To Stop Malware, Restrict User Accounts