Article - Malware defeating UAC doesn't appear too hard to do

[Terry]

By hacking the Start menu:

http://blogs.zdnet.com/security/?p=203&tag=nl.e550

--
Terry

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.

 

[Jimmy Brush]

UAC currently offers some protection against this by showing different
UAC dialogs for unsingned vs. signed vs. system files as a clue that
something has changed, but the author has some good suggestions as to
how to make this protection even better.