^woody^ to be fair to home users being infected by this scummy scare ware is worryingly easy.
I have seen many htaccess hacks that have tried to install this software (and variants of). When clients have used google to search for a site they have been misdirected to infected sites.
It is easy to see how users hit the x in the html pop ups thinking that that they are closing the window and not realising that they are infecting their machines.
This product has the most aggressive malicious affiliates of any that I have encountered. This is not helped by the fact that for a long time AV providers were worried about court action if they flagged it as a virus. (how long did it take for the big boys, other than Prevx, to detect and remove Micro Billing Systems for example)
I only know of two people that have been foolish enough to pay up (I was on holiday) and both of them are pursuing extra payments that they did not authorise.
I have seen many htaccess hacks that have tried to install this software (and variants of). When clients have used google to search for a site they have been misdirected to infected sites.
It is easy to see how users hit the x in the html pop ups thinking that that they are closing the window and not realising that they are infecting their machines.
This product has the most aggressive malicious affiliates of any that I have encountered. This is not helped by the fact that for a long time AV providers were worried about court action if they flagged it as a virus. (how long did it take for the big boys, other than Prevx, to detect and remove Micro Billing Systems for example)
I only know of two people that have been foolish enough to pay up (I was on holiday) and both of them are pursuing extra payments that they did not authorise.