For what it's worth, I don't think it's strictly fair to call all plugins that inject ads onto pages "malware."<p>If the app -- suppose it's a toolbar or something -- gives the user valuable (to them) functionality, and it was installed legitimately, I think it's perfectly acceptable to monetize that way.<p>So the measure of the malware should be based on the app itself, and how it got onto the computer, and not the apps monetization.<p>While I can sympathize with site owners who could have their reputations tarnished by users seeing ads and assuming they came from the website, I also feel that if I, as a user, want an app and "pay" for it by accepting ads injected into my browsing activity, that strikes me as something I should be allowed to do.