How did KAV or AVG or the others know it was fake? THe AV engine is supposed to detect viruses either by their signature or by their potentiality to cause mischief. How can a AV let go a file which has the same signature as that of a trojan? We all know an AV's ability to detect viruses has got nothing to do with their "intelligence", of which they have none.