mchain
44
Actually, at the moment, all avast! would have to do is block any malware changes to the windows winlogon and safeboot executables, preferably at the registry key level.
But, as you say, malware writers would find a way around that block too, soon enough. The only real way to end this would be to put these malware programmers in jail for a very long time so their actions can no longer impact innocent users.