The article discusses the procedure of removing Security Sphere 2012, another phony anti-spyware program from the family of Personal Shield Pro. The methods compiled here are simple and reliable. However, it is recommended that these should be used carefully to avoid facing problems. It will also save your time and money that would undeniably be wasted looking for spyware removal support options.
Manual Procedure –
Close all the windows or pop-ups that appear on your Desktop screen. Backup your data internally (use Windows’s built-in backup utility) or to an external media like CD, DVD etc. When done, follow the below mentioned steps one by one. If you are unable to perform them, then reboot your computer in Safe Mode. When your computer starts booting and before the Windows logo appears, start tapping the F8 key on the keyboard until you see the Boot option menu. Use the Down arrow key to select the Safe Mode with Networking option.
Right click anywhere on the Taskbar and go to Task Manager. Highlight the Processes tab and locate random.exe (there will be random characters followed by .exe) from the listed options. Select it and then press the End Process button.
Click on the Start menu and go to My Computer. Double click on the Local Drive C: icon and then navigate to Documents and Settings> All Users> and Application Data. Locate the Temp folder and open it. Look for random characters or symbols in the folder and delete all of them. There may also be random character.exe and/or random character.tmp files, delete them as well. You must also go to Documents and Settings> User Name (your standard user account name)> Local Settings> Temp. Locate the same random character files and delete them. Thereafter, go to Documents and Settings> User Name> and Desktop. Locate Security Sphere 2012.ink file and delete it. Exit all the windows.
Click on the Start button and click on Run. Type ‘regedit’ without quotes in the Open box and hit Enter. When Registry Editor opens up, scroll and navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\ [random characters].exe. You might also see Run\ “Security Sphere 2012 instead of RunOnce [random].exe. You must also look for and delete these registry entries viz. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilte "Enabled" = "0"; HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "1ProxyOverride" = “0” (the quotes may also be empty); and HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"; HKEY_CURRENT_USER\Software\[random symbols].
Exit the Registry Editor window. Open your security program (antivirus or anti-spyware) and update it to download and install latest updates. When done, run a full system scan. Wait until the scan completes and prompts you to delete the items that have been found. Do as prompted. Close all the windows and reboot computer as normally.
Auto Procedure –
End the abovementioned processes using Task Manager. Download an anti-spyware program from a torrent but safe site. There are many good anti-spyware programs available on the internet. Some of them include Spyware Doctor, Stopzilla, Hitman Pro, Malwarebytes’ Anti-Malware, and Microsoft Security Essentials among others.
When concluded on a program, visit its website and download it. Click on the Save File button when prompted. When done, browse to that location, locate the file, and double click to open it. Run the installation. Follow the on screen instructions and complete installation. When finished, open the program, update it, and then run a full system scan. Wait until the scanning completes. When prompted, hit the delete or remove button to let the program automatically delete the items that it found in the scanning. You can check the history of the deleted infections.
By random.exe, it hereby means that these processes or files will contain unusual random characters in the mentioned locations. You must locate and remove them.
Do not be tricked by the phony virus, spyware alerts that show up on your screen and do not click on any link to purchase these fake anti-spyware programs. It is because these programs are designed to set you up to steal money, spy on you, or even corrupt your machine. Unless you are quite sure about that it is a genuine alert from your antivirus or anti-spyware program, do not get carried away with what you see on the screen. If you use a security program, then you will know what a genuine alert looks like.