I'm not saying it's malware free, but if you look at the virustotal report[1] you'll see it picks it up because it has references to things like msn.com and ads

I'm not saying it's malware free, but if you look at the virustotal report[1] you'll see it picks it up because it has references to things like msn.com and ads.net, which it adds to the hostfile to block the spyware [1]: https://www.virustotal.com/en/file/032d394fd6884a275b8a24dc5dbba3bbcd605c7958f7b2e4c6843e999d7292bd/analysis/1471545110/ https://www.virustotal.com/en/file/032d394fd6884a275b8a24dc5...