few users are getting the amsecure.exe virus which after a while comes up with a fake AV. I've been removing it but I'd like to find the source. We don't allow any software installs so my only guess is that it came from a website? We use sophos av.
any tips?