Still it is amazing he amount of work put into it. Digging a bit more around, I found that the following sites all share the same ip: 64.106.155.30, and share the "Copyright Protect" JavaScript:

http://www.anndeweesallen.com/ http://www.nanoscienceinstitute.com/ http://www.glycemic.com/ http://www.glycemicindextesting.com/ http://www.glycemicresearchlaboratories.com/ http://www.nutrilabusa.com/ http://www.genefoundation.com/ http://www.ediblecomputerchips.com/ http://www.trutinadulcem.com/ http://www.skinnyscience.com/ http://www.skinnyscienceedu.com/ http://www.encoderesearch.com/ http://brsei.org/ http://www.humansportsperformance.com/ http://www.arginineresearch.com/ http://www.humanmaximumperformance.com/ http://www.argm2.com/ http://argandobesity.com/ http://arginineanswers.com/ http://glycemiclifestyle.com/ http://lowglycemicchocolate.com/ http://www.skinnyicecream.com/ http://www.skinnysciencecoffee.com/ http://skinnysciencelibrary.com/ http://sweetinfusedfruits.com/ http://encodefoundation.com/

But of course, I guess you should have guessed already by looking at the 'Edible Computer Chips' and 'Quantum Chocolate' mentioned at the front page :-)
The big question is: is this a scam or a hoax?

I did a quick search for this Nutrilab Corp.

Take a look at the following sites, that all link to each other, and revolves about dr. Ann:

http://www.anndeweesallen.com/ [ip:64.106.155.30]
http://www.nanoscienceinstitute.com/ [ip:64.106.155.30]
http://www.glycemic.com/ [ip:64.106.155.30]
http://www.nutrilabusa.com/ [ip:64.106.155.30]
http://www.genefoundation.com/ [ip:64.106.155.30]
http://www.ediblecomputerchips.com/ [ip:64.106.155.30]
http://www.trutinadulcem.com/ [ip:64.106.155.30]


Notice anything peculiar about the IP-number?

And BBP was indeed used to validate their results:

Pi - Verification
64 hours (Primary - Bellard's BBP)
66 hours (Secondary - Plouffe's BBP)

The actual code is here: http://github.com/cantrell
The platform specific files are configuration files and icons and such.

Okay. So the PDF standard has the potential for launching external (or even embedded) files. In Adobe Reader this will create a warning dialog with the following text: "The file and its viewer application are set to be launched by this PDF file. The file may contain programs, macros, or viruses that could potentially harm your computer. Only open the file if you are sure it is safe. If this file was placed by a trusted person or program, you can click Open to view the file." That seems perfectly clear to me. There is really no reason to change this behavior. This is not an exploit.

AppLocker restricts which applications are allowed to run, not which are allowed to be installed. See e.g. this review.

Firefox > Internet Explorer