This was debunked just a couple weeks ago. There are no Vista rootkits if you leave UAC turned on.
And after the first five minutes of use, how many people do you really think are going to leave that on instead of killing it??? Remember, Vista’s UAC was *deliberately* designed to annoy users - Microsoft themselves admit it.
Most Vista boxes I’ve seen have had UAC disabled by angry users.