I was wondering if the majority of the viruses and worms are created to exploit vulnerabilities of the Windows system (not a third party app), also I would like to see a report.
In Windows a normal user is always (the majority of the time) with admin rights, let's say that the user execute a virus/worm, after it's executed with admin rights, why the would virus/worm would need to exploit a vulnerability? It's already executed, just check
user == admin and just infect the Windows.
The question is:
Why would a bad guy will create a virus to exploit the system?
Allright, I know about UAC but as I said, some users are not educated, so it's not enough to be Admin user, the idea of a virus it's to get SYSTEM rights
Now which it's the purpose of a virus? why not just be a keylogger or the bad guy it's just a troll?
All these comes because I thought that virus programs just steal sensitive about the user, like keylogging or something, why it needs to exploit a vulnerability? I see too complicated to depend of a vulnerability knowing that the vulnerabilities are eradicated with updates