this thread. Yes, everything is still working okay - no issues with redirects in IE or FF and no other odd performance issues. I think we're good!

Thanks again for all of your help with this one!

~ Greg ~
Post #24
Thats great Greg, glad all is well. :thumbup:




We need to update your Java to keep you more secure
  • Go to your Control Panel and click on the Java Icon ( looks like a little coffee cup ) click on About and you should have Version 7 Update 21, if not proceed with the instructions.
  • Go to the update Tab and update it
  • Important, during the upgrade UNCHECK ASK TOOL BAR. ( you do not need or want this )
  • Then go to your Add Remove Programs (WIN XP) or Programs and Features (Vista / Win 7) in the Control Panel and uninstall all previous versions.

You can verify the installation Here









Open OTL and click on Clean Up and it will remove programs we used to clean your system along with there backups, any programs that where not removed you can just drag to the trash.


Malwarebytes is the free version and yours to keep and will not be removed


  • How did I get infected in the first place ?
    Read these links and find out how to prevent getting infected again.
  • Tutorial for System Restore <– Do this first to prevent yourself from being reinfected.
  • WhattheTech
  • Grinler BleepingComputer
  • GeeksTo Go
  • Dslreports


Safe Surfn
Ken
Post #25
I confirmed Flash is current (Version 7 Update 21). Uninstalled ComboFix and then ran cleanup in OTL. Thanks, Ken! ~ Greg ~
Post #27

I think you where referring to Java, not flash


Ugh. Yes. Sometimes typing the correct word is too hard. :)

Thanks again!

~ Greg ~
Post #28
Hey Greg, lets hope you dont need us in the future, I am going to close this thread so if you have issues in the future just START A NEW TOPIC . My pleasure helping you. Take care, Ken :)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI