Security Sphere 2012

What is Security Sphere 2012?

Security Sphere 2012 apears to be a clone of Personal Shield Pro and related to other malware clients such as Security Tool and System Tool. This is a fake security program that shows false scan results and error messages in an effort to trick users into making a purchase of the client. Ignore these false scans and error messages as they are just there to trick you into making a purchase.

 How Did I get infected with Security Sphere 2012?

In our testing of Security Sphere 2012 it seems that users mostly get infected with this virus from being tricked into installing it from a fake video codec or video update file. These types of scams are very common. I should mention that when we did have Spyware Doctor with Antivirus enabled it did fully block the install of this threat. Having proper anti-virus protection can go a long ways in preventing further viruses and will also help you remove Security Sphere 2012.

What is Security Sphere 2012 Doing to My Computer Right Now?

It does seem that for many computers you will not be able to run many executable programs in normal mode and brining up the TaskManager can be blocked. You will see false scan results and possible search re-directs from this threat. It is not stealing personal information, e-mail addresses or passwords. You should still remove Security Sphere 2012 ASAP and run a full virus scan to ensure you are not infected with any trojans that may be causing other issues. It's very common for users to be infected with trojans along with this malware.

Some of the common messages we are seeing from this virus:

"Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software"

"Security Sphere 2012 Warning
Your computer is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid theft of your credit card details.
Click here to activate protection."

"Warning!
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software."

Security Sphere 2012

» Download Security Sphere 2012 Removal Software

What Do I Do To Remove Security Sphere 2012?

Follow our Security Sphere 2012 removal guide below to learn how to remove Security Sphere 2012 from your computer. Be sure to read the full guide first and you should also run a full scan with Spyware Doctor with Antivirus as well.

Automatic Security Sphere 2012 Removal

Online Security Sphere 2012 Removal Service

Remove Proxy Setting so You Can Connect to the Internet Again. Some need this some do not.

Security Sphere 2012 Manual Removal Procedures

The first step you must take in order to remove Security Sphere 2012 is to stop the following process.

• SecuritySpher 2012.exe ( This file name will mutate and change over time. Expect your file name to be different )

Know File Path Locations

XP

• C:Documents and Settings[Username]Application Data

  C:Documents and SettingsYOUR USER NAMEApplicationDataLocalTemp

Vista / Windows 7: One of the below

• c:users[username]AppDatalocal
• C:UsersYOUR USER NAMEAppDataLocalTemp
• C:Users[Username]AppData

To Stop this process you can

A. Browse to the file location shown below and re-name the file first and then restart your computer. Then browse to that file location again and delete the file. Take note that you can sort the files by date and help rule out most files and folders. Chances are you will only have a few files that appear within the date range you first became infected.

B.  Boot into Safe Mode and delete the file

C:  Use the Task Manager  to find the location of the file and re-name it then delete after re-boot. Most people will have this disabled and not working. However some users can use it the very second you log into the operating system. You have about 10 seconds to locate the file before the Task Manager will close.

D:  Log-into another users account and see if you can delete the file.

E:  Start the Task Manager the very second you login and terminate the process that way.

The next step in Security Sphere 2012 removal is to delete the following file. You NEED to re-boot your computer first if you re-named the file as you can not remove a file that is running.

If you are unable to find the Executable you need to delete then you should boot into safe mode with Networking and install the Spyware Doctor with Antivirus Client and run a full scan.

KNOWN LOCATIONS OF THIS VIRUS

XP

• C:Documents and SettingsAll UsersApplication DataSecurity Sphere 2012Security Sphere 2012.exe %

• C:Documents and SettingsAll UsersApplication DataSecurity Sphere 2012Security Sphere 2012.ico %

• C:Documents and SettingsAll UsersApplication DataSecurity Sphere 2012sysl32.dll %AppData%Security Sphere 2012wf.conf

• C:Documents and SettingsAll UsersApplication DataSecurity Sphere 2012%UserProfile%DesktopSecurity Sphere 2012.lnk

Vista / Windows 7:

• %AppData%Security Sphere 2012Security Sphere 2012.exe %

• AppData%Security Sphere 2012Security Sphere 2012.ico %

• AppData%Security Sphere 2012sysl32.dll %AppData%Security Sphere 2012wf.conf

• %UserProfile%DesktopSecurity Sphere 2012.lnk %

• StartMenu%ProgramsSecurity Sphere 2012Security Sphere 2012.lnk

Be sure to run a full virus scan once you are done. This ensures you have gotten all the virus traces and that you have no other malware on your computer.

If you find this threat too hard to remove yourself and need an expert we recommend this remote computer repair. They charge far less than others and are great at what they do.

Security Sphere 2012 Registry Removal Procedures

Editing the Windows Registry is not recommended for most users. One little slip and you can kiss your operating system good by. It's better to just let antivirus software repair and edit the rgistry. You may also want to consider using the PC Health Advisor Trial Here to clean out the registry and scan for other malware.

Here are the registry traces for your refference only. Please help update these traces by posting a comment below

• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun”Security Sphere 2012?

Security Sphere 2012 Directories:

XP

• C:Documents and SettingsAll UsersApplication DataSecurity Sphere 2012

Windows 7 / Windows Vista

• %AppData%Security Sphere 2012
  %StartMenu%ProgramsSecurity Sphere 2012

Conclusion

Like with most Malware the hardest part is simply stopping the main executable. Once you do that it should be smooth sailing. Always run a full virus scan once done to ensure you have no other infections. We like Spyware Doctor with Antivirus. If you require advanced help or just want an expert to remove the virus for than use this computer repair service.

Related Article Keywords: Security Sphere 2012, Remove Security Sphere 2012, Security Sphere 2012 Removal, How to Remove Security Sphere 2012, Delete Security Sphere 2012