Defeating UAC with a two-stage malware attack

Defeating UAC with a two-stage malware attack by ZDNet's Ryan Naraine -- An independent security researcher has released details on a two-stage malware attack against Windows Vista to show how easy it is for non-privileged code to replace shortcuts on the Start Menu and intercept UAC (User Account Control) privilege elevation prompts.