Windows 10: Is SSO_POP_DEVICE & virtualapp/didlogical supposed to store generic credentials persistently?

Any info on the above and windows 10 credential management would be helpful.

:)

 

what is virtualapp/didlogical under credential manager

what is virtualapp/didlogical under credential manager? It has user name starting with: 02

 

virtualapp/didlogical , sso_pop_Device users showed up in my credentials manager, then I was hit with Malware. Using MSI? see the verbose logging

Your computers (and local network & your router) may have been infected but I can't assure you that an infection (even a bootkit infection) is NOT the source of the Virtualapp/Didlogical credentials. That being said...

Have you reset or reinstalled the router since the supposed infections occurred last February?

Have you ever run the McAfee Consumer Products Removal Tool and/or the Norton Removal Tool?

COMMENTS:

• The vast majority of brand-new computers come with a McAfee or a Norton free-trial preinstalled. Both applications are
  notorious for not uninstalling (or upgrading) cleanly.

• Most computers (with Windows preinstalled) sold during the past decade also came with Windows Live Essentials preinstalled. [Actually, it's a "stub" allowing you to install one or more Windows Live Essentials applications without having to download an installer.]
  That's yet another source of Virtualapp/Didlogical credentials.

• Just about all computers come with a hidden Recovery partition - which would be used to do a clean install of Windows, should the need arise. The Recovery partition is basically an image which includes the Norton or McAfee free-trialware as well as the
  Windows Live Essentials "stub."

 

Unauthorized User in Windows Credential

It's you !!!!

SSO_POP_Device is created when you sign in with a Microsoft account. It is a normal credential that you can 'Remove' if you like, but it will come back again.

virtualapp/didlogical is a credential that is stored when you use Microsoft cloud services. You may "Remove" the entry from the Credential Manager, but it will return the next time you use Microsoft cloud services.