From what I see it runs as a user and doesn't need admin rights at all. It tells them they are infected and asks for cash. Once it is in, it tries to download crap but in my experience if the antivirus is up to date that crap is removed. Of course it is not a virus, it is an app, so it is not removed by the AV.
There is always a way around any walls you put up.
|