• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Windows Vista UAC 'Nails' Rootkits

zekrahminator

McLovin
Joined
Jan 29, 2006
Messages
9,066 (1.31/day)
Location
My house.
Processor AMD Athlon 64 X2 4800+ Brisbane @ 2.8GHz (224x12.5, 1.425V)
Motherboard Gigabyte sumthin-or-another, it's got an nForce 430
Cooling Dual 120mm case fans front/rear, Arctic Cooling Freezer 64 Pro, Zalman VF-900 on GPU
Memory 2GB G.Skill DDR2 800
Video Card(s) Sapphire X850XT @ 580/600
Storage WD 160 GB SATA hard drive.
Display(s) Hanns G 19" widescreen, 5ms response time, 1440x900
Case Thermaltake Soprano (black with side window).
Audio Device(s) Soundblaster Live! 24 bit (paired with X-530 speakers).
Power Supply ThermalTake 430W TR2
Software XP Home SP2, can't wait for Vista SP1.
Most would agree that Windows Vista's most obvious security feature, UAC, which asks a user for confirmation every time the computer decides to perform an administrative task, can become quite annoying. However, past whatever annoyance a user might perceive, it does have some very useful features. When a security firm pitted seven anti-virus suites against roughly 30 rootkit infections. Unfortunately, none of the programs found all of the rootkits. However, when tested on a Vista platform, Windows Vista's UAC actually prevented the rootkits from getting terribly mangled into the system, which made removal and detection a little easier. If nothing else, UAC kept the system more stable while the rootkit did its thing, and prevented a lot of damage from happening. In fact, when the security firm pitted the rootkit against Windows Vista UAC by itself, all of the rootkits were stopped right in their tracks.

View at TechPowerUp Main Site
 

PVTCaboose1337

Graphical Hacker
Joined
Feb 1, 2006
Messages
9,501 (1.38/day)
Location
Texas
System Name Whim
Processor Intel Core i5 2500k @ 4.4ghz
Motherboard Asus P8Z77-V LX
Cooling Cooler Master Hyper 212+
Memory 2 x 4GB G.Skill Ripjaws @ 1600mhz
Video Card(s) Gigabyte GTX 670 2gb
Storage Samsung 840 Pro 256gb, WD 2TB Black
Display(s) Shimian QH270 (1440p), Asus VE228 (1080p)
Case Cooler Master 430 Elite
Audio Device(s) Onboard > PA2V2 Amp > Senn 595's
Power Supply Corsair 750w
Software Windows 8.1 (Tweaked)
The first thing I did on Vista? Turned off UAC because it does not do crap. (I mean it does, but allows me to do nothing)
 
Joined
Dec 10, 2007
Messages
7,185 (1.15/day)
Location
Adelaide Australia
System Name Becca 2
Processor AMD A10 4600m quad core @ 2.3 ghz
Motherboard dunno
Cooling Logitech alto connect
Memory 16 Gig ddr3 1600mhz
Video Card(s) Ati HD 7660G + & 7470M
Storage 1 TB
Audio Device(s) onboard crap
Software Windows 7 Home Premium 64 bit with sp1
It doesnt stop the fact its as annoying as ya get

Im sure its super great at security but thanks to its mega annoyance ill just use Kaspersky n my router for security.
 

Kreij

Senior Monkey Moderator
Joined
Feb 6, 2007
Messages
13,817 (2.11/day)
Location
Cheeseland (Wisconsin, USA)
I guess I am not sure why people think it is all that annoying.
You only have to perform one extra mouse click to allow a program to run, and then only on programs that could be (potentially) problematic.
 

bowman

New Member
Joined
Apr 15, 2008
Messages
21 (0.00/day)
Processor AMD Athlon X2 6000+
Motherboard MSI K9N Platinum SLI
Cooling Stock
Memory Corsair XMS2 5400 3x1GB
Video Card(s) Nvidia 8800GTX (XFX)
Storage Raptor 150GB+Caviar 500GB
Power Supply Fortron/Source Epsilon 700W
Software Vista Home Premium 32bit
It was really annoying to begin with, now I'm used to it.

What's annoying, is when the UAC popup takes AGES to pop up. Some sort of freeze or bottleneck, some times it takes ages compared to what it'd take just starting the app.
 
Joined
Oct 24, 2004
Messages
1,294 (0.18/day)
Great ! UAC saved the day...but still...

it's comparable to Ubuntu's way of asking root password whenever you perform administratifs or potentially harmfull actions.

in the end, the regular joe (i'm one of them) ends up desactivating UAC and/or log himself as root and kiss the annoyances goodbye
 

HaZe303

New Member
Joined
Feb 12, 2006
Messages
305 (0.04/day)
Location
Sweden (08-Stockholm)
System Name Desktop PC & HTPC
Processor Intel Core i7 920@4.0ghz & Intel Q9450@3.6ghz
Motherboard Asus P6T Deluxe V2 & Asus P5Q-E
Cooling CPU: TRUE w/Noctua P12 Fan & TR Ultima-90I
Memory Corsair XMS 1900mhz & OCZ Reaper 8gb@900mhz
Video Card(s) Gigabyte GTX460OC1GB SLIx2 @840/1680/2000mhz & ATI HD5870@1000/1300mhz + XFX 9800GT PhysX
Storage 3xSamsung TB1 F1@raid0, 2xOCZ SSD@Raid0, and several others..
Display(s) FS LSL 3260W 26" LCD@1920x1200 & LG 37" HDTV@1360x768
Case Silverstone TJ09B (WINDOW DIY) & Silverstone LC17
Audio Device(s) Realtek HD 5.1 DolbySurround & X-FI Titanium Fatal1ty Pro
Power Supply ThermalTake ToughPower 1200W & Corsair TX650W
Software Windows 7 Ultimate x64 RT7Lite x64 & x86.
The first thing I did on Vista? Turned off UAC because it does not do crap. (I mean it does, but allows me to do nothing)
Same here, I even use vlite to disable it so I never have to deal with it in the first place? Maybe I shouldnt?:)
 

jammy86

New Member
Joined
Nov 24, 2007
Messages
105 (0.02/day)
Location
Coventry/Glasgow (uk)
System Name Vostro 200
Processor C2d E6550 (2.33Ghz) 1333MHz
Motherboard Foxconn (dell) G33M02 - bearlake
Cooling Stock Dell supplied cooler(awful) with coolmaster 80mm PWM fan. 92mm POS case fan.
Memory Samsung M378T2953EZ3-CE6 2048meg 667MHz
Video Card(s) HIS 3870 ICEQ3
Storage 2x WD2500JS-75NCB3 (250gb sata)
Display(s) Acer AL1722, Benq T904 (Desktop res: 2560x1024)
Case Dell Vostro 200
Audio Device(s) Auzntech X-Fi Prelude through Gale 4020's + Gale sub
Power Supply Corsair HX 520w
Software Vista Bis 32bit (winamp, vlc and Ultramon FTW)
Benchmark Scores Struggling to break 10K on 3d06.
I guess I am not sure why people think it is all that annoying.
You only have to perform one extra mouse click to allow a program to run, and then only on programs that could be (potentially) problematic.

One extra mouse click, every single time you click the mouse on ANYTHING. If you dont find it gets in the way much, you dont use your computer as intensively as most on here do.

Vista goes like this:

Install
Turn off disney style start menu (same with XP)
Turn off UAC
Turn off the security centre telling me I'm not secure...
finally start to use it.


You know its true.

JAmes.
 

jydie

New Member
Joined
Feb 2, 2006
Messages
209 (0.03/day)
Processor Athlon 64 X2 4200+ (socket 939)
Motherboard ASUS A8R-MVP Express200
Cooling Standard AMD CPU Heatsink/Fan
Memory 1GB Geil PC3200
Video Card(s) Sapphire Radeon X1900GT
Storage 2 Maxtor 7200 HDD (80GB)
Display(s) Samsung 19" LCD
Case Yellow Chieftech Dragon
Audio Device(s) integrated
Power Supply Thermaltake TT-420AD
Software Windows XP Home
I don't use Vista yet, but Spybot will pop up a confirmation window when a program tries to update the registry... and ZoneAlarm does the same when a program tries to go out to the internet. I thought they were annoying at first and barely paid attention to what they were telling me. But after having to re-install Windows XP due to a nasty virus, I have grown to like the confirmation windows. I now WANT to know what is going on "behind the scenes".

The internet is not safe, and I prefer to have my main PC as secure as possible.

If Vista is truly safer to use, I might have to consider upgrading my main PC...
 

Kreij

Senior Monkey Moderator
Joined
Feb 6, 2007
Messages
13,817 (2.11/day)
Location
Cheeseland (Wisconsin, USA)
I am not sure what you mean by "click the mouse on ANYTHING".
90% of the applications on my computer do not popup a UAC dialog box for verification.
It is only programs that do something at a lower (or questionable) level such as ATITool, CCleaner, CoreTemp, etc.

Of course, if 90% of what you do involves programs like these, then yes, I can see it getting a bit tedious.
 
Joined
Jan 31, 2007
Messages
1,407 (0.22/day)
Location
Bellevue, Washington
System Name MorningWood
Processor AMD 7800x3d
Motherboard Asus Tuf
Cooling AIO
Memory 64GB
Video Card(s) 3080ti
Storage 2TB
Display(s) Alienware Oled
Case Fractal Design, North
Software Win11

Kreij

Senior Monkey Moderator
Joined
Feb 6, 2007
Messages
13,817 (2.11/day)
Location
Cheeseland (Wisconsin, USA)
One of the first things I did when I installed Vista was to shut off the UAC and driver signing.
After reading this post, I thought I would try UAC again to see how often it pops up.
Not very often actually.
I think that it would be prudent to leave it on unless you are using programs repeatedly that cause a popup. If I was going to run some benches I would turn it off for the duration of my testing and then turn it back on when just doing regular work.

Just my 2 cents. Whatever works for you is what you should do.
 
Joined
Nov 30, 2004
Messages
181 (0.02/day)
Location
UK, Lincoln
System Name Omicron
Processor Athlon X2 3800 @5000
Motherboard Asrock 939DualSATA2
Cooling Zalman
Memory 2x 1gb Corsair XMS DDR3500PRO 2-3-2-6 1t
Video Card(s) Radeon 3870
Storage Seagate 320gb
Display(s) BenQ FP241w
Case X-Blade Deluxe
Audio Device(s) Creative X-Fi Music
Power Supply Corsair HX620
Software WinXP SP2
I found Tweakuac useful for enabling Silent uac mode. the benefits of uac without the annoyance. although security centre still thinks its off so that side is still an annoyance requiring dissabling it ;)
 

Cold Storm

Battosai
Joined
Oct 7, 2007
Messages
15,010 (2.38/day)
Location
In a library somewhere on this earth
System Name Haro
Processor AMD 1700x
Motherboard AsRork x370 Taichi
Cooling EK Custom Loop - CPU only
Memory 32gb G-Skill Trident Z
Video Card(s) EVGA 1080 Superclock 2
Storage Too Many
Display(s) Viewsonic VX2450WM-LED 24" & LG 32 IPS
Case Cooler Master Cosmos II
Power Supply Cooler Master V1000
Mouse SteelSeries Rival 500
Software Win10 Pro
Benchmark Scores i5 750 4.62ghz pi runs // Evga FTW p55
I think UAC is good for the every day joe... Ones who don't know that much about computers but just to get online and talk... But, for people like us, I can see it getting annoying. I've installed Vista about 4 times in the past few months because of killing things... and After the first two times, I made sure it was the first thing I shut off! Good tool, but No need for me to use it.
 
Joined
Apr 7, 2008
Messages
633 (0.10/day)
Location
Australia
System Name _Speedforce_ (Successor to Strike-X, 4LI3NBR33D-H, Core-iH7 & Nemesis-H)
Processor Intel Core i9 7980XE (Lapped) @ 5.2Ghz With XSPC Raystorm (Lapped)
Motherboard Asus Rampage VI Extreme (XSPC Watercooled) - Custom Heatsinks (Lapped)
Cooling XSPC Custom Water Cooling + Custom Air Cooling (From Delta 220's TFB1212GHE to Spal 30101504&5)
Memory 8x 8Gb G.Skill Trident Z RGB 4266MHz @ 4667Mhz (2x F4-4266C17Q-32GTZR)
Video Card(s) 3x Asus GTX1080 Ti (Lapped) With Customised EK Waterblock (Lapped) + Custom heatsinks (Lapped)
Storage 1x Samsung 970 EVO 2TB - 2280 (Hyper M.2 x16 Card), 7x Samsung 860 Pro 4Tb
Display(s) 6x Asus ROG Swift PG348Q
Case Aerocool Strike X (Modified)
Audio Device(s) Creative Sound BlasterX AE-5 & Aurvana XFi Headphones
Power Supply 2x Corsair AX1500i With Custom Sheilding, Custom Switching Unit. Braided Cables.
Mouse Razer Copperhead + R.A.T 9
Keyboard Ideazon Zboard + Optimus Maximus. Logitech G13.
Software w10 Pro x64.
Benchmark Scores pppft, gotta see it to believe it. . .
So what they are trying to say is that Vista being so annoying finally has a single usefullness! Except, its not all that because all it does is make the clean up proceedure a little easier. End result, Vista was still compromised. So to us end users, its back to useless.

I have no doubt that UAC promotes more trouble then it resolves.
 
Joined
Mar 26, 2006
Messages
517 (0.08/day)
Location
Stamford, UK
System Name The Money Sink
Processor Intel i7-5960X at 4.60Ghz
Motherboard MSI X99A Godlike
Cooling Custom watercooling loop, single D5 -> CPU, dual D5 -> GPU's
Memory 64GB DDR4-3000
Video Card(s) 2 x 1080Ti @ Stock for the moment (40oC LOAD)
Storage 960GB Mushkin Scorpion Deluxe and 2 x 512GB M.2 SSD RAID0
Display(s) Dual Curved LG 34" Display
Power Supply EVGA 1600W G2
Software Windows 10
Benchmark Scores ALOT
I still have mine activated, and to take it one step further ive made it ask for my password as well... Am I sad lol?
 
Joined
Sep 14, 2006
Messages
668 (0.10/day)
Location
QLD, Australia
Processor Ryzen 9 7950X3D
Motherboard Asus ROG X670E GENE MATX
Cooling Phanteks Glacier One 280MPH AIO
Memory G.Skill 48GB (2x24GB) F5-8000J4048F24GX2-TZ5RK Trident Z5 RGB 8000MHz DDR5
Video Card(s) ASUS TUF Gaming Radeon RX 7900 XTX OC Edition 24GB GDDR6
Storage Crucial T700 Gen5 2TB NVMe | Crucial P5 Plus Gen4 2TB NVMe | Crucial P5 Plus Gen4 1TB NVMe
Display(s) AOC U3277PWQU 32in 4K
Case Phanteks Enthoo Evolv mATX TG
Audio Device(s) Onboard SPDIF --> Logitech Z-5500
Power Supply Seasonic ATX 3.0 VERTEX-GX-1000
Mouse Razer Mamba Chroma
Keyboard Razer Cynosa V2 Chroma
Software Arch Linux
Well, something that annoying surely has to have a benefit.
 
Joined
Feb 10, 2007
Messages
2,698 (0.41/day)
Location
Oulu, Finland
System Name Enslaver :)
Processor Ryzen 7 7800X3D
Motherboard ASUS TUF Gaming B650-Plus
Cooling CPU: Noctua D15 G2, Case: 2 front in, 1 rear out
Memory 2x16GB Kingston Fury Beast RGB 6000MHz
Video Card(s) ASUS TUF RTX 4070Ti OC
Storage Samsung Evo Plus 1TB NVMe , internal WD Red 4TB for storage, WD Book 8TB
Display(s) LG CX OLED 65"
Case Lian Li LANCOOL II Mesh C Performance
Audio Device(s) HDMI audio powering Dolby Digital audio on 5.1 Z960 speaker system
Power Supply Corsair RM850x
Mouse Logitech G700
Keyboard ASUS Strix Tactic Pro
Software Windows 11 Pro x64
Spybot´s tea-timer function does the same in XP? or am i mistaken..
 
Last edited:

jydie

New Member
Joined
Feb 2, 2006
Messages
209 (0.03/day)
Processor Athlon 64 X2 4200+ (socket 939)
Motherboard ASUS A8R-MVP Express200
Cooling Standard AMD CPU Heatsink/Fan
Memory 1GB Geil PC3200
Video Card(s) Sapphire Radeon X1900GT
Storage 2 Maxtor 7200 HDD (80GB)
Display(s) Samsung 19" LCD
Case Yellow Chieftech Dragon
Audio Device(s) integrated
Power Supply Thermaltake TT-420AD
Software Windows XP Home

Rebo&Zooty

New Member
Joined
May 17, 2008
Messages
490 (0.08/day)
uac=microsofts unpolished attempt to copy how linux handles user security........


blah, it drove me crazy when i was using vista.........i dont need asked every 20sec if im sure i want to do something.

http://www.youtube.com/watch?v=uDiaQrZviyc

saddly this mac vs pc video is more true then any of the rest.........
 

imperialreign

New Member
Joined
Jul 19, 2007
Messages
7,043 (1.10/day)
Location
Sector ZZ₉ Plural Z Alpha
System Name УльтраФиолет
Processor Intel Kentsfield Q9650 @ 3.8GHz (4.2GHz highest achieved)
Motherboard ASUS P5E3 Deluxe/WiFi; X38 NSB, ICH9R SSB
Cooling Delta V3 block, XPSC res, 120x3 rad, ST 1/2" pump - 10 fans, SYSTRIN HDD cooler, Antec HDD cooler
Memory Dual channel 8GB OCZ Platinum DDR3 @ 1800MHz @ 7-7-7-20 1T
Video Card(s) Quadfire: (2) Sapphire HD5970
Storage (2) WD VelociRaptor 300GB SATA-300; WD 320GB SATA-300; WD 200GB UATA + WD 160GB UATA
Display(s) Samsung Syncmaster T240 24" (16:10)
Case Cooler Master Stacker 830
Audio Device(s) Creative X-Fi Titanium Fatal1ty Pro PCI-E x1
Power Supply Kingwin Mach1 1200W modular
Software Windows XP Home SP3; Vista Ultimate x64 SP2
Benchmark Scores 3m06: 20270 here: http://hwbot.org/user.do?userId=12313
hmmm - so Vista blocks rootkits . . .


I wonder if that's because it's an extravagant, over-bloated, selfish rootkit itself, and doesn't play nicely with others :wtf:
 

Davidelmo

New Member
Joined
Oct 30, 2007
Messages
330 (0.05/day)
Processor Intel i7 920 @4.20Ghz
Motherboard Gigabyte EX58 UD5
Cooling Titan Fenrir
Memory 6Gb Patriot 1600Mhz
Video Card(s) ATI HD4870 1Gb
Storage 2x250Gb Seagate Barracuda (RAID 0) plus 2B storage
Display(s) Samsung 22 inch Widescreen
Case Coolermaster HAF 932
Audio Device(s) Auzen Prelude 7.1
Power Supply PCP&P 750W Silencer
Software Win7 beta
Great ! UAC saved the day...but still...

it's comparable to Ubuntu's way of asking root password whenever you perform administratifs or potentially harmfull actions.

in the end, the regular joe (i'm one of them) ends up desactivating UAC and/or log himself as root and kiss the annoyances goodbye

Werd.

I hate UAC, but I recently insalled Ubuntu on my laptop and to be fair, tha is probably even worse from an "annoyance" point of view (i.e. you need to enter a password.. not just click "ok".)

However, I actually have confidence that Ubuntu is secure.. I don't really feel that UAC makes Visa any more secure.... it just annoys me when I'm trying to delete something and I have to click an exra time.
 
Joined
Apr 7, 2008
Messages
633 (0.10/day)
Location
Australia
System Name _Speedforce_ (Successor to Strike-X, 4LI3NBR33D-H, Core-iH7 & Nemesis-H)
Processor Intel Core i9 7980XE (Lapped) @ 5.2Ghz With XSPC Raystorm (Lapped)
Motherboard Asus Rampage VI Extreme (XSPC Watercooled) - Custom Heatsinks (Lapped)
Cooling XSPC Custom Water Cooling + Custom Air Cooling (From Delta 220's TFB1212GHE to Spal 30101504&5)
Memory 8x 8Gb G.Skill Trident Z RGB 4266MHz @ 4667Mhz (2x F4-4266C17Q-32GTZR)
Video Card(s) 3x Asus GTX1080 Ti (Lapped) With Customised EK Waterblock (Lapped) + Custom heatsinks (Lapped)
Storage 1x Samsung 970 EVO 2TB - 2280 (Hyper M.2 x16 Card), 7x Samsung 860 Pro 4Tb
Display(s) 6x Asus ROG Swift PG348Q
Case Aerocool Strike X (Modified)
Audio Device(s) Creative Sound BlasterX AE-5 & Aurvana XFi Headphones
Power Supply 2x Corsair AX1500i With Custom Sheilding, Custom Switching Unit. Braided Cables.
Mouse Razer Copperhead + R.A.T 9
Keyboard Ideazon Zboard + Optimus Maximus. Logitech G13.
Software w10 Pro x64.
Benchmark Scores pppft, gotta see it to believe it. . .
I still have mine activated, and to take it one step further ive made it ask for my password as well... Am I sad lol?

Not sad, just extremely patient. Patience is something i lack!
Allow / Deny ? ' You frickn just asked me!
 
Joined
Oct 19, 2007
Messages
8,262 (1.32/day)
Processor Intel i9 9900K @5GHz w/ Corsair H150i Pro CPU AiO w/Corsair HD120 RBG fan
Motherboard Asus Z390 Maximus XI Code
Cooling 6x120mm Corsair HD120 RBG fans
Memory Corsair Vengeance RBG 2x8GB 3600MHz
Video Card(s) Asus RTX 3080Ti STRIX OC
Storage Samsung 970 EVO Plus 500GB , 970 EVO 1TB, Samsung 850 EVO 1TB SSD, 10TB Synology DS1621+ RAID5
Display(s) Corsair Xeneon 32" 32UHD144 4K
Case Corsair 570x RBG Tempered Glass
Audio Device(s) Onboard / Corsair Virtuoso XT Wireless RGB
Power Supply Corsair HX850w Platinum Series
Mouse Logitech G604s
Keyboard Corsair K70 Rapidfire
Software Windows 11 x64 Professional
Benchmark Scores Firestrike - 23520 Heaven - 3670
Still not worth having on.
 
Top