Interestingly, Facebook forces users to submit to having their computers scanned by ESET:
ESET also now happens to be part of Googles Chrome browwser "cleanup":
Also, many developers use the Facebook Graph API to post comments to Facebook as the actual user using the users Facebook access tokens:
(1) “****** Antivirus just saved my computer from infection! Try it now. It’s free.”
(2) “My ****** Antivirus just updated, with powerful new security features. Download it for FREE. You’ll love it.”
(3) “I just installed ****** Antivirus for free. I really like it. If you want the best protection, download ****** like I did.”
How easy would it be for a developer to abuse the Graph API to post comments that could be determined to be hateful or divisive?