On the face of it, that's quite a clever one.
However, it still relies on you downloading and running something you shouldn't..... "they" can't run it for you.
GPEDIT trusted paths / trusted executables if you don't want to rely on your AV program entirely....
