Unmasking FAKEAV

Iframe infections from websites and .HTML files ... users to buy fake antivirus software • Terminates ... components from users or antivirus software, thus preventing deletion.

http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp_unmasking-fakeav.pdf