Saturday, October 01, 2011

Remove Security Sphere 2012 Virus

Security Sphere 2012 is a counterfeit antivirus program that disguises itself as real security application. Security Sphere 2012 is made to look like Symantec Antivirus, AVG Antivirus, Avast Antivirus and McAfee Antivirus. Security Sphere 2012 can infect the system by means of Trojan infection that user may obtain from scam web sites and malicious multimedia sites. It was designed to start automatically when Windows boots up. After that, Security Sphere 2012 will run a virus scan that produces results you should not trust. Security Sphere 2012 also display many security alerts and warning message that pushes victims to buy the registration key to be able to remove all detected viruses.




Security Sphere 2012 claims to have additional features like System Scan, Computer Protection and Privacy Guard. Do not believe this program. It has no capability to protect computer from threats and virus attack.

Security Sphere 2012 requires immediate removal to clean up your PC from threats.

Other functionalities of Security Sphere 2012:
  • Security Sphere 2012 can modify Internet browser and set default page to its own web site.
  • Security Sphere 2012 will connect to a remote computer and update itself.
  • Security Sphere 2012 may download more malware and threats from a distant host.
  • Security Sphere 2012 can block Internet access by making changes on Windows Hosts file.

Security Sphere 2012 Removal Guide:

1. You must end the following Windows process.
a. On your keyboard press ctrl+alt+del
b. Windows Task Manager will open.
c. Search for the process with this name
(random name).exe

2. Delete the following registry.
a. Go to Start. Click on Run
b. Type regedit in the box
c. Registry editor will open. Find and delete the following.
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\featurecontrol\FEATURE_BROWSER_EMULATION "svchost.exe"

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings "enablehttp1_1" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "(random name)"

3. Delete the following folders and files:
%AllUsersProfile%\[random]
%StartMenu%\Programs\Security Sphere 2012.lnk

0 comments: