Vista’s UAC Catches Rootkits Before Installing
Posted by Nima on May 25th, 2008Looks like Vista’s much-maligned User Access Control or UAC has one benefit for a savvy user: it
can detect rootkits before they install. AV-Test.org conducted a test of popular antivirus programs to see how well they detected rootkits and the tester had to turn off UAC on the Vista test systems because it detected every rootkit used in the test.
Once on a PC, rootkits can bury themselves quietly, but they have to get to that point first. As long as users interpret prompts from the UAC system attentively, or those messages haven’t in some way been spoofed, rootkits struggle to jump to the PC without drawing attention to themselves. [HardOCP]
Recent Comments