, , log in limited acc .

startup registry , task scheduler.

high privileges Log In , action execute . Run running . event view-.

UAC On, read + execute . , "" .

?