Something trying to open in Chrome, i dont have chrome

Thanks.

I see the problem.

Have to analyze both reports with other than a quick glance...


Will be back tomorrow evening and prepare a script for you to run.

cottonball said:

Thanks.

I see the problem.

Have to analyze both reports with other than a quick glance...


Will be back tomorrow evening and prepare a script for you to run.

Thank you Sir iam about to leave on a 3day road trip to Denver I will have to check back on Saturday so no rush!
You Rock!

JRockZ,

This will be waiting when you come back:

EmieBrowserModeList is related to Microsoft's Enterprise Mode Site List Manager Tool for IE11.
Did you install this tool?
https://msdn.microsoft.com/en-us/library/dn640687.aspx


Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below (Do not copy the word 'code') to Notepad.
Save it to the Desktop, and name it: fixlist.txt

Code:

start
closeprocesses:
C:\Users\Blaze\AppData\LocalLow\EmieBrowserModeList\liwngvfynxi
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] -  [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] -  [Not Found]
C:\Users\Blaze\AppData\Local\NPE\Lhnjmig.dll
C:\Users\Blaze\IP_Log_Data.js
CustomCLSID: HKU\S-1-5-21-566604803-3814173722-1313262255-1000_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> No File Path
EmptyTemp:
Reboot:
end

NOTICE: This script is written specifically for this computer!!!
Running this on another computer may cause damage to the Operating System.

Now, please runFRST64, and press the Fix button, just once, and wait.

If for some reason the tool needs a restart, please let the system restart normally. After that let the tool complete its run.

When done, the tool creates a report on the Desktop called: Fixlog.txt

Please post the Fixlog.txt in your reply.

cottonball said:

JRockZ,

This will be waiting when you come back:

EmieBrowserModeList is related to Microsoft's Enterprise Mode Site List Manager Tool for IE11.
Did you install this tool?
https://msdn.microsoft.com/en-us/library/dn640687.aspx


Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below (Do not copy the word 'code') to Notepad.
Save it to the Desktop, and name it: fixlist.txt

Code:

start
closeprocesses:
C:\Users\Blaze\AppData\LocalLow\EmieBrowserModeList\liwngvfynxi
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] -  [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path
CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] -  [Not Found]
C:\Users\Blaze\AppData\Local\NPE\Lhnjmig.dll
C:\Users\Blaze\IP_Log_Data.js
CustomCLSID: HKU\S-1-5-21-566604803-3814173722-1313262255-1000_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> No File Path
EmptyTemp:
Reboot:
end

NOTICE: This script is written specifically for this computer!!!
Running this on another computer may cause damage to the Operating System.

Now, please runFRST64, and press the Fix button, just once, and wait.

If for some reason the tool needs a restart, please let the system restart normally. After that let the tool complete its run.

When done, the tool creates a report on the Desktop called: Fixlog.txt

Please post the Fixlog.txt in your reply.

I do not remember installing EmieBrowserModeList but it is possible I did,, I think maybe I used it to root a phone? or something like that? maybe when I was trying to hotspot my phone? im not 100% sure but I do remember a time back in nov when I was having internet issues so I was trying to connect my cell as a wifi hot spot,,, (that is not supported by my cell provider),,, if that maybe what I did, I did it late at night when I was half asleep Dohh! which was a bad idea but I had to be able to get online that next morning for a few important reasons concerning my job!
Again really appreciate your help I did as you said and here is my
Fixlog.txt

JRockZ,

Did not expect you until today...

Looks as if the script did its job.

How is the system running? Are you having any more issues?

cottonball said:

JRockZ,

Did not expect you until today...

Looks as if the script did its job.

How is the system running? Are you having any more issues?

cottonball,
I wasn't sure how long it would take me to do a turn around trip to Denver thought I was going to be back Saturday but i was back in about 49hrs,, I didn't want to reply back to soon, have been using the PC some to see what if anything came up BUT All does seem to be well so far nothing odd has happened yet anyhow lol.
Really appreciate your help you rock!
Thanks again!

It appears like we are in the same time zone. What state are you in?
It would take me about three days to go to Denver from western Illinois.
Do not drive more than 300 miles in a day.
...old and slow...


Take you time, and do use the machine for a few more days.

Around Thursday or Friday, post back with an update, and also the following:

Please use the SecurityCheck Download
Save to your Desktop.
Double-click: SecurityCheck.exe
Follow the onscreen instructions inside the black box.

When done, a Notepad report opens automatically, called: checkup.txt

Please post the checkup.txt in your reply, but, do not take any corrective actions!

cottonball said:

It appears like we are in the same time zone. What state are you in?
It would take me about three days to go to Denver from western Illinois.
Do not drive more than 300 miles in a day.
...old and slow...


Take you time, and do use the machine for a few more days.

Around Thursday or Friday, post back with an update, and also the following:


Please post the checkup.txt in your reply, but, do not take any corrective actions!

LOL Yes im in Dallas (but also from Illinois Grew up north of Chicago) , Central time zone,,, 12hrs to Denver 12 back 800mi ea way,, no stopping! I just did a turnaround run,
So far all seems well I will post on security check details in a few days
Thanks!

cottonball said:

It appears like we are in the same time zone. What state are you in?
It would take me about three days to go to Denver from western Illinois.
Do not drive more than 300 miles in a day.
...old and slow...


Take you time, and do use the machine for a few more days.

Around Thursday or Friday, post back with an update, and also the following:

Please use the SecurityCheck Download
Save to your Desktop.
Double-click: SecurityCheck.exe
Follow the onscreen instructions inside the black box.

When done, a Notepad report opens automatically, called: checkup.txt

Please post the checkup.txt in your reply, but, do not take any corrective actions!

Just got whalloped! Heres a few images and an export of recent intrusion list through Norton,,, not sure what format MFC is but maybe you know how to read/open it. Browser crashed as posting this and more hits coming in as I post toolkit website33 something,,, gonna reboot

EDIT:
Sorry posted that in a panic as I wanted to catch what was going on,,,, so far after a reboot things seem ok,,, only thing I have done on my PC today was browse a couple sites I normally browse,,, I wa son yahoo home page on one tab and on FB on another sending an email..... that's all I have done today really, checked online emails and a couple discussion forums.
Let me know any info you need Cotton,,, should I run the program above you suggested? SecurityCheck.exe

Hey Cotton,
Im on the road another day or so,,, anyhow no more issues,, since the above I ran malware bytes and it found that Lhnjmig.dll and I quarantined/deleted it and since then ive had no issues, have not run security check yet when you get a chance any suggestions from here would be helpful!
Thanks again for all your help!