Microsoft Security Center 2012

Updated: February 17, 2012 Rogue 0 Comment

Microsoft Security Center 2012 is a fake anti-virus application that will disguise as part of the operating system. Also called as Fake MS Security Center 2012, this bogus application will be spread by a Trojan that is capable of hiding itself from installed security application. The Trojan will look for security vulnerabilities and exploited it to penetrate the system. When inside the PC, it will start modifying Internet Browser to redirect and send victims to fake security web sites. The web site was designed to drop and execute a copy of Microsoft Security Center 2012 virus on visitors computer.

When talking about real security product, Microsoft Security Center 2012 is incapable of providing protection. In fact, it was not designed to act as a legitimate AV program. If installed, Microsoft Security Center 2012 will block execution of any installed application and state that it has detected potential threat on the file. It will suggest to fix the file and clean with the paid version of the program. Pop-up alerts and fake messages will be issued in order to deceive users even further. A fraudulent scan is also presented together with falsified identification of Trojans, viruses and spyware inside the system. It will exert all efforts just to make user spend money for this unwanted program. It is a must to remove Microsoft Security Center 2012 virus before any additional harm can be done.

Screen Shot Image:
It is easy to identify fake Microsoft Security Center 2012. The interface looks very similar to MS Security Center; however, fake ones are endorsing rogue anti-virus application. In addition, if you click on any buttons of the counterfeit interface, it will launch a rogue security application that is already installed on the computer.

Image of Fake MS Security Center 2012

Technical Details and Additional Information:

Alias: Microsoft Security Center 2012 Virus, Fake Microsoft Security Center 2012

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Malware Behavior
Fake Microsoft Security Center 2012 may come in versions of rogue security software. It will serve as additional gimmick to promote a rogue anti-virus program. Typically, Fake Microsoft Security Center uses the “Virus Protection” area to endorse the purchase of malicious software. Here is one example message:

Windows Security Center reports that [Name of Rogue Software] is disabled. Antivirus software helps protect your computer against viruses and other security threats. Click Recommendations for the suggested actions. Your system might be at risk now.

[cf]regis[/cf] [cf]files[/cf]

How to Remove Microsoft Security Center 2012

Manual Removal Procedure

1. Press Ctrl+Alt+Del on keyboard to stop the process associated to "Microsoft Security Center 2012". When Windows Task Manager opens, go to Processes tab. Find and end this process.
mSsecuritycenter.exe

2. You need to update your installed antivirus software. Please connect to the Internet and download the most recent database. This is a one-click process from your AV program’s console.
3. Thoroughly scan the computer and remove any threats found by your antivirus program. If delete option is not available, your best next choice is to quarantine the infected file. There is also a need to manually locate and delete malicious files. Please see the file section for items that are relevant to Microsoft Security Center 2012 Virus.

4. Next, you need to remove registry entries created by Microsoft Security Center 2012. Please refer to registry section to view entries related to the rogue program. [how to edit registry]
5. Exit registry editor when you are done.

6. Get rid of Microsoft Security Center 2012 start-up entry by going to Start > Run, type msconfig on the "Open" dialog box. It will launch a new window containing System Configuration Utility. Click on the Startup tab and uncheck the following item.
mSsecuritycenter.exe

7. Click Apply. You need to restart Windows.

Microsoft Security Center 2012 Virus Removal Tool

For not so technical users that cannot comprehend with the manual removal. This automatic detection and cleaner is recommended. However, you need to download and install a tool to complete this process. The tool is free to download. We highly advise the use of this program to automatically delete all files and registry entries created by Microsoft Security Center 2012. Remember that erasing system files required by the operating system may cause erratic behavior. It may also lead to system malfunction. Proceed with Microsoft Security Center 2012 automatic removal.

Use A Portable SuperAntiSpyware:
For complete removal of the virus, carry out a separate scan using different security program. This may catch infected items that evade your previous scan. Download and run SAS Portable Scanner.

Alternative Removal Method for Microsoft Security Center 2012

Option 1 : Use Windows System Restore to return Windows to previous state

If Microsoft Security Center 2012 enters the computer, there is a big chance that Windows files, registry entries and other essential components are also infected. System Restore can reinstate clean system files by restoring the configuration to an earlier date. The method also replaces compromised files with a clean version. If you have a saved restore point before Microsoft Security Center 2012 infiltrates the PC, we highly encourage you to execute this procedure if none of the above works. You may proceed with Windows System Restore, click here to see the full procedure.

Option 2 : Microsoft Security Center 2012 manual uninstall guide

IMPORTANT! Manual removal of Microsoft Security Center 2012 requires technical skills. Deleting system files and registry entries by mistake may result to total disability of Windows system. We advise you to perform a backup of registry before proceeding with this guide.

1. Kill any running process that belongs to Microsoft Security Center 2012.
- Press Ctrl+Alt+Del on your keyboard.
- When Windows Task Manager appears, look for Microsoft Security Center 2012 files (refer to Technical Reference) and click End Process.

End Task

2. Delete all registry entries that belong to this malware.
- Press [Windows Key]+R on your keyboard.
- In the 'Open' dialog box, type regedit and press Enter. This will open registry editor.
- Find and delete registry entries as mentioned in Technical Reference section below.
- Close registry editor. Changes made will be save automatically.

Run Regedit

3. Scan the computer with antivirus program.
- Connect to Internet and open your antivirus software. Please update to obtain the latest database and necessary files.
- Restart the computer in Safe Mode.
- Just before Windows logo begins to load press F8 on your keyboard.
- On Windows Advanced Boot Options, select Safe Mode and press Enter.

4. Delete all files dropped by Microsoft Security Center 2012.
- While still in Safe Mode, search and delete malicious files. Please refer to 'Technical Reference'. Make sure that you execute 'End Task' first before deleting the file. Otherwise, the system will not let you perform this action.

Technical Reference

Associated Files and Folders:Added Registry Entries: