Sophos has posted a blog entry about a fake anti-virus for Windows XP. The author of the blog entry included two screen shots of the EULA. In the EULA, there is no “I do not Agree” button or a similar button to say that the user is not willing to install the software based on the EULA. Therefore, there was no way out except to click the button which says, “Agree and install”.

This is detected as Troj/FakeAV-DB. When users try to uninstall the software, the operating system will show an error message which says, “Uninstall.exe has encountered a problem and needs to close. We are sorry for any inconvenience.”

Source: Sophos