Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

emiebrowsermodelist, emiesitelist, emieuserlist


  • Please log in to reply
11 replies to this topic

#1 love2sing

love2sing

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 23 April 2015 - 12:00 AM

I have had some issues with my computer and have run several anti-malware tools such as malwarebytes to no avail on finding anything.  However, my computer will have high CPU usage, very slow, and acts as though something is just not right. Tonight, I found in the appdata/local folder these three folders and I have no idea what they are or if they are safe or not.  I have Googled them trying to find info and it looks like they could be malware of some type that replicates itself. 

 

Can you help me?  I am probably intermediate on being able to find thing and fix things on the computer, not a newbie, but definitely not an expert at the inner workings of reading printouts of processes, etc. Can someone help me with this?  It is most appreciated if so.  - Lorna



BC AdBot (Login to Remove)

 


m

#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:04 PM

Posted 23 April 2015 - 05:04 AM

Hello Lorna -

 

If you scroll down to >> Most Helpful Reply << in this Microsoft reply, it may help you understand the wording (initials) of EMIE better.

They seem to relate to your Internet Explorer browser ...
 

Please add extras if you still have problems ..

Many cheap sites just call them infections regardless of what they are.

 

We will still check the areas for infections if you wish, by just running these few programs. Please download programs to Desktop and Copy and Paste the logs back here.

 

Download Screen317 Security Check from Here or Here and save it to your Desktop.

  • Double-click SecurityCheck.exe
  • Follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt
  • Please Copy/Paste the contents of that document.

Note 1:: If any security program requests permission to access the Internet, allow it to (it is 100% OK)
Note 2:: If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message, (or similar) restart computer and Security Check should run

 

 

 

Please download RKill by Grinler to your desktop

  • If you have an old version, please delete it first
  • Right click on the new Red icon and select Run as Administrator
  • A black DOS box will appear for a short time and then disappear.
  • This is normal and indicates the tool ran successfully.
  • At most the tool will usually run for about 2 minutes
  • Please Copy and Paste the small log back here.

 

Next -

  • Please download  JRT - Junkware Removal Tool to your desktop.
  • Temporarily Disable your Antivirus now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

 


If you already have a current version installed, Please update or reinstall it, as there is a new version out...
Please download Malwarebytes Anti-Malware

  • Follow the simple directions to install the program to desktop
  • Right click and choose "Run as administrator" to open Malwarebytes Anti-Malware and from the Dashboard please Check for Updates by clicking the Update Now... link
  • Open up Malwarebytes > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.
  • Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button.
  • If you find malware and tick it to remove it, you may be asked to re-boot the computer to finish cleaning.
  • Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply.

 

 

Run ESET Online Scanner.

  • For Internet Explorer users only, hold down Control  (Ctrl) and click on This Link to open ESET OnlineScan in a new window.
  • Click the ESET Online button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu. to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives and Remove Threats"
  • Click Advanced settings and select the following:
    Scan potentially unwanted applications
     Scan for potentially unsafe applications
     Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer.
  • Please be patient as this will take some time (2 hours is not unusual for a first scan).
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. >>> Include the contents of this report in your next reply.<<<
  • Click the Back button.
  • Click the Finish button.
  • There is no need to "Uninstall" it just now.

NOTE:Sometimes if ESET finds no infections it will not create a log, but you will be sure the computer is clean.

 

Thank You



#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:04 PM

Posted 23 April 2015 - 05:07 AM

EmieBrowserModeList, EmieSiteList and EmieUserList are hidden directories and .dat files that used to store data for Internet Explorer 11 Enterprise Mode
 
6371.sutdwemfie_2D00_image5_5F00_760x200
 
 

They are Hidden OS folders created by IE11 and are constructs associated with HTML5 rendering.

EmieUserList? EmieSiteList? What are these?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 love2sing

love2sing
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 23 April 2015 - 08:15 AM

Thank you for your replies.  I will try the steps listed above to see if there is something else on my system since it sounds like the folders in question are okay.  I will post back the results.


Edited by love2sing, 23 April 2015 - 08:16 AM.


#5 love2sing

love2sing
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 23 April 2015 - 01:50 PM

Okay - I have run the first three tests listed above, and ESET is still running at the moment.  It looks like so far it has detected 3 items, but is only 18% complete.  Here are the results from the other three tests you had me run. 

 

Step 1: Checkup Scan Results:

 

 Results of screen317's Security Check version 1.00 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled! 
Microsoft Security Essentials       
McAfee Anti-Virus and Anti-Spyware  
 Antivirus up to date! 
`````````Anti-malware/Other Utilities Check:`````````
 Java 7 Update 67 
 Java 8 Update 25 
 Visual Studio Extensions for Windows Library for JavaScript
 Java 2 Runtime Environment, SE v1.4.1_07
 Java version 32-bit out of Date!
  Adobe Flash Player 16.0.0.235 Flash Player out of Date! 
 Adobe Reader XI 
 Google Chrome (41.0.2272.118)
 Google Chrome (42.0.2311.90)
````````Process Check: objlist.exe by Laurent```````` 
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

 

Step 2: JRT Scan Results, not sure if this found anything or not.  The .txt file looked pretty empty:

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.6.1 (04.23.2015:1)
OS: Windows 7 Home Premium x64
Ran by Lorna Frojd on Thu 04/23/2015 at 11:30:23.81
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

~~~ Services

 

~~~ Tasks

 

~~~ Registry Values

 

~~~ Registry Keys

 

~~~ Files

 

~~~ Folders

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 04/23/2015 at 11:33:10.18
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

Step 3: Malwarebytes - came up without detecting anything, here is their log:

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/23/2015
Scan Time: 11:39:58 AM
Logfile: mbytes scan log.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.04.23.05
Rootkit Database: v2015.04.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Lorna Frojd

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 487273
Time Elapsed: 28 min, 34 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

 

Step 4: I'll post the ESET log when it is complete. 
 



#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:04 PM

Posted 23 April 2015 - 04:36 PM

Hello again,

 

The post from quietman7 is correct, and that is where I was linking you to (so you could read it yourself).

 

Note that ESET will take quite a while. I run it monthly and it still takes about 2+ hours (after the engine has updated).

 

Post any results then - Empty your temp folders using TFC (Temporary File Cleaner)

  • Please download TFC by Old Timer and save it to your desktop.
  • Alternate download link
  • Save any unsaved work. (TFC will close ALL open programs including your browser!)
  • Double-click on TFC.exe to run it. (If you are using Vista, right-click on the file and choose "Run As Administrator".)
  • Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
  • If TFC prompts you to reboot, do so immediately. If not prompted, manually reboot the machine anyway allowing Windows to load normally to ensure a complete clean.

 

 

Please post a report on how the system is running when finished.

 

Thank You -



#7 love2sing

love2sing
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 24 April 2015 - 06:57 AM

That made total sense on the explanation of what emie stood for.   Thank you both!  The ESAT scan ran for a really long time, and I ended up restoring a couple of things that it detected, because they were programs I know are fine that I have used in my work forever.  It did detect a few things though that I didn't recognize and I had those things quarantined.  I forgot to post those results, and I am going out of town for a couple weeks.  So I will post how my computer is running in a couple of weeks.  I'm so sorry for having to interrupt this process.  I appreciate your help so much.  Thank you!!



#8 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:04 PM

Posted 24 April 2015 - 07:36 AM

Hi -

 

ESET scans can be a bit "exacting" in what they remove ...

We often post " Not to remove found items ", but as they can be reinstalled, we normally just use a basic post ...

 

It sounds like you are fairly clean, but I just wanted to be sure .

 

Please note the 2 Antivirus problem, as this can often be a problem at times.

 

Thanks -



#9 love2sing

love2sing
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 24 April 2015 - 01:11 PM

I didn't see antivirus problems in the log.  What did I miss?  Thanks!



#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:04 PM

Posted 24 April 2015 - 01:27 PM

``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Microsoft Security Essentials
McAfee Anti-Virus and Anti-Spyware

See the IMPORTANT NOTE about not using more than one anti-virus program in this topic: Choosing an Anti-Virus Program


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#11 love2sing

love2sing
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 24 April 2015 - 05:12 PM

<p>Thank you for the info. &nbsp;When I get back home from vacation I will uninstall down to only one. &nbsp;Thanks for the article link.</p>

#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:04 PM

Posted 24 April 2015 - 05:33 PM

You're welcome.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




2 user(s) are reading this topic

0 members, 2 guests, 0 anonymous users