Messages

1

RogueKiller / Is this a real threat?

« on: April 12, 2017, 09:49:19 PM »

Code: [Select]

RogueKiller V12.10.4.0 (x64) [Apr 10 2017] (Free) by Adlice Software
Operating System : Windows 10 (10.0.15063) 64 bits version

¤¤¤ Files : 1 ¤¤¤
[Adw.WinSec|PUP.Gen1][Folder] C:\Program Files\Windows Security -> Found

Is this a real threat? The folder contains browsercore.exe (no hits in VirusTotal) and a manifest.json file.
In the json file these lines of text:

Code: [Select]

{
  "name": "com.microsoft.browsercore",
  "description": "BrowserCore",
  "path": "BrowserCore.exe",
  "type": "stdio",
  "allowed_origins": [
    "chrome-extension://ppnbnpeolgkicgegkbkbjmhlideopiji/"
  ]
}
When I search for that extension I get
https://chrome.google.com/webstore/detail/windows-10-accounts/ppnbnpeolgkicgegkbkbjmhlideopiji
which is an extension for "Sign in to supported websites with accounts on Windows 10".
It's made by Microsoft.
Sounds legit.
The only thing is that I don't have this extension installed.