This SEEMS (please correct me if I'm wrong) that by visiting the web page it downloaded a file. And then the end user EXECUTED IT.

WTF?