Comment ...from the trenches (Score 1) 272
From what I can see, working at a helpdesk with a userbase of ~30000, these are on the rise again, and in the last 2 months, I've had several infections which failed to be picked up by MSE, Avast, Spybot and Sophos.
This year I've had at least 1-3 infected machines a day, 5 days a week, and 90% have been the fake-av variety.
They are also getting more sophisticated recently, doing more and more damage, creating local proxies, adding in rootkits, hiding in system files (instead of user profiles).
So while fake-av's are old news, they are the malware of choice at the moment, and their visibility means a larger number are detected (unlike traditional malware, which Jo Bloggs fails to notice)