The whole &quot;secure desktops&quot; thing is a bit of an oxymoron too. If you can gain admin privileges you can steal any desktop and session token you want and keylog it. I&#x27;ve used that trick before to keylog winlogon&#x27;s &quot;secure&quot; desktop, so surely KeePass would be similarly vulnerable?<p>Additionally a quick patch or in memory modification of KeePass.exe would easily bypass any protection like this, lookup the KeeFarce tool to see an example. I&#x27;d hardly call this an &quot;edge&quot; over plain text files in an encrypted container, considering it does nothing to actually prevent exploitation but simply provides a form of security through obscurity.<p>Ultimately once a system is infected, all you can do are half-measures and will wind up worthless against even a mildly sophisticated attacker. Unless you run the software in a separate machine, you&#x27;re dead in the water and it&#x27;s pointless to discuss what happens post-infection when anything is really possible.