Sunbelt team found a new scam, which does a fake scan of your PC.
It installs a toolbar and an exe in a webspyshield folder however, it is a fake web based scam. You have to be connected for it to run and I would hate to think what anyone may pay for to register it as it is no real software but only a new form of their online scanner scams.
The hijackthis shows Web Spy Shield:
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://webspyshield(dot)com/scan.html
O2 – BHO: WebSpyShieldToolBarShower – {DC87418B-0B2C-424E-900D-54F2ECE15B6B} – C:\Program Files\WebSpyShield\WebSpyShield.dll
O3 – Toolbar: WebSpyShield – {E4988DE7-C5DB-4173-96F9-AAC426AF7BCE} – C:\Program Files\WebSpyShield\WebSpyShield.dll
O4 – HKCU\..\Run: [WebSpyShield] C:\Program Files\WebSpyShield\WebSpyShield.exe
If have problems with uninstall WebSpyShield, then please follow the steps outlined in the topic linked below
Spyware removal – Read Before Posting
Read more: New Scam: Web Spy Shield
