Troj/FakeVir-AB is a Trojan for the Windows platform.
When Troj/FakeVir-AB is installed, it creates files in the following locations:
<Windows>\wincom27.dll
<Windows>\system\ext32inc.dll
<Program Files>\ContraVirus\
When run, Troj/FakeVir-AB displays the following fake warning message:
"Warning - <Number> dangerous infections found!
If not quarantined immediately, these infections may cause the following problems:
- Lost Documents and Settings
- Permanent Data Loss
- System not starting up
- System Slowdown and Crashes
- Loss of Internet Connection
- Infecting other computers on your network"
Then prompts the user to register to "eliminate these security hazards".
Troj/FakeVir-AB also provides fake scan results that list the files Troj/FakeVir-AB placed on the system:
<Windows>\wincom27.dll
<Windows>\system\ext32inc.dll
as infected with Adware.