New Scam: Web Spy Shield

This is a new scam, which does a fake scan of your PC off of a web page. Pretty cool to watch — it just makes stuff up.

As Sunbelter Patrick Jordan says:

It installs a toolbar and an exe in a webspyshield folder however, it is a fake web based scam. You have to be connected for it to run and I would hate to think what anyone may pay for to register it as it is no real software but only a new form of their online scanner scams.

The hijackthis shows it even hijacks the home page.

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://webspyshield(dot)com/scan.html
O2 - BHO: WebSpyShieldToolBarShower - {DC87418B-0B2C-424E-900D-54F2ECE15B6B} - C:\Program Files\WebSpyShield\WebSpyShield.dll
O3 - Toolbar: WebSpyShield - {E4988DE7-C5DB-4173-96F9-AAC426AF7BCE} - C:\Program Files\WebSpyShield\WebSpyShield.dll
O4 - HKCU\..\Run: [WebSpyShield] C:\Program Files\WebSpyShield\WebSpyShield.exe

Alex Eckelberry
(Credit to Bharath)