Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 713413" data-attributes="member: 32260">The below article has a good explanation:<a href="https://blogs.msdn.microsoft.com/patricka/2009/12/14/tales-of-application-compatibility-weirdness-demystifying-uac-virtualization/" target="_blank">Tales of Application Compatibility Weirdness – Demystifying UAC Virtualization</a>The UACV is only for compatibility with old applications that try to save data, config files, etc. in Program Files or Windows folders (UAC protected) or store some data in the HKLM registry hive, etc.. Such actions would fail due to insufficient access rights. There is no need to turn ON UACV If you do not use such old applications.Some users complained that the malware could use UACV for hiding in unexpected disk/registry locations but I did not tested it. For example, some tools could miss malware entries in the registry virtual store:HKU\&lt;User SID&gt;_Classes\VirtualStore\Machine\Software</blockquote>

[QUOTE="Andy Ful, post: 713413, member: 32260"] The below article has a good explanation: [URL="https://blogs.msdn.microsoft.com/patricka/2009/12/14/tales-of-application-compatibility-weirdness-demystifying-uac-virtualization/"]Tales of Application Compatibility Weirdness – Demystifying UAC Virtualization[/URL] The UACV is only for compatibility with old applications that try to save data, config files, etc. in Program Files or Windows folders (UAC protected) or store some data in the HKLM registry hive, etc.. Such actions would fail due to insufficient access rights. There is no need to turn ON UACV If you do not use such old applications. Some users complained that the malware could use UACV for hiding in unexpected disk/registry locations but I did not tested it. For example, some tools could miss malware entries in the registry [I]virtual store:[/I] [B]HKU\<User SID>_Classes\VirtualStore\Machine\Software[/B] [/QUOTE]

Verification