Remove Malware Rogue Security Sphere 2012 by britec

Remove Malware Rogue Security Sphere 2012 by britec

What this infection does:

Security Sphere 2012 is a computer infection from the same family as Security Shield. This infection is also categorized as a rogue anti-spyware program as it pretends to be a legitimate security program, but is actually a program that display false scan results and false alerts and hijacks your computer so that you are not able to run your normal applications. Security Sphere 2012 is installed through the use of hacked web sites, exploits, and fake online scanners that attempt to install the program onto your computer without your knowledge or permission. When installed, the infection files will be created in a random named folder in c:\Documents and Settings\All Users\Application Data\, in XP, or C:\ProgramData, in Windows Vista and Windows 7. It will then be configured to start automatically when you login to your computer.

Once running it will scan your computer and state that there are numerous infections present, but will not allow you to remove them until you purchase the program. It is important to understand that Security Sphere 2012 is designed to display fake scan results regardless of whether or not your computer is infected. Therefore, please do not be concerned if this program states you are infected. Security Sphere 2012 will also terminate any executables that you attempt to run in order to protect itself from being removed. When you attempt to run any program, it will terminate that program's process and then display a message similar to the following that states that the program is infected:

Windows XP HOSTS File
http://download.bleepingcomputer.com/misc/host-files/windows-xp/hosts

Windows Vista HOSTS File
http://download.bleepingcomputer.com/misc/host-files/windows-vista/hosts

Windows 2003 Server HOSTS File
http://download.bleepingcomputer.com/misc/host-files/windows-2003-server/hosts

Windows 2008 Server HOSTS File
http://download.bleepingcomputer.com/misc/host-files/windows-2008-server/hosts
Windows 7 HOSTS File
http://download.bleepingcomputer.com/misc/host-files/windows-7/hosts

Security Sphere 2012 changes the permissions of the HOSTS file so you can't edit or delete it. To fix these permissions please download the following batch file and save it to your desktop:

hosts-perm.bat
http://download.bleepingcomputer.com/bats/hosts-perm.bat



-----------------------------------------------------
Need help with your computer?
http://www.briteccomputers.co.uk/forum
----------------------------------------------------------
http://www.britec.org.uk
http://www.pcrepairhertfordshire.co.uk

Category:

Howto & Style

Tags:

• Remove
• Malware
• Rogue
• Security
• Sphere
• 2012
• britec
• forum
• delete
• removal
• computer
• laptop
• virus
• fake
• software
• malwarebytes
• bleepingcomputer

[fixitdaz]

Yet again another excellent video cheers Brian.

[Britec09]

@fixitdaz Glad you liied it Daz

[top2toppros]

Good video man!

[Britec09]

@top2toppros Thanks Kev

[CustomMadeGrafix]

Hey britec, I had one called something along the lines of windows malicious software removal, it wasnt from windows and locked my laptop down and told me my harddrive was broken, but i reinstalled a clean version of vista and worked fine anyway... :/

[Britec09]

@CustomMadeGrafix well before you format next time, talk to me and I will help you remove it for FREE :)

[ironman052992]

so i've made it to the point at 2:14, but i'm not seeing any files that look like those. any suggestions?

[TheDestroyerComics]

my big problem was that it disabled mcafee

[TheDestroyerComics]

i got this fucking virus about 3 weeks ago pissed me off, it's one crazy virus i'll give it that much

[maisanfabregas]

thanks dude you saved my laptop ;)

[fcalero]

Thank you very much you just saved my computer I was about to throw it out the window. This was extremely helpful. It seems to be working flawlessly for now hopefully this would be the end it :)

[TheJeeJoo]

This virus really pissed me off, how the f it got into my computer despite having anti virus installed??? anyone can tell me??

[TheJeeJoo]

Thanks man, it was really helpful

[lysenko133]

Its funny how government doesnt do anything about this when they can easily track the IP address from the original source where the programmer made this program and go after that fucking faggot, but something tells me they dont want to do that, something tells me they are behind it, to get your info.

[jixun66]

What I do was download OllyICE, change the name to iexplorer.exe, then run it. in the window i go to file -> attach, choose the window and click OK. After that i just simply close the OllyICE window and it gone :)

[Furalized]

I used Spyware Doctor registered and everything deleted but the program this exists :( now I try try this but the map ProgramData doesn't already exist... now what can I do :/