Online criminals are making millions of pounds by convincing computer users to download fake anti-virus software, internet security experts claim.