> However, Chrome will see that the files have been modified, and will replace the modified files with clean copies as soon as it runs, so it’s unclear what the

> However, Chrome will see that the files have been modified, and will replace the modified files with clean copies as soon as it runs, so it’s unclear what the purpose here is. The programs mentioned run in background almost continuously, right? If the malware modifies these, couldn't they execute it themselves so they could have a non-suspicious looking process?