How to remove Antivirus 360 (Delete instructions)

Do you have pop-ups or your computer infected with trojan or spyware ? Learn how to ask us for help, click here!

How to remove Antivirus 360 (Delete instructions)

Antivirus 360 is a rogue antivirus/antispyware program. The fake antivirus is fresh version of Antivirus 2009 . Antivirus 360 uses scare tactics (fake alerts and false positives) to trick users into buying the fake software. Antivirus 360 is distributed through the Vundo trojan. Once infected with Vundo trojan your computer will display large amount of pop-ups that tells you that your computer is infected and you should download and install Antivirus 360 in order to protect your computer.

During installation, Antivirus 360 configures itself to run automatically every time, when you start your PC. Once running, Antivirus 360 will scan your computer and list a large amount of infections, but some of these “infections” are actually legitimate Windows files:

C:\Windows\System32\explorer.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\alg.exe

Antivirus 360 may drastically slow the performance of your computer.

Symptoms in a HijackThis Log.

O2 – BHO: (no name) – {D263FA6D-84CC-48A8-9AF6-C664362B7A5B} – C:\Windows\System32\winconfig.dll
O4 – HKCU\..\Run: [12840894984709702141078366734454] C:\Program Files\A360\av360.exe

Use the following instructions to remove Antivirus 360 (Uninstall instructions).

1. Remove trojan Vundo.
Some variants of Antivirus 360 uses trojan Vundo to install itself.

Download VundoFix and save the file to your desktop.
Once it downloaded, double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it’s done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES.
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.

2. Remove Antivirus 360 files.

Download Avenger from here and unzip to your desktop.
Run Avenger, copy,then paste the following text in Input script Box:

Files to delete:
%windir%\system32\winsystems.dll
%windir%\system32\winconfig.dll

Folders to delete:
%ProgramFiles%\A360

Then click on ‘Execute’.
You will be asked Are you sure you want to execute the current script?. Click Yes.
You will now be asked First step completed — The Avenger has been successfully set up to run on next boot. Reboot now?. Click Yes.
Your PC will now be rebooted.

3. Remove Antivirus 360 associated malware.
Using Malwarebytes Anti-Malware.

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.
Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select “Perform Quick Scan”, then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Using SuperAntispyware.

Download SUPERAntiSpyware.
Close all programs and Windows on your computer.
Double Click SUPERAntiSpyware.exe to install the application.This will start the installation of SUPERAntiSpyware onto your computer. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing click on the Finish button.
You will see a message stating that you should update the program before performing a scan. Click Yes. As SUPERAntiSpyware will automatically update itself.
You will see SUPERAntiSpyware setup wizard. Follow the prompts. To close the Wizard press Finish.
Protect home page dialog will be open. Click on the Protect Home Page button.
You will now be at the main program.
Click Scan your computer. Click Next.
The scan may take some time to finish,so please be patient. When the scan is complete, result of scanning will be open, click OK.
Click Next to start removing the found threats.
If you are asked to reboot the machine, choose Yes.

Antivirus 360 creates the following files and folders.

%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 360.lnk
%UserProfile%\Desktop\Antivirus 360.lnk
%UserProfile%\Start Menu\Antivirus 360
%UserProfile%\Start Menu\Antivirus 360\Antivirus 360.lnk
%UserProfile%\Start Menu\Antivirus 360\Help.lnk
%UserProfile%\Start Menu\Antivirus 360\Registration.lnk
c:\Program Files\A360
c:\Program Files\A360\av360.exe

If you need help with the instructions, then post your questions in our Spyware Removal forum.

Share and Enjoy:

December 11, 2008 on 8:11 am | In Rogue Anti Spyware, Tutorials - HowTo | 105 Comments |

105 Comments »

RSS feed for comments on this post. TrackBack URI

hi

Comment by avdhesh gupta — December 13, 2008 #
i downloaded the malware bytes thing and removed all the files after the scan, read the notepad and restarted and that antivirus program is still on my computer. now what do i do? it keeps popping up and turning my screen blue and making me wait and it makes all my windows huge. what can i do to get rid of this?

Comment by erica — December 15, 2008 #
Please read and follow these steps.

Comment by Patrik — December 15, 2008 #
malware does not detect the antivirus on my computer

Comment by GPatterson — December 15, 2008 #
THANK YOU >_____________________< |
now i finally got rid of this fucking programm. THANKS
ur the best guyz XD

Comment by Yue — December 15, 2008 #
GPatterson, please follow these steps. I will help you.

Comment by Patrik — December 15, 2008 #
hi there, my friend accidentally downloaded the Antivirus 360… i tried to remove it from my system but, i couldn’t. what do i need to get rid of this virus in a safer way that will not damage my files and the computer specially? please reply. thanks….

Comment by maricel — December 16, 2008 #
maricel, please follow these steps.

Comment by Patrik — December 17, 2008 #
Just wanted to say thanks for the help in ridding my computer from Antivirus 360. I just now rebooted and it’s gone. Hope it won’t come around again. Thanks again

JMG

Comment by JMG — December 21, 2008 #
U R the best , thanks for the uploader of the program, i totally free fro that fucking shit!!!:)) Uraaaaaaaaaaa

Comment by hayot — December 25, 2008 #
Please help!! I’ve got this awful antivirus 360 and i’ve downloaded malewareBytes but when i go to scan it closes after about 4seconds and nothing happens. Please, can anyone help?!?
Thank you

Comment by Jennifer — January 22, 2009 #
Jennifer, please read and follow these steps.

Comment by Patrik — January 22, 2009 #
please help me iam try to get the the 360 reomve from my system but it want me do any because it pops up every 4 sec help help

Comment by jillian — January 23, 2009 #
jillian, follow these steps.

Comment by Patrik — January 23, 2009 #
I downloaded the malware however i can’t run the scan because it keeps closing!!

what do i do? Please HELP

Comment by Em — January 24, 2009 #
Em, follow these steps. I will help you.

Comment by Patrik — January 24, 2009 #
When I tried to scan once I downloaded the MBAM it just went away. When I try to do it again it keeps going away. What should I do?

Comment by Shanequa — January 25, 2009 #
Shanequa, looks like it is result of trojan activity. Please follow these steps.

Comment by Patrik — January 26, 2009 #
I was following some posted instructions on another site and they said the first step was to go to the task manager , under process and end explorer.exe i dont know if that has anything to do with the fact that av360 is on the computer but now i cant even start my computer in safe mode….. and i was planning on following your steps as it seems there are many websites that dont seem trust worthy
help…..
Samer

Comment by Samer — January 27, 2009 #
Folders for delete:

above script in Avenger should be
Folders to delete:

Comment by Lee — January 28, 2009 #
Thank you. Managed to delete the A360 folder and its file within.

Comment by Lee — January 28, 2009 #
Malwarebytes’ Anti-Malware had successfully removed and deleted 18 infected items, including several A360 files.

Thanks.

Comment by Lee — January 28, 2009 #
Thanks so much ! It worked perfectly well! I was almost crazy because my computer was a mess, very slow, and with a lot of pop-ups about virus ecc…

Comment by Fernando — January 29, 2009 #
Thanks worked great . Coudnt even use internet explorer .
I was lucky i had fire fox on my pc and used it to download the tools .
Thanks so much

Comment by Dennis — January 29, 2009 #
antivirus 360 really gave me a hard tym! thanks to all the posts i’ve read in the internet.. it helped me to solve the problem, on my own (without having to send the laptop to be repaired).. well, 4 some sharing, i download malwarebytes and it’s great coz it successfully removed and deleted the infected files.. i also use “regedit” (which we type in “run” at the start menu) and then click Edit → Find.. type av360, Antivirus 360 and a360 which will later show you the infected files.. i deleted all the files and folders which has those names, and i also cleared the subfolders in my temporary internet files folder except IE5.. other than that, i also searched any files/folder that has av360, a360 or antivirus 360 names and deleted them.good luck!

(it took me one whole night to search how to remove/delete antivirus 360 in the internet, not mentioning i had to borrow my friend’s pc-coz the sites i want to enter kept on being blocked by antivirus 360, and another whole day to experiment in attempt to remove antivirus 360- – and to think that it only took me one click to get into this problem, huh!)

Comment by Josie — January 30, 2009 #
you have to set your computer back to factory setting its the ONLY WAY i did it and the antivirus a360 has now gone
befor that i tried everything to remove it and nothing worked
im so glad its gone

Comment by pam — January 31, 2009 #
I am trying to download malwarebytes in safe mode because I can not get to the internet because of antivirus 360 but I always am directed to another site. Help! I can do anything on my computer unless I am in safe mode. How can I get something to download to stop this virus, rogue or whatever it is?

Comment by Deb — January 31, 2009 #
Deb, please follow these steps. I will help you.

Comment by Patrik — February 1, 2009 #
hey… all i jus got rid off this F***king spyware antivirus360… it has been the most pissing experience i’ve had on d net.. buh i restored mah PC to sum previous date wen antivirus360 wasnt der at all, n it worked realli cudn’t believe it buh it did…
to restore ur pc go to
START->ACCESSORIES->SYSTEM TOOLS->SYSTEM RESTORE..
BYE GOOD LUCK 2 U

Comment by hurraayyy i did it — February 1, 2009 #
Thanks for for the explanations and by software.

Compliments.

A.Rito

Comment by Angelino Rito — February 3, 2009 #
PLEASE HELP lol 911 emergency …. this freaking ANTIVIRUS 360 is really pissing me off … im now downloading this Vundofix because it says it will get rid of it … if not please please please please someone send me something to get rid of this damn thing

Comment by Brandy — February 3, 2009 #
I never would of thought I would get a virus thanks so much! its finally gone

Comment by kara — February 3, 2009 #
Brandy, please follow these steps.

Comment by Patrik — February 3, 2009 #
great stuff !!!!! worked 1st time got rid of that f##king a360 shit only problem left my system running abit slow still top stuff and tips on the speed issue

Comment by devilbear — February 4, 2009 #
scrap that running sweet now. . THANX AGAIN back to poker now lol.

Comment by devilbear — February 4, 2009 #
Thank You!! Thank You!! I’ve trying to get rid of this for the past two days and finally did it! Before running Avenger, I couldn’t get the MalewareBytes to work. It kept closing on me after 4 seconds. It took a total of 10 minutes to be removed. Thanks!

Comment by Linda — February 5, 2009 #
So I can’t get on the internet, but I deleted the files using Avenger and the files are ‘apparently’ gone. I haven’t seen a pop up or anything related to the virus, but I still can’t get on the internet. Is there a way to fix this?

And before you tell me to go do a hijackthis thread, I can’t get on the internet to download hijackthis. The only reason I`m able to post this right now is because I have a laptop and the computer that’s having the problem is at home.

Comment by Jennifer — February 6, 2009 #
I have this damn 360 on my PC and it’s blocking me from accessing the net!! Now what??

Comment by Laura — February 7, 2009 #
Uhhh… I’ve been sitting here with VundoFix for, like, 50 minutes. It still hasn’t found A360. Is there some way to speed it up? Also, the folder for A360 is gone on my computer, but A360 is still working! I could use some help. Does anyone now how to help me?

Comment by Carrie — February 7, 2009 #
Carrie and Laura, please follow these steps.

Comment by Patrik — February 7, 2009 #
Thank you your instructions helped me be rid of A360 in about 20 min. I really appreciate them.

Comment by Kyle — February 7, 2009 #
Thank you very much for the instructions, it was very disturbing to see those popups.

Comment by Srini — February 8, 2009 #
what do I do if it says that there were no vundo file. do I just continue one with the other steps? b/c i definately have this antivirus 360 thing.

Comment by christine — February 11, 2009 #
christine, yes then skip vundo step.

Comment by Patrik — February 11, 2009 #
what do i do when I get to the malware step and right after I open the program is just closes…i cant get it to stay open and scan.

Comment by christine — February 11, 2009 #
Christine, then follow these steps.

Comment by Patrik — February 11, 2009 #
patrik,
i posted on the other site that you sent me to on what my log says. could you please help me from here. I dont know what to delete now. thanks for all of your help.

Comment by christine — February 11, 2009 #
I ran the Vundo and it came up with nothing and then downloaded Avenger and it told me the file is corrupted. i also tried the malware and it told me the same thing. I originally had the av360 and did a system restore and it seems to have gotten rid of it but my computer is still really slow… help?

Comment by Brandie — February 11, 2009 #
I finally got everything to work and THANK YOU!!! This worked great and I am sooooo glad I stumbled onto this site. I thought i was going to have to send my computer in to be fixed! Thanks again!

Comment by Brandie — February 11, 2009 #
I deleted the av360 manually but its still blocking the internet. I’m ready to throw the laptop out the window. Someone please help! and save my laptop from flying through the window.

Comment by melyssa — February 13, 2009 #
I remove antivirus 360 by restoring my computer to a date before 360 downloaded in my computer . When to control panel to system restore . It remove the antivirus from my computer .

Comment by loee — February 13, 2009 #
Melyssa, follow the steps.

Comment by Patrik — February 14, 2009 #
wwwwwwwwwwwwwwwwoooooo i freakin love you people!!!!!!!!!!!!!!!!!!!!!!!! woo i got rid of it yes yes yes yes yes !!!!!! im gonna have a party!!!

Comment by w00T!! — February 14, 2009 #
THIS THING IS SOOOO ANNOYING!! These pop ups are driving my crazy… but im scaning with VundoFix… & its been awhile…. how do i make it go faster… i just want this thing gone!!!!! PLEASE HELP ME!!!

Comment by Bobby — February 14, 2009 #
360 virus just popped up 1 day, has ben killin me, i downloaded AVENGER, went thru tha steps & it seemed 2 be cleared up, about 10 mins later it started again! When it started tha 1st time i nevr downloaded 360, it was just pop ups 2 clean my system. PLEASE HELP ME!

Comment by shawn — February 19, 2009 #
Please follow the steps.

Comment by Patrik — February 19, 2009 #
thanks

Comment by shosho — February 22, 2009 #
Hi, me again. Have just fixed another PC (a friend’s).

1. Use Avenger as instructed. (Important 1st step to delete and dismantle the A360 folder and file. Ignore the attempted blocks by the “security software”.

2. Download Malwarebytes Anti-Malware and did a full scan.

All done and cleared within an hour! Thanks.

3. Now downloading VundoFix and scanning for Vundo as an added step.

Comment by Lee — February 23, 2009 #
it works!! =) thankz so much!!

Comment by mia — February 26, 2009 #
Thank you so much!!!! Your step by step instructions worked like a charm. My computer was infected so badly I had to download the programs from a spare laptop onto a travel drive. It still worked great!! Thanks again!

Comment by Judy — February 27, 2009 #
downloaded Avenger and we copy and pasted text in input script box but keep getting error

Error:could not set driver Image Pat
aborting execution(error 0:the operation completed successfully)

what should i do next, thanks

Comment by Gary — March 1, 2009 #
Gary, please follow the steps.

Comment by Patrik — March 1, 2009 #
Followed instructions & altho it took 5 hrs, it cleaned AV360 off the computer (thx!), but now can’t connect to the internet. Reset all internet options to original, but no luck. Checked motem: working fine. Any suggestions?

Comment by Molly — March 2, 2009 #
Molly, please follow these steps.

Comment by Patrik — March 2, 2009 #
Thx, Patrik, but I can’t get on the internet from the affected computer – this is someone elses. Any other suggestions from here?

Comment by Molly — March 3, 2009 #
Ask us for help at our forum.

Comment by Patrik — March 5, 2009 #
thanks for the help on geting rid of this fucking program u are the best

Comment by raf — March 5, 2009 #
I downloaded Malwarebytes Anti-Malware but the programme will not open when i try to do a scan.

Please help

Comment by yoggie — March 7, 2009 #
yoggie, Ask us for help at our forum.

Comment by Patrik — March 7, 2009 #
Hi Patrick

I was able to open Malwarebytes Anti-Malware and delete all infected files.However now i cant access any web pages.I keep getting a message saying the web page has been blocked and recommended that Antivirus 360 be installed.
I cant even get to the forum.The popup are gone but all my webpages are affected.please help.

Comment by yoggie — March 8, 2009 #
Try to use another browser – Firefox or Opera.

Comment by Patrik — March 8, 2009 #
Hi Patrick

Thanks this worked.Opera is a much better browser than internet explorer.

Thanks for your help !

Comment by yoggie — March 8, 2009 #
I HATE YOU ANTIVIRSUS 360.. I HATE YOU!!!!

Comment by BRACULA — March 8, 2009 #
RESTORE THE COMPUTER….GO TO THE RESTORE MENU TO THE PREVIOUS DAY… THEN BYE BYE ANTIVIRUS 360

Comment by BRACULA — March 8, 2009 #
YOU WILL NOT LOSE YOUR INFORMATION ON YOUR COMPUTER..

Comment by BRACULA — March 8, 2009 #
this proram is fucking shit full all the gay assholes who made it first anti 2009 now 360 won’t you motherfuckers ever give up this vundo thing has been working for 30 min and it didn’t find anything yet and those popups are killing me hey patrick need some help here my google chrome is unsable and internet explorer is shit uniblue spyware needs update and 360 is driving me crazy

Comment by ICE — March 9, 2009 #
Thanks very much for these notes, I found them easy to follow and they helped rid my computer of the horrible Antivirus 360. Thanks again

Comment by Aileen — March 9, 2009 #
ICE, ask us for help at our forum.

Comment by Patrik — March 9, 2009 #
No more pop-ups! NO more slow computer! Thank you Thank you Thank you This worked so well!!!

Comment by Susan — March 10, 2009 #
Patrik-You rock! It’s 4:25 am. I deal with this after I get some rest. I was already to crash out and I was checking email before this hit. I’m real angry, I just did a fresh install of my xp os less than 36 hours ago! My computer was a virgin! Not anymore…, the only thing I can think of as to how I picked this up – I was watching vids on youtube and youtube downloader to copy a few? Other than that no freaking idea. Thanks for the detail instructions. By the way I am using the latest versions of Avast and Zone Alarm free. Avast has a great on-access protection module that will intercept most of this crap before it lodges on your system. Those poor boys at Avast will need to take some more benzedrine and open a fresh pack of smokes so they can solve this one! You rock Patrik THANK YOU!

Comment by Matt — March 12, 2009 #
hi, i just done the Scan for Vundo, however, it said that there is NO infected item… so that there is no item for me to delete besides, my computer swtiches to a blue screen and said that my computer is infected by a spyware and restart again EVERY 5 MINS!! may i know what can i do now…? thank you.

Comment by yuki — March 13, 2009 #
also, when i start the avenger, there is an error: “invalid script: a valid script must begin with a command directive. Aborting excution!” then what should i do?

Comment by yuki — March 13, 2009 #
yuki, please follow these steps.

Comment by Patrik — March 13, 2009 #
sorry patrik, i can’t even get into the forum please help me:(

Comment by yuki — March 13, 2009 #
yuki, reboot your computer in the Safe mode.
Manually remove these two files:
c:\windows\system32\winsystems.dll
c:\windows\system32\winconfig.dll

Remove the folder: c:\Program files\A360
Reboot your computer in the Normal mode and run Malwarebytes Anti-malware, perform a scan.

Comment by Patrik — March 13, 2009 #
thank you Patrik!!! i’m almost there!
after i entered safe mode, i can successfully deleted the file C:/windows/system 32/winconfig.dll, and the folder C:/Program files/ A360. However, i couldn’t finf the file c:\windows\system32\winsystems.dll
After that, i restarted my computer in normal mode, and it seems that the Antivirus 360 doesn’t exist anymore! now i feel much better, really thx!! then what should i do now in order to COMPLETELY delete that Antivirus 360??

Comment by yuki — March 13, 2009 #
Run Malwarebytes Anti-malware, perform a scan.
Make sure that everything is checked, and click Remove Selected. When the scan is complete, click OK, then Show Results to view the results. Make sure that everything is checked, and click Remove Selected.
Its all

Comment by Patrik — March 14, 2009 #
for step 2, I downloaded avenger from the link. When I try to run avenger, it flashes a message box very quickly that I think says I need to click OK to use avenger. The message closes faster than I can click ok or press enter. Any guesses what I need to do to run avenger? I have tried in safe mode and normal mode.

Thanks for any advice

Owen

Comment by Owen — March 15, 2009 #
Owen, boot your computer in the Safe mode. Manually remove these two files: c:\windows\system32\winsystems.dll, c:\windows\system32\winconfig.dll
Remove the folder: c:\Program files\A360
Reboot your computer in the Normal mode and run Malwarebytes Anti-malware, perform a scan.

Comment by Patrik — March 15, 2009 #
hey patrik, i cannot run malwarebytes Anti-malware since the language displayed had some problems… it’s neither english nor chinese eventhough i chose it at the very beginning. where can i download an english or chinese version of malwarebytes Anti-malware ?
thanks!
yuki

Comment by yuki — March 16, 2009 #
Its strange, default language for MBAM is english, you can change it at first steps of installation procedure.

Comment by Patrik — March 16, 2009 #
thanks alot for ur instruction for removing 360. i was so upset,, thanks alot, it really works

Comment by syed — March 16, 2009 #
I have tried to follow your instructions to get this antivirus 360 nightmare to leave me alone, however everytime I visit a web page on my home computer it blocks me. I’ve tried Several failed attempts…what do I do to get this thing off my computer. It is blocking just about every site.

Comment by Jenni — March 17, 2009 #
Jenni, boot your computer in the Safe mode. Manually remove these two files: c:\windows\system32\winsystems.dll, c:\windows\system32\winconfig.dll
Remove the folder: c:\Program files\A360
Reboot your computer in the Normal mode and run Malwarebytes Anti-malware, perform a scan.

Comment by Patrik — March 18, 2009 #
i FREAKING LOVE YUU GUYS!
:]

Thank yu so much.

Comment by KiKi — March 18, 2009 #
after removing the 360 stupid ting, my com still run slow as compared before. issit suppose to be liddat? pls help

Comment by pea — March 18, 2009 #
Thank you so much for all your info. This A360 not only over-powered my desktop, but it stole $79,96 from my husband credit card. Thank to u & the bank security department, I could recover both.

Comment by Jenny (otra Jenny) — March 18, 2009 #
pea, please follow these steps.

Comment by Patrik — March 19, 2009 #
at the first step of installation procedure, it did ask me to choose the display language. But no matter i chose english or chinese, the language displayed is neither english nor chinese…:(

Comment by yuki — March 19, 2009 #
yuki, probably its problem with MBAM (you can ask about it at malwarebytes.org forum). Try to useSuper Antispyware.

Comment by Patrik — March 19, 2009 #
in safe mode, I deleted 1 file and 1 folder (not all three mentioned)…I downloaded VundoFix and it scanned but found over 800 files…now it wants me to pay/register…does this sound right? How can I trust it? after this gets worked out is my next step to download Avenger?

Comment by Jenni — March 24, 2009 #
I downloaded VundoFix and it scanned but found over 800 files…now it wants me to pay/register…does this sound right?

Looks like you have downloaded a Vundofix tool from google ad link, its not free vundofix tool. Don`t pay any money.
Skip step 1, goto step 2 or step 3.

Comment by Patrik — March 25, 2009 #
Patrik, really thank you very much! you’ve helped lots of people including me

Comment by yuki — April 1, 2009 #
Hi! there i don’t know but my pc got infected with kind of virus win32 kinda and other kind which infects my pc getting slow as well as frozen. I have aleast formated my hard disk say 60 or more times. it gives me some time relief and start as it was i am totally frustrated please help me 2 get this virus out of my computer. Thank u.

Comment by sunil — December 10, 2009 #
sunil, ask for help in our Spyware removal forum.

Comment by Patrik — December 11, 2009 #