Appinstallation program running "python.exe and python3.exe" Should I be worried?

Forums › Desktop computing › Appinstallation program running "python.exe and python3.exe" Should I be worried?

SamDamDim

1 post

Wannabe Geek

#288297 19-Jun-2021 06:58

Hi, I were just managing my apps at my Windows 10 computer, and I noticed a new app was installed yesterday, ofc without me installing it. It was named "Your phone" by Microsoft corporation. I then checked "AppRunningAliases" (the best trancelation I had) and found four programs, both "Microsoft Edge" & "Xbox Game Bar". I also found two other programs, both named "AppInstallationProgram" one of which were running python.exe, and the other one was running python3.exe.

What could this possibly be?

I ran a virus scan using BitDefender, which told me my computer is protected. But I guess that if I have been hacked for 24 hours +/-, they had time to tamper with BitDefender rendering it useless.

All answers are appreciated :)

sampler

446 posts

Ultimate Geek

ID Verified

Trusted

Lifetime subscriber

#2730899 19-Jun-2021 07:39

SDD!

Those are all legit program names, however I dont think they are associated with python.

I would start with a second opinion .. Eset one time scanner - https://www.eset.com/int/home/online-scanner/

Then either malware bytes or spybot s&d

All the best

gzt

17160 posts

Uber Geek

Lifetime subscriber

#2730900 19-Jun-2021 07:42

The python part I don't know. The phone part sounds like the Microsoft phone thing automatically installed by the Microsoft Store.

Open the store and check recently updated apps. Xbox game bar is from the store. I think I've removed xbgb several times and Microsoft installs it again.

It's surprising how much is automatically installed by the store.

Lias

5590 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2732013 21-Jun-2021 12:40

As above, "Your phone" , "Microsoft Edge" & "Xbox Game Bar" are all legit Microsoft Store application names and yes they can get installed automatically when Windows updates versions etc.

Python is now fairly embraced by Microsoft and available via the store, so it wouldn't actually surprise me if the Python stuff is legit too.

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

PolicyGuy

1730 posts

Uber Geek

ID Verified

Lifetime subscriber

#2732023 21-Jun-2021 12:58

Python has been in transition from v2 to v3 for a l-o-n-g time. V3 is a very, very big change from v2
"Python.exe" will be the v2 runtime, "Python3.exe" the v3 one.

There are big arguments in various Linux distributions about whether it is / when it will be time to make v3 the default so that "Python" will launch v3 and you'd have to use "Python2" to launch v2.

So it looks untidy but legit, IMO

Batman

Mad Scientist
29771 posts

Uber Geek

Trusted

Lifetime subscriber

#2732025 21-Jun-2021 13:04

SamDamDim: Hi, I were just managing my apps at my Windows 10 computer, and I noticed a new app was installed yesterday, ofc without me installing it. It was named "Your phone" by Microsoft corporation. I then checked "AppRunningAliases" (the best trancelation I had) and found four programs, both "Microsoft Edge" & "Xbox Game Bar". I also found two other programs, both named "AppInstallationProgram" one of which were running python.exe, and the other one was running python3.exe.

What could this possibly be?

I ran a virus scan using BitDefender, which told me my computer is protected. But I guess that if I have been hacked for 24 hours +/-, they had time to tamper with BitDefender rendering it useless.

All answers are appreciated :)

heh how interesting!

and welcome

yitz

2083 posts

Uber Geek

#2732096 21-Jun-2021 15:14

A quick internet search suggests:

Windows 10 introduced what I consider a really annoying “feature” called App Execution Aliases. What this means is that if you don’t have python installed on your system but try and execute python.exe, Windows will jump in a load up the Windows Store to prompt you to download and install it

https://blog.mbedded.ninja/programming/languages/python/installing-python/#windows

fe31nz

1233 posts

Uber Geek

#2732425 22-Jun-2021 01:49

PolicyGuy:

Python has been in transition from v2 to v3 for a l-o-n-g time. V3 is a very, very big change from v2
"Python.exe" will be the v2 runtime, "Python3.exe" the v3 one.

There are big arguments in various Linux distributions about whether it is / when it will be time to make v3 the default so that "Python" will launch v3 and you'd have to use "Python2" to launch v2.

So it looks untidy but legit, IMO

Ubuntu and Fedora are past that point now - new installs will default to no Python 2 installed and the "python" command runs Python 3. I suspect most Linux distros are doing that now. If you are upgrading an old system that already has Python 2 installed, things are murkier. Python 2 is on life support (only serious bugs get fixed) and I think even that support has an end date. So if anything requires Python 2 still, seriously consider using different software.