Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

EmieBrowserModeList


  • Please log in to reply
2 replies to this topic

#1 R_W_B

R_W_B

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:16 AM

Posted 30 April 2015 - 09:39 AM

I've read a lot about these Emie files (there are 3 of them) being part of virus.  I don't think they are, I have had them ever since I upgraded to Iexplorer 11 running on Win7 64 bit.   I did read one post on a MS forum saying these files were a legitimate part of the above said upgrade scenario, but "only that one post". There are numerous other posts elsewhere saying it's malware.

 

Well I ran the cleaners etc and could not keep these files from coming back. You can delete them but they reappear each time you run Iexplorer.

 

I have good data backups, so I just did a full factory recovery. I enacted the window firewall, then uninstalled all the factory bloatware etc. Then did a the windows updates gig and then did a Win Os Sys Image at that point.

 

Over a period of 3 days the Emie files did not appear.  In the meantime I installed Norton 360 (since I still have 80 days left on it. I'm thinking of going with Emsisoft Security at that time.  Then I reinstalled my email app and my password app (both of which I've been using for years).

 

Well I got another windows update notice yesterday and I downloaded it. Part of it was the upgrade to Iexplorer 11 .  Immediately afterwards the Emie files came back.  I think these files are definitely part of Iexplorer 11 running on win 7. I'm guessing the name Emie....          is for Enhanced Mode Internet Explorer.

 

Anyhow just thought I share this since I've seen so many posts on the net about these files being part of virus. Albeit a virus could use them (I guess) just like other files have been hijacked, but in my case it appears they are MS files

 



BC AdBot (Login to Remove)

 


#2 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:05:16 AM

Posted 30 April 2015 - 10:02 AM

Folders are harmless IMHO, I have the same (empty) folders on my 2 Win 7 machines. Where did you read that these are/could be malware?

 

Emie = Enterprise Mode IE11: https://msdn.microsoft.com/en-us/library/dn640687.aspx?f=255&MSPPError=-2147217396

 

What is Enterprise Mode?

Enterprise Mode, a compatibility mode that runs on Internet Explorer 11 on Windows 8.1 Update and Windows 7 devices, lets websites render using a modified browser configuration that’s designed to emulate Internet Explorer 8, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer.

 

 

(MSDN) Turn on Enterprise Mode and use a site list: https://msdn.microsoft.com/en-us/library/dn640699.aspx

 

(Ask VG) How to Enable Enterprise Mode in Internet Explorer 11 and Later? http://www.askvg.com/tip-how-to-enable-enterprise-mode-in-internet-explorer-11-and-later/

 

Another interesting, useful and hidden feature introduced in Internet Explorer 11 is the "Enterprise Mode" which has been implemented to provide better support for websites having compatibility issues in IE11 web browser.

 

Basically Enterprise Mode in IE11 tries to behave like IE8 version so that older websites which can recognize IE8 but can't recognize the new IE11 version, can open properly in IE11. Enterprise Mode in IE11 replicates original IE8 user agent string and outputs IE8's response to ActiveX controls and other binaries query so that old websites can open perfectly in IE11.

 

 

IE11 Enterprise mode windows 7: Google search results

Enterprise Mode in IE11 is disabled by default


Edited by Union_Thug, 30 April 2015 - 10:03 AM.


#3 R_W_B

R_W_B
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:16 AM

Posted 30 April 2015 - 05:38 PM

Folders are harmless IMHO, I have the same (empty) folders on my 2 Win 7 machines. Where did you read that these are/could be malware?

 

Emie = Enterprise Mode IE11: https://msdn.microsoft.com/en-us/library/dn640687.aspx?f=255&MSPPError=-2147217396

===========================================================

 

I'm sorry if my post was ambiguous but I meant to say that most links I found a couple of weeks ago said these folders "were created and/or used" by the malware. (not that the folders themselves where malware)

 

This is the only link (below) I found that eluded to them being legitimate folders

http://answers.microsoft.com/en-us/windows/forum/windows8_1-security/erniesitelist-and-ernieuserlist/00407bd2-e349-423c-a8e5-cb6127840ea5

 

The rest were either unsure or thought they were unknown origin or thought to be used by Malware.

Some I read said they were created and used by the Poweliks trojan others said the Bedup was the culprit. And of course some of the links I found were probably virus scam sites themselves.

 

I did quick search now and found these references.  Anyhow just thought I'd share what I had found after doing a full recovery and seeing them come back immediately after upgrading Iexplorer to version 11

 

http://www.bleepingcomputer.com/forums/t/556182/possible-infection-or-just-messed-up-computer/

 

http://www.bleepingcomputer.com/forums/t/569570/emiebrowsermodelist-virus-removal/

 

http://blog.mitechmate.com/remove-emiebrowsermodelist-completely/

 

http://www.bleepingcomputer.com/forums/t/561991/help-need-it-to-remove-emiebrowsermodelist-its-sisters-and-virtualstore/

 

http://malwaretips.com/threads/uyitudbeg-exe-32-fake-google-chrome-process-emieuserlist-emiesitelist.37867/

 

http://tipsforoptimalbrowsing.blogspot.com/2015/03/emiebrowsermodelist-removal-how-to.html

 

RWB


Edited by hamluis, 01 May 2015 - 03:36 PM.
Fixed post - Hamluis.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users