From the
INTEGO SECURITY MEMO:
If Safari’s “Open ‘safe’ files after downloading†option is checked, the package will open Apple’s Installer, and the user will see a standard installation screen. If not, users may see the downloaded ZIP archive and double-click it out of curiosity, not remembering what they downloaded, then double-click the installation package. In either case, the Mac OS X Installer will launch.
Unlike the previous variants of this fake antivirus, no administrator’s password is required to install this program. Since any user with an administrator’s account...can install software in the Applications folder, a password is not needed.
We can't all be right.
