Hello. I just went to a lot of time and trouble to be here. Earlier, NUA.exe tried to do an outbound UDP to 207.69.188.186,53 and I stopped it. I did searches on NUA.exe and Prevex says to remove it. The IP is in Kansas? I even checked a backup drive from two days ago, and since NUA.exe was not there, I renamed it and booted. (I have since renamed it back due to your post)
Get it !!! Zillions of users have outbound monitoring turned on, and will stop the access, and even remove the new NUA.exe that just showed up, because nobody knows what it is. Firewalls that monitor outbound traffic don't know about this thing, and neither do we. You should have sent an email to all registered users telling about this thing, since now, a lot of them will be defeated. You also cost me hours of my time in the middle of the night! Are you sure that this thing cannot be hijacked? Ad-Aware tried something like this, and put marketing messages on our screens, and we removed Ad-Aware because of it. I do hope you don't start putting out marketing messages.
Anyway, I have let you know what is going on on my end (user) because of this, and multiply that by 10's of thousands or more customers, and you see my point, I assume. Your own NIS reommended I stop your outbound, so I did. What about other firewalls? A huge number of human hours wasted because of no notification. It will be anti-Norton publicity? You need to put out something that will cause google to put your post high, or put out a press release, or something so we will see NUA.exe right away on google. Try it and see what happens now. All the paid users and virus removers want to remove your new pgm.
I was going to just ignore this situation since I am past it, but hey! I gotta protect everybody else. There are still some of us out here. :-)
Thanks for letting us know about this. I was in the process of reporting it to support when I found your post through another post.
Good luck getting this known! (maybe google will like my post).