Google and Microsoft Trusted Them. 2.3 Million Users Installed Them. They Were Malware.