What is Security Sphere 2012?
Security Sphere 2012 apears to be a clone of Personal Shield Pro and related to other malware clients such as Security Tool and System Tool. This is a fake security program that shows false scan results and error messages in an effort to trick users into making a purchase of the client. Ignore these false scans and error messages as they are just there to trick you into making a purchase.
[starreviewmulti id=1 tpl=20]
How Did I get infected with Security Sphere 2012?
In our testing of Security Sphere 2012 it seems that users mostly get infected with this virus from being tricked into installing it from a fake video codec or video update file. These types of scams are very common. I should mention that when we did have Spyware Doctor with Antivirus enabled it did fully block the install of this threat. Having proper anti-virus protection can go a long ways in preventing further viruses and will also help you remove Security Sphere 2012.
What is Security Sphere 2012 Doing to My Computer Right Now?
It does seem that for many computers you will not be able to run many executable programs in normal mode and brining up the TaskManager can be blocked. You will see false scan results and possible search re-directs from this threat. It is not stealing personal information, e-mail addresses or passwords. You should still remove Security Sphere 2012 ASAP and run a full virus scan to ensure you are not infected with any trojans that may be causing other issues. It's very common for users to be infected with trojans along with this malware.
Some of the common messages we are seeing from this virus:
"Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software"
"Security Sphere 2012 Warning
Your computer is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid theft of your credit card details.
Click here to activate protection."
"Warning!
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software."
Security Sphere 2012
» Download Security Sphere 2012 Removal Software
What Do I Do To Remove Security Sphere 2012?
Follow our Security Sphere 2012 removal guide below to learn how to remove Security Sphere 2012 from your computer. Be sure to read the full guide first and you should also run a full scan with Spyware Doctor with Antivirus as well.
Automatic Security Sphere 2012 Removal
Online Security Sphere 2012 Removal Service
Remove Proxy Setting so You Can Connect to the Internet Again. Some need this some do not.
Security Sphere 2012 Manual Removal Procedures
The first step you must take in order to remove Security Sphere 2012 is to stop the following process.
- SecuritySpher 2012.exe ( This file name will mutate and change over time. Expect your file name to be different )
Know File Path Locations
XP
-
C:\Documents and Settings\[Username]\Application Data\
C:\Documents and Settings\YOUR USER NAME\ApplicationData\Local\Temp\
Vista / Windows 7: One of the below
- c:\users\[username]\AppData\local\
- C:\Users\YOUR USER NAME\AppData\Local\Temp\
- C:\Users\[Username]\AppData\
To Stop this process you can
A. Browse to the file location shown below and re-name the file first and then restart your computer. Then browse to that file location again and delete the file. Take note that you can sort the files by date and help rule out most files and folders. Chances are you will only have a few files that appear within the date range you first became infected.
B. Boot into Safe Mode and delete the file
C: Use the Task Manager to find the location of the file and re-name it then delete after re-boot. Most people will have this disabled and not working. However some users can use it the very second you log into the operating system. You have about 10 seconds to locate the file before the Task Manager will close.
D: Log-into another users account and see if you can delete the file.
E: Start the Task Manager the very second you login and terminate the process that way.
The next step in Security Sphere 2012 removal is to delete the following file. You NEED to re-boot your computer first if you re-named the file as you can not remove a file that is running.
If you are unable to find the Executable you need to delete then you should boot into safe mode with Networking and install the Spyware Doctor with Antivirus Client and run a full scan.
KNOWN LOCATIONS OF THIS VIRUS
XP
-
C:\Documents and Settings\All Users\Application Data\Security Sphere 2012\Security Sphere 2012.exe %
-
C:\Documents and Settings\All Users\Application Data\Security Sphere 2012\Security Sphere 2012.ico %
-
C:\Documents and Settings\All Users\Application Data\Security Sphere 2012\sysl32.dll %AppData%\Security Sphere 2012\wf.conf
-
C:\Documents and Settings\All Users\Application Data\Security Sphere 2012\%UserProfile%\Desktop\Security Sphere 2012.lnk
Vista / Windows 7:
-
%AppData%\Security Sphere 2012\Security Sphere 2012.exe %
-
AppData%\Security Sphere 2012\Security Sphere 2012.ico %
-
AppData%\Security Sphere 2012\sysl32.dll %AppData%\Security Sphere 2012\wf.conf
-
%UserProfile%\Desktop\Security Sphere 2012.lnk %
-
StartMenu%\Programs\Security Sphere 2012\Security Sphere 2012.lnk
Be sure to run a full virus scan once you are done. This ensures you have gotten all the virus traces and that you have no other malware on your computer.
If you find this threat too hard to remove yourself and need an expert we recommend this remote computer repair. They charge far less than others and are great at what they do.
Security Sphere 2012 Registry Removal Procedures
Editing the Windows Registry is not recommended for most users. One little slip and you can kiss your operating system good by. It's better to just let antivirus software repair and edit the rgistry. You may also want to consider using the PC Health Advisor Trial Here to clean out the registry and scan for other malware.
Here are the registry traces for your refference only. Please help update these traces by posting a comment below
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\”Security Sphere 2012?
Security Sphere 2012 Directories:
XP
- C:\Documents and Settings\All Users\Application Data\Security Sphere 2012
Windows 7 / Windows Vista
- %AppData%\Security Sphere 2012
%StartMenu%\Programs\Security Sphere 2012
Conclusion
Like with most Malware the hardest part is simply stopping the main executable. Once you do that it should be smooth sailing. Always run a full virus scan once done to ensure you have no other infections. We like Spyware Doctor with Antivirus. If you require advanced help or just want an expert to remove the virus for than use this computer repair service.
Related Article Keywords: Security Sphere 2012, Remove Security Sphere 2012, Security Sphere 2012 Removal, How to Remove Security Sphere 2012, Delete Security Sphere 2012
Thanks guys … VERY big help. – brad
I just received this Sphere virus – did some research and found out that you require Spyware Doctor with Antivirus and Registry Mechanic, I asked why to the tech support, because the spyware doctor with antivirus will hunt down the virus, completely removing it from your hard drive, and it blocks it 🙂 and on top of that the registry mechanic will clean out the registry files because the Sphere virus does leave traces to re-install it self, so the registry will completely remove it as well and therefore you have full access of your desktop – took about 30 minutes to do everything and I am back to normal.
I downloaded Spyware Doctor.
After running a diagnostic, which identified and attempted to correct Security Sphere, the computer was unable to run on “Normal” settings. I was forced to only choose one of the three “Safe Modes.”
While in the midst of conducting another diagnostic on Safe Mode, 20 pop ups emerged and my computer rebooted on its own. Since then, when I turn on the computer, it opens to a blank, black screen. What options do I now have?
Thank you
Not 100% sure exactly what you are seeing. If I understand correctly, when you boot your computer you get nothing but a blank screen. No options at all.
You should at least get the bios splash screen when you turn on your computer. If you are not I would lean more toward a hardware issue. Asuming you are getting a blank screen after the bios splash screen, I would check to see if their is a currsor blinking in the top left of the screen. If there is then your computer is trying to boot to something that is not bootable. Disconnect any printers and other periphrials except the mouse and keyboard and re-boot.
If that does not work I would suggest using the Windows CD to check and repair any damage to the startup process. Just boot to your recovery CD or Install CD to do this. If you did not make one (YOU SHOULD OF) then go over a friends house to make one. To do this all you have to do is clikc the Windows Icon on the bottom left of Windows 7/Vista and type the word create in the search box. The first option should be to create a repair disk.
You may also be able to boot into safe mode if you have not tried that yet. Sounds like you did. If so you can maybe run either a system restore or the SDA client in safe mode to remove the threat.
So, I got dooped. I actually bought the sphere security crap. It doesn’t seem like anything is really happing to the actual computer but the internet is really messed up. I can’t really go to any website, especially ones for downloading anti-virus. I have followed all the instructions i can find online about manual deletion and can’t even find any of the registries or files. I need some major help. Before i knew what it was i reconfigured my computer back to factory settings. Any ideas?!!!