Sorry for resurrecting an old thread, hopefully it's not so old as to be forgotten by the original author.
alch wrote: |
...clamtray does not need admin privileges. |
This is not quite true. If ClamTray is not run as admin on Vista, then if it is used to run ClamWin to scan memory, then it won't detect problems in any admin processes. Run Windows Task Manager and look at the processes tab. You'll notice a "Show processes from all users" button. Take a look at the difference between the list of processes when that button is and isn't pressed. This is the difference between running clamtray as an administrator and not running it as an administrator.
I would
strongly suggest that you run clamtray as an administrator so that when it runs any scheduled scans, it has the privileges to scan all processes and all files. If some virus/trojan does get past UAC and gets admin privileges, then the first thing it will do is make itself unreadable to anything without admin privileges.
This means, of course, that
clamwin is useless to detect any malware that gets past UAC unless it also has admin privileges.