The WebShield Enter Product Key Tech Support Scam is a Trojan.Tech-Support-Scam that displays a lock screen that blocks you from accessing your Windows desktop. This lock screen pretends to be something called WebShield that asks you to enter your product key to unlock the computer. It further states, in very broken English, that the system was locked due to detected hacking attempts and that the victim should contact the listed phone number to receive assistance.
The text of this lock screen is:
WebShield
Product Key
System frozen hacking threats detected, multiple unknown access source attempted
Call to get professional assistance from certified technician
Customer Support: 877-565-7127
Thankfully, there is a way to remove the screenlocker and gain access to the computer again. At the lock screen, first enter B2563-51757-EDC62-429B8-F56AD and press the OK button to enter a maintenance mode used by the scammers. When the mode is activated, you will see an alert stating that “Support Assistance Override Activated!”.
Press the OK button at the above alert and then enter 13764675 into the field and press the OK button again. Now you will see an alert stating “Activation Successful” as shown below.
Press the OK button again and now the fake lockscreen should close. If it fails to close, the program will probably crash, so be patient. When the lock screen has closed, you will not have a desktop displayed. You can use these instructions to restore your missing desktop and then run your favorite security software.
If you are unable to perform the above steps, then please follow the full removal guide below. To be safe, everyone who is infected with this Trojan should follow the steps below regardless of whether they were able to close the screen using the above instructions as this Trojan is commonly bundled with other unwanted programs.
How was the WebShield Tech Support Scam Installed on My Computer?
It is important to note that the WebShield TSS is bundled with and installed by free programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.
As you can see, this scam was created to trick you into calling the listed phone number so that the developers can try and convince you into making a payment. For no reason should you contact these developers, and if you already have, you should contact your credit card and dispute the charges. To remove this Trojan and any related software for free by using the removal guide below.
Your computer should now be free of the WebShield Enter Product Key Tech Support Scam program. If your current security solution allowed this program on your computer, you may want to consider purchasing the full-featured version of Malwarebytes Anti-Malware to protect against these types of threats in the future.
If you are still having problems with your computer after completing these instructions, then please follow the steps outlined in the topic linked below: