Most likely, since ActiveX is still supported in many places and the problem still continues. There are also ways to spoof the certficate and fake out Authenticode without doing it this particular way. The best way to prevent it is dodge ActiveX enabled pages or set IE to prompt you before executing any ActiveX scripts. I believe there is a similar bug with SSL scripting, but it allows only reading of the user's disks.
Hybrid Mode
