Consistent browser bug: something is writing a json file and creating enterprise-level permissions for website certificates. If I were important enough to be concerned about such things, I'd be concerned, but it's entirely possible that it's just an Avira antivirus measure that kicks in at odd times. Like Luke firing a blaster at the Empire's drones on a remote frozen moon, I just take them out them when they appear. Drones will be drones.
