There’s a new rogue on the loose, SpyHeal (spyheal(dot)com). We believe this is probably the replacement for Spyware Quake (or SpywareQuake).
The product’s EULA is here.. Virustotal results here.
According to Sunbelt’s researcher Patrick Jordan: “From seriall(com)com with the VladZone infestation, it calls the IP for the security scam hijacking and SpywareQuake install. Also, from the sysprotectionpage(dot)com showed spyheal(dot)com as one of the new partner sites.”
Alex Eckelberry