Despite all the anti-malware roadblocks built into Windows Vista, a senior Microsoft official is lowering the security expectations, warning that viruses, password-stealing Trojans and rootkits will continue to thrive as malware authors adapt to the new operating system.

Mark RussinovichMark Russinovich (right), technical fellow in Microsoft’s Platform and Services Division, used the spotlight of the CanSecWest security conference in Vancouver to discuss the implementation of UAC (User Account Control) in Windows Vista and made it clear that the feature is not meant to be a security barrier.

“It’s a best effort to raise the bar and stop malware from making changes to the operating system but it’s not a security boundary,” Russinovich said of UAC, the oft-criticized mechanism that requires that all users run without full admin rights.

continued @ Zero Day Blog