The problem is these things are wide in the open and still it goes under AV vendors nose.This is like a browserlocker forcing you to install their addon (which probably does something malicious too)
