Security Sphere 2012 - How to remove

Security Sphere 2012 is a fake antivirus, a new version of Personal Shield Pro, sharing not only the same GUI but misleading tactics as well. Being designed to swindle users’ money, it can’t be trusted and left on your computer, so remove Security Sphere 2012 rogue anti-spyware once you notice a sign of its existence on your computer. The rogue software infiltrates your computer in a stealthy way – using security holes of your system. Users are simply offered to update their browser or download Adobe Flash Player updates but in reality they are simply made to download malware. Keep in mind that having licensed version of anti-virus and anti-spyware protects your PC from such unexpected virus intrusions. We recommend trying spyhunter on your computers.
As soon as Security Sphere gets on the stage, it usually makes some changes to the system. These system changes are done to launch once PC is rebooted, so everytime your computer starts malware will start displaying continuous system scanners. These scanners imitate running through your files and usually ‘detect’ tons of faked viruses. No matter how this thing looks like, you must ignore all alerts displayed by Security Sphere 2012. In reality, it does not check your system files but repots harmless files that it drops before its scanning procedure. Some messages will report:

Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software…

Security Sphere 2012 Warning
Your computer is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid theft of your credit card details.
Click here to activate protection.

Warning!
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software.

Additionally, Security Sphere 2012 will hijack your web browser to display fake security warnings:

Warning message from Internet browser. This page under virus attack. This may crash your system.
This may be caused by:
* Virus content founded at this site trying to install its components.
* Malicious & unknown network processes are determined.
* Your system is under virus attack
* Negative references from other citizens concerning this web page.
* Your system ports and backdoors have been checked by visited page for external access.
Recommendations:
* Obtain a license of “Security Sphere 2012” to protect your PC for the safest browsing Internet pages (desirable)
* Launch spyware, virus and malware scanning process.
* Keep browsing

This imitation of Security Sphere’s active defense is made for the one reason – to make you scared and make you buy the licensed version of Security Sphere 2012. The rogue program just ties to make you think that your PC is in danger and the promises to fix everything for money. Please, never fall into this trickery. We recommend you to remove Security Sphere once you notice any sign that it is on your computer. Reboot your PC into Safe Mode with Networking and run updated spyhunter, Malwarebytes Anti-Malware or Hitman Pro to clean it from viruses. You can also use this code to disable malware (thanks to S!Ri): 8945315-6548431.

Security Sphere 2012 Special removal instructions

1. Download process explorer ( https://www.2-viruses.com/wp-content/uploads/PE/eXplorer.exe ). Rename the file to iexplore.exe if you can’t launch it. This file will not be blocked by Security Sphere 2012.
2. Launch it. Look for process with random name in all users ->application data or application data. Write down location
3. Kill that process. Security Sphere 2012 window will close and it will stop showing its pesky popups.
4. Download spyhunter, Hitman Pro, Malwarebytes Anti-Malware and scan your PC or open the location of Security Sphere 2012 files and delete them manually.
5. Empty recycle bin.
6. Reboot. If you still got problems, scan both with anti-malware programs and TDSS Killer for rootkit infections.

Video Security Sphere 2012 removal guide

Automatic Malware removal tools

Manual removal