Do you know what Security Sphere 2012 is?
It has become increasingly more difficult even for expert users to distinguish between legitimate security applications and rubbish rogue tools like Security Sphere 2012 and Security Shield. This rogue antispyware application was designed by the same developers as those behind Personal Shield Pro. This already speaks to the validity of this rogue application, and users should be extremely suspicious of any correspondence received from this rogue.
Security Sphere 2012 does not break new ground in its infection methods. In fact Security Sphere 2012 will use established forms of infection to facilitate its infiltration of its victims’ PCs. This range from fake online malware scanners to third party downloads and updates. It has also been reported that Security Sphere 2012 makes use of seditious browser hijackers which use drive-by download tactics to forcefully root the Security Sphere 2012 infection into the system.
After the rogue manages to successfully infiltrate the system and root itself, it will initiate a fake system scan which will inform the user that his PC is being attacked by threats, and that he needs to buy Security Sphere 2012 in order to stave off these attacks. Security Sphere 2012 will then spam the user with fake alerts informing him of the very same:
Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software…
Security Sphere 2012 Warning
Your computer is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid theft of your credit card details.
Click here to activate protection.
Security Sphere 2012 Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with Security Sphere 2012
What is more Security Sphere 2012 will prevent the user from running applications or from connecting to the Internet. This is done with an explicit intent to prevent the user from running or downloading an application which could detect and remove Security Sphere 2012 from the system. The following error will be generated when the user attempts to execute an application:
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software.
And this one each time the user attempts to use a web browser:
Warning message from Internet browserThis page under virus attack
This may crash your system.This may be caused by:
Virus content founded at this site trying to install its components.
Malicious & unknown network processes are determined.
Your system is under virus attack
Negative references from other citizens concerning this web page
Your system ports and backdoors have been checked by visited page for external access.
Obtain a license of “Security Sphere 2012″ to protect your PC for the safest browsing Internet pages (desirable)
Launch spyware, virus and malware scanning process.
It is possible to stop these irritating symptoms from debilitating your system. Enter this activation key into the rogue and all annoying symptoms will instantly cease:
You will still need to erase Security Sphere 2012 from the system in order to secure its restoration. As long as Security Sphere 2012 remains on the system your PC will remain vulnerable to other malicious threats also easily gaining access to the system. Obliterate Security Sphere 2012 with the help of a powerful security tool which will offer adequate protection against similar threats in future.
Warning, this parasite is known to disable your Internet connection. Click here for instructions explaining how to restore your Internet access.
In non techie terms:
Security Sphere 2012 is a fake antispyware application only out to rip you off. Destroy Security Sphere 2012 immediately and protect your PC against this harmful threat.
Aliases: Security Sphere.
How to Stop a Running Process
Stop These Processes:
Find and Delete These Files:
- %StartMenu%\Programs\Security Sphere 2012.lnk
Remove These Registry Values:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[random]"
- HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\featurecontrol\FEATURE_BROWSER_EMULATION "svchost.exe"
- HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings "enablehttp1_1" = '1'
Security Sphere 2012 Removal Guide Automatic Removal Instructions
Did You Find this Article Helpful?Subscribe to Spyware Techie for more!
Or get latest articles to your via email: