In fact its both & thats my point & they turn it off & then cry when they got infected in the first place even tho they installed 3rd party protection.
The firefox example is much easier todo with UAC turned off & a virus would not need to do changes at memory level to do it, ok the format part was a little far fetched
as there would be no point as in most cases it all about making money from you in someway.
“The main goal of User Account Control is to reduce the exposure and attack surface of the operating system by requiring that all users run in standard user mode. This limitation minimizes the ability for users to make changes that could destabilize their computers or inadvertently expose the network to viruses through undetected malware that has infected their computer.”