UAC Prompt Question

Udgnim

Diamond Member
Apr 16, 2008
3,669
114
106
So I'm accustomed to seeing a Secure Desktop window that comes up when UAC decides an action requires administrative rights like in the below image.

eb_uac_secure_desktop_1.png


I've recently come across a windows pop up that I'm not sure is legitimately produced by Windows 7 or is an imposter window set up by malware to keylog account credentials.

Instead of a Secure Desktop window, I see the window in the below image when trying to install a program.

mbWya.png


The workstation in question has UAC set to it slowest setting of "Never notify," and I can only seem to open the UAC Settings window when logged in with an account with administrative privileges. When trying to access UAC Settings with non-admin accounts, no UAC Setting comes up at all.

Thanks for any help.
 

SecurityTheatre

Senior member
Aug 14, 2011
672
0
0
It is likely the software is explicitly trying to do a "run as user" command.

You can actually do this yourself. Find an executable file (.exe) on your system (shortcuts do not work), hold shift and right click on it. You should see a "run as different user" prompt, which will likely bring up the same box.

I doubt it's some sort of phishing attack, though anything is possible when you're executing unknown code. :)
 

Udgnim

Diamond Member
Apr 16, 2008
3,669
114
106
thanks for the response.

Your explanation does make sense, although the different style of "Run as" window for credentials still has me unsure about legitimacy. Could just be some setting in Windows 7 that I'm not aware of that causes the windows to have different styles though.

Df35p.png
 
Last edited:

dawks

Diamond Member
Oct 9, 1999
5,071
2
81
I haven't seen that Run As box myself. What is happening when that request shows up?
 

zokudu

Diamond Member
Nov 11, 2009
4,364
1
81
What program is this. If it wasn't something I desperately needed I would stay away.
 

SecurityTheatre

Senior member
Aug 14, 2011
672
0
0
thanks for the response.

Your explanation does make sense, although the different style of "Run as" window for credentials still has me unsure about legitimacy. Could just be some setting in Windows 7 that I'm not aware of that causes the windows to have different styles though.

Df35p.png

Interesting. That's what I see too on Windows 7. The other one looks a lot like the old Windows XP version. It wouldn't surprise me at all if the code was still buried in Windows 7 somewhere to make two different screens, but I can't tell you for sure what's causing it...

A bit strange.
 

Udgnim

Diamond Member
Apr 16, 2008
3,669
114
106
The first screen that prompts for credentials is what comes up when trying to install DropBox.

I just tried installing DropBox on my account with UAC at its lowest setting and produced the same type of credential window, so I guess it's something DropBox specific with its installer program.