Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

A Windows 7 Program Event alert is causing me great concern.

Posted on 2010-09-12
2
Medium Priority
?
527 Views
Last Modified: 2013-12-04
Starting a few days ago, I would periodically hear an unfamiliar alert. When I heard the same alert today I was not actively doing anything on the PC. I traced the tone to Program Events related to Windows User Account Control. When I tried to Change User Account Control settings myself, the only option available is to set the conditions that cause a Change User Account Control Settings Program Event alert. When I tried to make a change myself I got that prompt that asks if I wan't to allow a program to make changes to my computer to which I clicked "No". I found that this is the only option under User Accounts that generates the above menioned prompt. The program that wants to run is described as being Microsoft's with a name of UserAccountControlSettings. It's modification date is OK but it's certificate describes it as being used for "Windows Hardware Driver Verification".

I know what I think is going on but want to know how many folks here come to my same conclusion (which I didn't mention on purpose).
0
Comment
Question by:Mister_Rat
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 2

Expert Comment

by:agengler11
ID: 33657408
Try Microsoft Event Viewer.

Control Panel

Administrative Tools

Event Manager
0
 

Accepted Solution

by:
Mister_Rat earned 0 total points
ID: 33703632
Yes I did all those things prior to the initial post. After a while of getting nowhere, I checked all the successfull security audit events starting from the date of a suspected malicious event. There I found many network logons (I'm not running a server) for an account that was hidden in terms of how you would normaly view user accounts. I was then able to prevent further network logons for the SOB but am still finding and fixing the problems that were caused.

The moral of the story? When you want to remotely monitor activity on a PC (a laptop in my case) that you own, stay away from Desktop Scout which lures you into trying it with a free 30-day evaluation. Once you run the weird (which I noticed as it briefly ran...too late!) installer, the damage is done.
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
IF you are either unfamiliar with rootkits, or want to know more about them, read on ....
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
Suggested Courses

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question