In short: the user would have believed they had a working antivirus, while actually having a backdoor for attackers.