Add support to detect unregistered AV products in system profile.

chrome/browser/metrics/antivirus_metrics_provider_win.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/metrics/antivirus_metrics_provider_win.h"
 
 #include <iwscapi.h>
 #include <stddef.h>
 #include <wbemidl.h>
 #include <windows.h>
@@ skipping 158 matching lines @@
   } else {
     // The WSC interface is preferred here as it's fully documented, but only
     // available on Windows 8 and above, so instead use the undocumented WMI
     // interface on Windows 7 and below.
     if (os_info->version() >= base::win::VERSION_WIN8)
       result = FillAntiVirusProductsFromWSC(&av_products);
     else
       result = FillAntiVirusProductsFromWMI(&av_products);
   }
 
+  MaybeAddUnregisteredAntiVirusProducts(&av_products);
+
   UMA_HISTOGRAM_ENUMERATION("UMA.AntiVirusMetricsProvider.Result",
                             result,
                             RESULT_COUNT);
 
   return av_products;
 }
 
 void AntiVirusMetricsProvider::GotAntiVirusProducts(
     const base::Closure& done_callback,
     const std::vector<AvProduct>& av_products) {
@@ skipping 230 matching lines @@
       av_product.set_product_version_hash(metrics::HashName(product_version));
     }
 
     result_list.push_back(av_product);
   }
 
   *products = std::move(result_list);
 
   return RESULT_SUCCESS;
 }
+
+void AntiVirusMetricsProvider::MaybeAddUnregisteredAntiVirusProducts(
+    std::vector<AvProduct>* products) {
+  base::ThreadRestrictions::AssertIOAllowed();
+
+  // Trusteer Rapport does not register with WMI or Security Center so do some
+  // "best efforts" detection here.
+
+  // Rapport always installs into 32-bit Program Files in directory
+  // %DIR_PROGRAM_FILESX86%\Trusteer\Rapport
+  base::FilePath binary_path;
+  if (!PathService::Get(base::DIR_PROGRAM_FILESX86, &binary_path))
+    return;
+
+  binary_path = binary_path.AppendASCII("Trusteer")
+                    .AppendASCII("Rapport")
+                    .AppendASCII("bin")
+                    .AppendASCII("RapportService.exe");
+
+  if (!base::PathExists(binary_path))
+    return;
+
+  std::wstring mutable_path_str(binary_path.value());
+  std::string product_version;
+
+  if (!GetProductVersion(&mutable_path_str, &product_version))
+    return;
+
+  AvProduct av_product;
+
+  // Assume enabled, no easy way of knowing for sure.
+  av_product.set_product_state(metrics::SystemProfileProto::AntiVirusState::
+                                   SystemProfileProto_AntiVirusState_STATE_ON);
+
+  // Taken from Add/Remove programs as the product name.
+  std::string product_name("Trusteer Endpoint Protection");
+  if (ShouldReportFullNames()) {
+    av_product.set_product_name(product_name);
+    av_product.set_product_version(product_version);
+  }
+  av_product.set_product_name_hash(metrics::HashName(product_name));
+  av_product.set_product_version_hash(metrics::HashName(product_version));
+
+  products->push_back(av_product);
+}