A fake Avast scan tells you your PC is infected, then installs the malware that steals passwords, session data and crypto ...