Recently we stumbled upon a rogue application that used a very aggressive way to get users to register and pay for a license. It all started with one downloaded file disguised as a movie file, using .wmv.exe extension and using a windows media icon. Once the file was run it started by warning you that your PC may be infected.

At this point it will also have locked up your windows disabling key input such as alt+F4 and ctrl+alt+del. Clicking OK brings up a screen where Your Web Safe offers to scan your machine.

After the scan has finished you will be asked to license YourWebSafe to remove the infections found.

All these screens are actually run in Internet Explorer, so a quick way to get out from this is pressing ctrl+n to open up a new browser window, then typing C: in the Address filed. After that you are free to navigate to and start your scanner at choice.