1. A computer-implemented method for detecting scareware comprising: accessing, using a web crawler and without regard to a particular search query, one or more webpages to be evaluated, at least one of which being a landing page effective to automatically access one or more redirection pages; comparing, using a classifier, the features extracted with features of known scareware and non-scareware pages, the known scareware and non-scareware pages having been previously classified by the classifier, the comparing comprising determining features effective to determine a likelihood that the landing page and the one or more redirection pages is a scareware page based on the number of times the considered feature occurs in the known scareware pages, the number of times the considered feature does not occur in the known scareware pages, the number of times the considered feature occurs in the known non-scareware pages, and the number of times the considered feature does not occur in the known non-scareware pages; and in response to determining the landing page or at least one of the redirection pages is a scareware page, storing page data and pop-up data associated with the landing page and any associated redirection pages with a label indicating the page data and pop-up data are associated with a scareware page, and storing reference feature data for the scareware page locally.
3. The method of claim 1 , wherein the features are selected from the group comprising uniform resource locators (URLs), text, image interest points, image descriptors, a number of pop-ups generated, internet protocol (IP) addresses, hostnames, domain names, text derived from images, images, metadata, and identifiers of executables.