Most Fake AV pages mimic a Windows Desktop application running. In addition, the Fake AV pages have generally been the same regardless of which browser they are viewed. I recently found a new type of Fake AV page that looks different on each browser. And it also uses internal elements of those browsers.
Internet Explorer version
The version for Internet Explorer looks more like the previous pages I've seen.
|Fake AV page for Internet Explorer|
|Virustotal results for malicious executable|
|Fake AV page for Firefox|
|Use of internal Firefox elements|
|First warning from the fake AV page|
|Fake AV page fro Chrome|
|Fake Av warning for Safari|