"...but what if a piece of malware..."
Have you started the program or did the program start itself?
If the first, you know you want it.
If the second, you have something to be suspicious about.
"...either way the user is going to click..."
I don't and nobody should.
The few times I get UAC messages, I look to see what is causing it.
So far it has already been legitimate.
"...because eventually all those old pre-vista programs..."
Are you sure?
And how much time will that take?
Some programs still have not made the necessary changes to properly
run in Windows XP, and it has been over 5 years.
Intuit makes some that are a constant thorn in the side of security
conscious, particularly those in financial businesses.
Waiting it out is not a practical option if safe computing is an
"The UAC is just adding another step"
I call it "Layered security"
Malware is very sophisticated and many layers are necessary for
If simplicity is paramount, I can only see two solutions:
1. Power off and pack up the computer and never power on.
2. Almost as good, Clean Install and never install anything from any
Use no CDs, DVDs, floppies, thumb drives etc as those are a source of
UAC was never intended to protect against everything but it goes a
step into helping the user identify what is happening and thus offer
People need to learn safe computing.
Jupiter Jones [MVP]
"cerveau" <firstname.lastname@example.org> wrote in message
> I understand your point of view, but what if a piece of malware has
> already hooked into a program?
> having that program pre-approved or manually clicking the UAC pop-up
> allow it to run wont make any
> difference to the malware, ie either way the user is going to click
> UAC pop up because they want to
> run that program.
> The UAC is just adding another step into the process of Running a
> program, the program will still be run
> and if there is Malware present it will run also. The only
> is that UAC makes the user go through
> an extra step each time, which when happens on every bootup, when
> user is clicking 2 or 3 UACS to
> just get required programs running will make for an unpleasant vista
> experience forcing the user to switch
> off UAC altogether.
> Admittedly though all that MS needs to do is on this problem is to
> it out, because eventually all those
> old pre-vista programs that are activating UAC will be updated or
> replaced with news ones which wont,
> eliminating the problem all together.