There was also a site, realphx.com, that had hired a programmer to make an advertising campaign for the site, which btw sells an anti adware program.
What the site did when you visited it was use the exploit, which uses the html applications and the tags together in a fashion to trick the page into letting the application download without actually asking permissions, and then after it had the malicious program running it would make, dl, or somehow put a small program in your c: directory and add it to the registry so it was run everytime the computer was.
This little program would make ads popup, replace your profile with a link to the site, reset your homepage to the site, and possibly more, but all this time creating such havok also selling a program to get rid of it all for only $8.75 I think.:mad:
Needless to say the site has since put disclaimers and appologies on their site, since it propogated quite fast through the internet via profiles and maybe other forms of linking. 😉