Users continue to get slammed by a Rogue Antivirus distributor. We've posted before about the prevalent Virut family redirecting compromised hosts to these distributors are bundling and reusing in an attempt to increase the networking throughput of the system.

When there is money to be made on scareware, the same behaviors will be displayed again and again in malware, including the stuff by sloppy authors.

Source: http://blog.threatfire.com/2009/07/advanced-virus-remover.html