Reply to thread

Message

<blockquote data-quote="simmerskool" data-source="post: 1016523" data-attributes="member: 61091">I was doing some miscellaneous tweaking in my admin user account then rebooted into sua and got VS block alert for c:\windows\system32\msiexec.exe /vsaying NOT digitally signed with 2 choices, block (recommended) or allow with option to report false positive. So I started checking...sha256= aa2fa1000f9fea03339edf67295dd043806294ec1644e38b7dd08e7d670d5423I don&#039;t ever recall VS blocking this before. VT says it is clean, not signed, but it matches 2 sigma rules and VT community seems not to like it. kaspersky threat intell says clean.QUESTION re VS: the VS alert stayed open for a while, but when I went to input my selection to allow, the alert window had closed having made no selection. In this situation, let&#039;s call it do nothing, did VS keep the exe blocked or let it run??&nbsp; I don&#039;t see it running in process_explorer, but I think that is not definitive, but I could be wrong. I know I should know the answer to this, but <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" /></blockquote>

[QUOTE="simmerskool, post: 1016523, member: 61091"] I was doing some miscellaneous tweaking in my admin user account then rebooted into sua and got VS block alert for c:\windows\system32\msiexec.exe /v saying NOT digitally signed with 2 choices, block (recommended) or allow with option to report false positive. So I started checking... sha256= aa2fa1000f9fea03339edf67295dd043806294ec1644e38b7dd08e7d670d5423 I don't ever recall VS blocking this before. VT says it is clean, not signed, but it matches 2 sigma rules and VT community seems not to like it. kaspersky threat intell says clean. QUESTION re VS: the VS alert stayed open for a while, but when I went to input my selection to allow, the alert window had closed having made no selection. In this situation, let's call it do nothing, did VS keep the exe blocked or let it run?? I don't see it running in process_explorer, but I think that is not definitive, but I could be wrong. I know I should know the answer to this, but :unsure: [/QUOTE]

Verification