There are some “interesting” similarities between the home page of the DefenceLab rogue and the web pages of some legitimate anti-virus companies. Our good friends at McAfee alerted us to some of this then Patrick Jordan and Alex Eckelberry took a closer look at the Web site associated with the new DefenceLab rogue that we reported on earlier this week. DefenceLab was the one that directs the potential victim to a Microsoft Support page, but injects html code into the page in his or her browser to make it appear as though Microsoft is suggesting the purchase of the rogue

See more here:
DefenceLab rogue home site has lots of borrowings