I am running Windows 8 without admin rights. I have installed Chrome on it (with no admin rights) and once synced with Google account it brought my usual extensions EditThisCookie, ABP, Google Docs, Google docs offline, Postman and Postman REST client.

Today I noticed this LsiHelper extension has got added to Chrome.

It shows as this.

There is no option to remove or disable this extension.

---

• How was this extension installed?
• How to remove it without having admin rights?(and make sure it doesn't come back).
• Is this unsafe?

5

1 Answer

According to Google's own Product Forums, What is LsiHelper 1.1?, it is malware:

I noticed the reference to "Enterprise Policy". This is malware. See Here

That link then describes malware using the “Installed by enterprise policy” extension:

The “Installed by enterprise policy” extension are usually adware programs that displays pop-up ads, advertisement banners and sponsored links within Google Chrome. Unfortunately, some free downloads do not adequately disclose that other software will also be installed and you may find that you have installed the malicious “Installed by enterprise policy” extension without your knowledge.

It is then followed by these removal tips:

To remove “Installed by enterprise policy” extension from Google Chrome, follow any of these options:

• OPTION 1: Remove the “Installed by enterprise policy” extension Google Chrome
• OPTION 2: Manually remove the “Installed by enterprise policy” extension from your registry and computer
• OPTION 3: Restore Windows to an earlier time to remove the “Installed by enterprise policy” from Windows

1

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password Submit

Post as a guest

Post Your Answer Discard

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy