Yes a scam, could even be the latest conficker variant.
Read something that a subset of the infected computers were getting an update that was showing it's "business Model".

One last ditch repair trick can be to do a remote registry on the RUN entry.

Careful though, editing the registry is dangerous ....

__________________
KLK, MCSE

1990 500SL

I was always taught to respect my elders.
I don't have to respect too many people anymore.