I was reading an article on .desktop files used to spread malware on Gnome and KDE. I just thought that the same could be applied to Windows.
Malware is disguised as a picture by changing icon. >> Funny pic
User opens it.
Copies itself to a place without UAC (Admin) like My Documents.
Replaces a shortcut like Firefox with its own location and retains the Icon.
The user opens it. Asks for UAC. Even says unsigned.
Windows user ignores the Unsigned warning gives it UAC.
Malware opens Firefox. The user doesn't realise a thing.
The computer is infected.
Would this work? Is UAC required for changing a shortcut of a protected location?
Edit: The whole point of this is to gain UAC without asking for it when it opens but trick the user into giving it UAC impersonating firefox or some other program.