How likely is it that these sites serve up clean binaries to Google's spider?
Another explanation is that Google doesn't consider those adware and toolbar as malware... I truly don't know.
I realize this is somewhat off-topic, but thanks for VLC and all that you all do. It's one of my favorite projects, and it's one of the first things I install on friends' machines.
AV companies could recognize and trivially remove such a thing - but chose not to, so they didn't get sued by well-monied corporations who got very upset at their "User Metric Software Toolbar blah blah blah" being marked as malware.
I wonder if that's the case here.