How to Remove Antivirus 360
This should not be confused with Norton 360 which is a legitimate antivirus program (although if you need help removing Norton 360 to reinstall it or another antivirus program you may want to visit my antivirus removal tool list.)
What we are talking about this time is a rogue security application known as Antivirus 360. Like many other rogue security applications (wolves in sheeps clothing as I used to call them), Antivirus 360 may have installed itself on your system by way of a security flaw in your browser or some other less than admirable method. Such avenues include aggressive popup ad advertising after a system is infecting with a trojan such as vundo. It seems to be the successor to the Antivirus 2009 rogue application.
Among the things it does after install is popup and run after the system reboots and claims to find infected files which may actually be legitimate windows files. If a user follows through and manually deletes these files they will have a very badly damaged windows install.
C:\Windows\System32\svchost.exe
C:\Windows\System32\alg.exe
The above files are some legitimate windows files that antivirus 360 claims are infected.
It also raises multiple bogus security alerts.
For this software, you may want to download malwarebytes antimalware (take a look at my virus removal toolkit page.)
You may be able to get malwarebytes antimalware installed and updated and then just let it run a scan and clean up any files that it finds. If however the system is too sluggish and obstinate with this pest of antivirus 360 you may need to undertake some manual removal steps.
To manually remove you will first want to kill off any running processes in task manager that resemble Antivirus 360. AV360.exe is the name that this application runs under. Then you can look at removing the following files:
%ProgramFiles%\A360
%ProgramFiles%\A360\av360.exe
%User%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 360.lnk
%User%\Desktop\Antivirus 360.lnk
%User%\Start Menu\Antivirus 360
%User%\Start Menu\Antivirus 360\Antivirus 360.lnk
%User%\Start Menu\Antivirus 360\Help.lnk
%User%\Start Menu\Antivirus 360\Registration.lnk
There are a couple registry keys with a long string of random numbers created at
HKEY_CURRENT_USER\Software\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
It’s best to avoid the registry edit and after the deletion of the files run malwarebytes anti-malware to clean things up and make certain everything is clean.