I don't know the answer to that question, but if I was a malware writer, disabling that warning would be the very first thing I would do.