Troj/FakeVir-DA pretends to scan the computer and finds non-existant threats. The user is prompted to pay a license fee before Troj/FakeVir-DA pretends to clean up the threats.
Troj/FakeVir-DA creates the registry entry
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
WinSpywareProtect