Very agressive fake AV www

With IE6 no activeX so no go





With FF, notice NO icons this time ?



I have my JS options set like this



I then allowed scripts, and after the fake scan had completed i tried to DL the nasty by clicking on every button, but nothing got DL'd ? Tried to close FF in the normal way, no surprises for guessing it wouldn't let me. In fact it then went full screen with NO taskbar etc etc so i used TM to escape. I expected with my JS options set that way it shouldn't have gone full screen ?

*

Next

 

Funnily enough after clearing my cache and going back there, and allowing an iframe to another www and running the fake scan, i could close FF with it's top right X button this time But then this popped up on my desktop



Clicking on any of those buttons relaunched FF and the whole process started again. Never seen that before I opened task manager and saw NO instance of FF listed ? as there had been previously.



I had to go to the Processes tab to successfully kill it. Not sure what tactics they are using, but it seems like several to try and succeed. Still don't know why it didn't DL though ?