For some reason I wasn't able to access their site before, but now that I can, I can see that it is pure BS. Their software can't be all that good if it can't even detect my correct IP address (doing a security scan at www.grc.com
always picks up my corect IP address), but showing the contents of your C: drive and implying they know that about you is awful. I don't know if it is illegal or not, but it sure seems fradulent to me.
I doubt it is a company on the level: no e-mail address, a P.O. Box for a snail mail address, and it is not in the phone book. I've half a mind to e-mail the BBB or the Montana Attorney General's office about this. Definitely one for Bruce Schneiers's Doghouse in his monthly cryptogram