I’ve spent most of my day today fighting with a combination of virus and viruses. The virus downloads and installs the virus faster then I can remove it.
The virus also removes the hosts files on the PC making it impossible to be connected to the Internet and manually block the site that is being used to download the spyware from.
So I was thinking, why not create a DNS server that redirects known spyware requests to a spyware warning page instead of going to the page itself. On the second request, or after an acknowledgement, it could continue on the real page.
Of course this would take effort and resources to make it viable, and it could easily be used to try and block your competitors, but in the long run if no one can get to your website because you installed spyware, then you will not make any money. Remove the profit motive and you remove a significant number of the players.
A well designed system would be about as effective an an RBL is at blocking spam, but that is a 30 to 40% block ratio that could save a lot of time and resources.