The problem with legal solutions is the global market problem. Ban it in the US and EU and you'll still see it being peddled from Russia and China and infecting world-wide computer users all the same. But at the same time you shackle your economy with (invariably overbroad) legislation that increases compliance costs for small businesses and entrepreneurs and gives large corporations another bludgeon to use against smaller competitors.

Better to just let the market put the bad guys out of business because the good guys all blacklist them.