"Bob" <bob@nowhere.net> wrote in message
news:PoqdnavlbdaxbHranZ2dnUVZ_hSdnZ2d@comcast.com...[color=blue]
> Ronnie
>
> I had previously read the article.
>
> The quote that stands out to me is "UAC does not, nor is it intended to,
> stop malware"[/color]

That's correct, the primary job for UAC is to allow a user to run with a
Standard User (Limited User in XP) token and still have the capability to
elevate a program or procedure with administrator privileges on demand.
However, as a side benefit, if you get an unexpected UAC prompt, this can
warn you that a process you did not start is trying to access a restricted
part of the OS.
[color=blue]
> In the example you give the user would have received a prompt even if UAC
> was disabled providing he was running Windows Defender.
> "If potentially harmful software tries to run or install itself on your
> computer, Windows Defender notifies you and helps you choose how to take
> action."[/color]

Windows Defender can only stop 'known' malware. It checks a database that is
updated often when a new threat is discovered. Defender is not an anti-virus
program.

Neither Defender nor UAC are designed to replace a good anti-virus program.
[color=blue]
> Re: "Have you ever wondered why an application,
> that does nothing more than make images look better, needs full and
> unrestricted access to every part of your computer?"
>
> I don't know why you say that. I run Photoshop Elements and afaik it
> doesn't need unrestricted access to every part of my computer.[/color]

This is because photoshop elements is probably designed to work properly, or
the part of the program that requires admin privileges has been Virtualized
by UAC. I have even heard of word processors that get a UAC prompt when they
are started.

--

Ronnie Vernon
Microsoft MVP
Windows Desktop Experience