Avast and Session 0 isolation in Vista

[Vlk]

Unfortunately, this is not the case... The principal problem is that unlike in Unix/Linux, an already running process cannot be elevated. Ie. the elevation can only occur during process startup.

This is TOTALLY false! UAC is fully programmable and it's better than linux' SUDO!
You can start to study it from here: http://msdn.microsoft.com/windowsvista/reference/default.aspx?pull=/library/en-us/dnlong/html/AccProtVista.asp

jamesvaul, trust me, it is not false (at all).
I know the document very well, and I even personally know some of the people directly involved in the UAC team at Microsoft (we have discussed these things together). I understand UAC pretty well.

You're misinterpreting my statement, UAC is indeed "fully programmable" but what I said still stands (but it's probably too technical to discuss here)...

No need to argue.

[igor]

Besides, if you scroll near the bottom of this document, you can read:

..."Since a process that has started, cannot elevate its permissions, there must be a strategy to launch a separate process if additional privilege is required." ...