During programm installation Program Files\Pwrchute shared with full access allowing to trojan program executables.
vulners.com/securityvulns/securityvulns:doc:3023