It&#x27;s not Microsoft&#x27;s or the UAC&#x27;s fault. It&#x27;s Nullsoft&#x27;s fault.<p>NSIS (Nullsoft Scriptable Install System) loads and executes the DLL without any verification.<p>Also, you&#x27;re not hijacking DLLs -- you&#x27;re using a DLL to hijack NSIS (which runs with administrative privileges).