Something that antispyware folks have known for a while. Well, this eWeek article confirms it’s still in there.
Want to see what an exploit looks like? Ben Edelman, antispyware genius, of course has a screen shot.
So you download a certain Windows media player file, then get a popup which can make the uninitiated think that they should click it. (It comes from code MS has in there to allow vendors to have a web page opened from a media file to display specific messages, such as promoting another artist.)
The solution is to download Windows Mediaplayer 10 (but alas, it’s an optional update for XP users, so not all people will know about it).