As we all know, in the Windows there is an integrity level. But there is an opportunity to raise it, quite legally, without any exploits. Through the function ShellExecute Runas.
Malware calls this functuin in a loop, and reaches admin privileges. The user can not cancel it, because malware call it in an infinite (or very big) loop.
Why is that? Why Microsoft can not somehow track this and ban? What is the point of integrating, if each application can become an administrator?
Malware calls this functuin in a loop, and reaches admin privileges. The user can not cancel it, because malware call it in an infinite (or very big) loop.
Why is that? Why Microsoft can not somehow track this and ban? What is the point of integrating, if each application can become an administrator?
