New rogue making its mark: SpyHeal
The names of rogue applications these days get weirder and weirder.
You know the one that says: “Now $49.50″. Which, like you may know. Is the same price as previous Rogues.
And even researchers at Sunbelt believe that this is probably the replacement for Spyware Quake (or SpywareQuake). Which you can read on here.The company behind this is SpyHeal LCC, which according to Whois.net is based in Sydney, Aus.
As always various fixes will be updated to help remove this program.This program is a rogue. If you have been a victim of this, please visit and register at our Forum for free help.
You can also support this article and Digg it here!
Edit – Removal Instructions can now be found in our own forum. Sorry for the long Hyperlink. I could’nt resist ;)


now that looks nasty in the extreme :-(
It isn’t the first and it won’t be the last
I installed it from the site.
It seems to be very very good.
I dont know why it is bad??
Have you had a read at this post:
http://www.bleepingcomputer.com/securityblog/2006/07/09/spyheal-new-rogue-antispyware/
\”There is 1 server for both SpyHeal.com and SpywareQuake colocated at the same ISPs: inhoster
intercafe\”
At this moment in time we are after more info on this product. Grinler(from BC), is apparently having notifications about this product. I haven\’t tested it personally as I don\’t have a test box.
I’ve had SpyHeal residing on my pc for a good 6 weeks now. Not really bothered to remove it. Whoops!
I use Kaspersky Anti-virus 5, but the license has just run out. I harly ever run the checker as it slows down my pc pretty badly. However, after enablung real-time protection I found almost 30 trojan attacks in the space of 3 hours. SpyHeal and VirusBurster appear to be the cause.
Yep, nasty to the EXTREME. In the most extreme sense of the word :(
Oh well… thanks to bleepingcomputer.com (sorry guys, found that site better) I’ve now removed it. :)
The main thing here being is that you got clean. Thanks for letting us know.