Re: consent.exe

Today I logged into my account on my son's notebook (I rarely use my
account on that notebook) and I saw that firewall notice for the first
time. The OS on the notebook is 32-bit Vista Home Premium. I use a Vista
x64 and has never seen that message.

My son is not too concerned about security when he surfs Internet, so I
naturally became suspicious. I blocked the program for a simple reason;
while the publisher was shown as Microsoft, it was NOT digitally signed
by Microsoft and it was attempting to connect to 199.7.71.72 which is
assigned to VeriSign Global Registry Services.

I find it curious that an unsigned program tries to directly contact
Verisign. Does Verisign provide an API that can be exploited by a
malicious program to produce fake signature validation?


--
OldGuru

 

Old Guru, I never had any ill-consequences from denying Consent.exe. I
use Comodo Computer Internet Security. At the time, I was running Vista
Ultimate. Am presently using Win 7 RC and haven't seen the msg anymore.
Anoithe old guru, karl snooks


--
Karl Snooks