Severity scale  

Security Sphere 2012. How to Remove? (Uninstall Guide)

removal by - -   Also known as Security Sphere, SecuritySphere, SecuritySphere2012 | Type: Rogue Antispyware

Security Sphere 2012 is a rogue anti-spyware application that displays fake security alerts and reports non-existent infection to scare you into thinking that your computer is infected with malware. It's is a clone of widely spread Personal Shield Pro and System Tool scarware. The rogue program simulates a system scan and asks to pay for a full version of Security Sphere 2012 in order to remove viruses from the system. In fact, the reported security threats or infections are actually either non-existing/harmless files or legitimate software. This malware will likely block real security software to protect itself from being deleted. Most importantly, do not purchase this bogus application and uninstall Security Sphere from your computer immediately. Security Sphere 2012 must be manually installed. It is promoted via spam e-mails, malicious or hacked Web pages, peer-to-peer networks. The scammers also use social engineering to distribute Security Sphere 2012 malware. You shouldn't install anything from suspicious websites. Otherwise, you can infect your PC with Security Sphere 2012 or other viruses

To make this scam look more realistic, it states that your computer is not protected and that you should activate SecuritySphere to ensure full system protection. As you may know, the legitimate one does not promote particular anti-virus software. That's the main difference. The rogue application displays the same infections on every computer randomly. To make things even more complicated, Security Sphere 2012 will hijack Internet Explorer and and other web browsers and displays fake notifications about possible threats or unsafe websites. The fake warning states:

Warning: Your computer is infected
Windows has detected spyware infection!
Click this message to install the last update of Windows security software...

Warning! Application cannot be executed.
The file taskmgr.exe is infected. Please activate your antivirus software.

If your computer is infected with Security Sphere 2012, please use the removal guide below or an automatic removal tool and remove it from the system manually for free. Do not purchase it! If you have already purchased it, contact your credit card company and dispute the charges. Last, but not least, run a full system scan with a legitimate anti-spyware application to remove the remains or additionally installed malware. If you can't run Spyware Doctor in normal mode, then restart your PC in safe mode with networking and run malware removal tool again.

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Reimage - remover Happiness
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Security Sphere 2012. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Security Sphere 2012. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
We are testing Plumbytes's efficiency (2012-01-23 16:29)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2012-01-23 16:29)
Hitman Pro
Webroot SecureAnywhere AntiVirus
Security Sphere 2012 screenshot
Security Sphere 2012 snapshot

Security Sphere 2012 manual removal

Kill processes:
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[ransom].exe"
Delete files:
Delete directories:

Geolocation of Security Sphere 2012

Map reveals the prevalence of Security Sphere 2012. Countries and regions that have been affected the most are: United States.

Information updated:

Comments on Security Sphere 2012

Wait. This is an exact clone of Security Tool.
michel von grabner
ok...honestly now..
how can rid of this security sphere 2012 without reading up the entire internet in which a free removal tool ends up costing anywhere up to 129,00 beans..and the supposed honest removal tools are from 29 bucks to 80?
question..i have no important docs in my lao top..can i just run the system recovery disk...or a name of a human company who offers a tool to remove this shit reasonably priced and why are this bastards who do this shit not in guantanamo getting
man love?
I found the program running under bO21712ObNiO217.exe and hiding in a folder of the same name in ProgramData. Restarted then used Linux to delete the offender. These scareware are really getting to be annoying...yo black hats, kiss my ass!!
Maybe try using Ubuntu or another Linux distribution to manually navigate to the Windows folder, then manually remove the files as UpTo11 said. (If you cant go on to Windows to download it, borrow a friends PC or something. Your local computer shop might also be able to fix it).
thanks max you fixed it good :)
boot to a different OS through a usb, then manually delete the files.
I downloaded Spyware Doctor (STOPzilla didnt respond on my machine).

After running a diagnostic, which identified and attempted to correct Security Sphere, the computer was unable to run on "Normal" settings. I was forced to only choose one of the three "Safe Modes."

While in the midst of conducting another diagnostic on Safe Mode, 20 pop ups emerged and my computer rebooted on its own. Since then, when I turn on the computer, it opens to a blank, black screen. What options do I now have?
Had something like this. Firstly - Security Sphere downloaded on its on, the was I was unable to remove it on neither with StopZilla, nor with Nod32, nor with AvG. Apparently the SecuritySphere wasnt the only virus on my machine (thats why it downloaded without permission) - it appears it can "cooperate" with other viruses/trojans. I recall I had problems with shutting down firefox, but I considered it to be the conflict between newer version of firefox and older version of windows when really it was a virus that installed itself as a plug-in to the browser when someone downloaded a player for his movies (NEVER land anyone, ANYONE, use your computer without your supervision). I dont want to upset you, - but most chanses are that youll have to formate the hard drive and reinstall your OS and everything. I ll update should I find any other solution
This happened to me too! Any luck fixing it?
Try Trojan Killer. Working so far.
More comments »

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)