Affiliates pushing rogue anti-virus installations are earning millions of dollars as they dupe computer users to hand over cash for a product that doesn't work, says researcher Joe Stewart of SecureWorks.