Quote:
|
Originally Posted by Wim Libaers
It is perhaps a bit less important than it might seem, because most Windows users work with administrator privileges (because a lot of programs just expect to have that and will not work properly from other accounts), which means any trojan that gets user level also gets an opportunity to install drivers, which means it can get ring 0 acces after a reboot. That is, for most people, the only difference: does the trojan get ring 0 right now, or only after you reboot.
|
Absolutely right! I´ve always said that in such an environment a virus doesn´t need SF to harm your system, but it seems that many people here still are paranoid about it.