MSHTML and spyware