&gt; Is it all just a sham?<p>Yes, unless you are so computer illiterate as to regularly download old viruses by accident.<p>&gt; How did no one within the company catch it?<p>I doubt they do any reviews of their code beyond QA&#x2F;&quot;Does it work?&quot;<p>&gt; Aren&#x27;t security products developed by at least somewhat security-minded people?<p>No. Pretty much the people who test for vulnerabilities [i.e. actual security-focused programmers] are more expensive than the average Windows desktop programmer.<p>Now just imagine what companies that process your credit cards look like...