Hi,
I was lead to believe that that sort of Malware detection was done by an Antivirus program not the O/S.

>I agree that UAC needs some adjustments, but the reason it isn't propogated is if malware attempts to update the registry, it doesn't it everyone.
>
>
>>The correct logic should be, when an entry is added to the registry by anyone, it should be propergated to all user virtualized registry stores.
>>
>>Remember it was an update to HKLM not HKCU and it is global to the machine, not the user.
>>
>>MS do have problems with basic logic, that is why there are so many "It is that way by design"'s