hate to say i told you so.. but I did, last year,,
anyway, here's an article pointing out that this issue has been known about since 2004, so i think companies are 100% completely full of shit that say they had no idea..
http://www.benedelman.org/spyware/180-affiliates/