Troj/FakeAV-UP is a Trojan for the Windows platform.
When run Troj/FakeAV-UP copies itself to <Windows>\sysguard.exe and sets the following registry entries:
HKCU\Software\Microsoft\Internet Explorer\Download
CheckExeSignatures
no
HKCU\Software\Microsoft\Internet Explorer\Download
RunInvalidSignatures
1
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
LowRiskFileTypes
.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
SaveZoneInformation
1
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
LowRiskFileTypes
<Windows>\sysguard.exe