Disabling malicious objects without corresponding rights
If a file or a registry key is only accessible for users with specific rights that allow modification and removal of these objects or access is entirely denied (some serious malware applications protect themselves in this way) and you cannot remove such an object by any possible means, CESAM will handle this problem.
First, it will lift the existing access restrictions for such objects, which will allow it to work with them – save them for recovery and delete them during the disabling process.
If revoking rights is inefficient for some reason, the system driver will help on the next stage.



