Troj/FakeVir-BH pretends to scan the hard drive and will always find non-existant threats. It pretends to clean up the threats once the user pays a license fee.
Troj/FakeVir-BH creates the following registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Zinaps7
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Microsoft Windows Adapter 5.1.3214