Troj/FakeVir-CO falsely reports the computer is infected and prompts the user to pay a license fee before pretending to clear the threats.
Troj/FakeVir-CO installs creates the registry value
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Antivirus