Re: registry hacked under XP limited account

From: Karl Levinson, mvp (levinson_k_at_despammed.com)
Date: 05/31/05 

Date: Mon, 30 May 2005 21:46:47 -0400

"Stefan Kanthak" <postmaster@1.0.0.127.in-addr.arpa> wrote in message
news:O1XkgABZFHA.2288@TK2MSFTNGP14.phx.gbl...

> > Running as limited user does prevent much spyware and adware today, but
only
> > because the authors of that malware see no need to make their programs
work
> > as limited users. This tactic will NOT be effective against future
malware.
>
> WRONG: running as limited or restricted user on a properly setup XP or
> 2K system prevents malware from infecting or compromising the system
> itself or other user accounts.

This means nothing unless multiple users are using the computer. If this is
a single-user system, making the virus unload when the user logs out or
preventing infection of other system accounts means very little.

Relevant Pages

  • Re: sharing internet between users`
    ... Seems to be connected with malware* ... If you are running Windows ME or XP, you should disable/enable System ... the most recent System Restore point from the More ... Please include a lot more information about the user accounts, ...
    (microsoft.public.windowsxp.general)
  • Re: User Account Vanished - Help!
    ... I dont know anything about malware, ... tried for 8+ hours a day for about 3 weeks to find the lot user and recovery ... Yesterday when I turned on the computer, one of the User Accounts was ... I suspect you became the victim of some malware you activated ...
    (microsoft.public.windowsxp.general)
  • Re: Is this possible?
    ... user accounts offer no protection unless they're set to limited ... The usual permissions elevation by using flaws in the Windows software ... It's malware, that's what it *does*. ...
    (uk.comp.homebuilt)
  • Re: Limited Users Cant Use Internet Connections
    ... Dan R. wrote: ... > I searched for all of those items in my registry, ... What about the malware aspect that Kelly mentions? ... least Ad-aware and Spybot S&D in all user accounts as they will find ...
    (microsoft.public.windowsxp.network_web)
  • Re: Trojan has overwritten User Accounts
    ... shouldn't the data and settings in the previous user accounts still be ... corruption of your operating system for reasons ... >>unconnected to malware is a good possibility. ...
    (microsoft.public.security.virus)