What this infection does:
Security Sphere 2012 is a computer infection from the same family as Security Shield. This infection is also categorized as a rogue anti-spyware program as it pretends to be a legitimate security program, but is actually a program that display false scan results and false alerts and hijacks your computer so that you are not able to run your normal applications. Security Sphere 2012 is installed through the use of hacked web sites, exploits, and fake online scanners that attempt to install the program onto your computer without your knowledge or permission. When installed, the infection files will be created in a random named folder in c:Documents and SettingsAll UsersApplication Data, in XP, or C:ProgramData, in Windows Vista and Windows 7. It will then be configured to start automatically when you login to your computer.
Once running it will scan your computer and state that there are numerous infections present, but will not allow you to remove them until you purchase the program. It is important to understand that Security Sphere 2012 is designed to display fake scan results regardless of whether or not your computer is infected. Therefore, please do not be concerned if this program states you are infected. Security Sphere 2012 will also terminate any executables that you attempt to run in order to protect itself from being removed. When you attempt to run any program, it will terminate that program’s process and then display a message similar to the following that states that the program is infected:
Windows XP HOSTS File
https://download.bleepingcomputer.com/misc/host-files/windows-xp/hosts
Windows Vista HOSTS File
https://download.bleepingcomputer.com/misc/host-files/windows-vista/hosts
Windows 2003 Server HOSTS File
https://download.bleepingcomputer.com/misc/host-files/windows-2003-server/hosts
Windows 2008 Server HOSTS File
https://download.bleepingcomputer.com/misc/host-files/windows-2008-server/hosts
Windows 7 HOSTS File
https://download.bleepingcomputer.com/misc/host-files/windows-7/hosts
Security Sphere 2012 changes the permissions of the HOSTS file so you can’t edit or delete it. To fix these permissions please download the following batch file and save it to your desktop:
hosts-perm.bat
https://download.bleepingcomputer.com/bats/hosts-perm.bat
Full Guide
by Lawrence Abrams
https://www.bleepingcomputer.com/virus-removal/remove-security-sphere-2012
