ThreatExpert's Statistics for Troj/FakeAV-KT [Sophos]:

Troj/FakeAV-KT [Sophos] is also known as:

Threat Alias Number of Incidents Trojan:Win32/Tibs.gen!lds [Microsoft] 12 Generic PUP.x [McAfee] 9 not-a-virus:FraudTool.Win32.Agent.jc [Kaspersky Lab] 9 RealAV [Symantec] 9 Trojan.Win32.Tibs [Ikarus] 9 Win-Trojan/Fakeav.20480.B [AhnLab] 3

Troj/FakeAV-KT [Sophos] is known to be created as:

%Windir%\iehost.dll

Note: %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.