Threat Search: 

ThreatExpert's Statistics for not-a-virus:FraudTool.Win32.WinAntiVirus.kh [Kaspersky Lab]:

not-a-virus:FraudTool.Win32.WinAntiVirus.kh [Kaspersky Lab] is also known as:
Threat AliasNumber of Incidents
AntiVirus2009 [Symantec]9
FakeAlert-GA.dll [McAfee]9
Trojan:Win32/FakeScanti [Microsoft]3

not-a-virus:FraudTool.Win32.WinAntiVirus.kh [Kaspersky Lab] has the following possible countries of origin:
OriginNumber of Incidents
Russian Federation3
Ukraine3

not-a-virus:FraudTool.Win32.WinAntiVirus.kh [Kaspersky Lab] is known to be created as:
%System%\dddesot.dll
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).