Unable to uninstall 360 Total Security

Question

Hello,  My sister installed Adblock yesterday based on my advice. The problem is she downloaded the wrong version and installed Adblock Pro via Softonic. I can't uninstall it; it doesn't show up in the Windows uninstaller tool. I'm facing the same issue with a software installed by Softonic: 360 Total Security, which pretends to be an antivirus. I tried to delete the 360 directory, but it doesn't work. Last question: I want to back up her data. Is there a risk when copying her files to my computer? I use Ubuntu; is there a way to check for viruses on the USB stick? I want to clarify that I have already run AdwCleaner once, and a thorough Avast scan is in progress. Thanks in advance.

softsonic · Answer

Hello,  You should not install software from Softonic, as it installs undesirable programs as well.

Anonymous user · Answer

Hello  post this Adwcleaner report; thanks  -- ***-----------------------Security Contributor-------------------------*** We have all been beginners at something at one time. But knowledge is the reward for diligence.

Malekal_morte- · Answer

Hi,  there's a remover: https://support.norton.com/sp/fr/fr/home/current/solutions/v60392881  -- Like the angel you are, you laugh creating a lightness in my chest, Your eyes they penetrate me, (Your answer's always 'maybe') That's when I got up and left

Entilore · Answer

Thank you for your responses,  I didn't think to save the adwcleaner report. Is it saved in a particular location? The remover didn't work. That's not surprising, the software is not provided by Norton.

Anonymous user · Answer

Re  Download Malwarebytes Anti-Malware here https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/  --->> Install it (make sure to choose French); do not modify the installation settings --->> Uncheck the box Activate the free trial of Malwarebytes Anti-Malware Premium at the end of the installation --->> /!\ Windows Vista/7/8/8.1 users: right-click on the Malwarebytes Anti-Malware shortcut and choose Run as administrator --->> Click on Update in the Dashboard to update the database. --->> In the Scan tab, select Scan Threats then click on Scan Now. --->> Once the scan is complete, click on Quarantine All then on Apply Actions  --->> (If a message asks to restart the PC to complete the removal, agree)  --->> The report is available in History > Application Logs > Scan Log. (Make sure to choose the most recent one) Select the file and request the display In the bottom left, there is a export button; click on it and choose text file and then choose where to save it so you can post it in your next response  Thank you  @+  -- ***-----------------------Security Contributor-------------------------*** We have all been beginners at something at one point. But knowledge is the reward of diligence.

Entilore · Answer

Is he not going to confront Avast?

Anonymous user · Answer

Re  Have you noticed any improvement?  -- ***-----------------------Security Contributor-------------------------*** We have all been beginners at something at some point. But knowledge is the reward for diligence.

Entilore · Answer

Not really, no.

Anonymous user · Answer

Re  For more information, please do this  Open this link and download ZHPDiag from Nicolas Coolman:  https://nicolascoolman.eu  Or  https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/    Once the download is complete,  Double-click the icon to launch the program.  Under Vista; Seven or Windows 8 right-click "run as administrator"    In the ZHPDiag window that just opened,  click on "Configure"  Click on  the magnifying glass at the bottom left with the plus sign to start the scan.   Let the tool work, it may take a while.  A report will open. This report is also located on your desktop  To send the report, click on this link: http://pjjoint.malekal.com/  If there is a problem, use one of the following  https://forums-fec.be/upload  https://www.cjoint.com/   Check your desktop  Select the ZHPDiag.txt file.  Click on "Click here to upload the file".  A link of this form:  http://www.cijoint.com/cjlink.php?file=cj200905/cijSKAP5fU.txt  will be added to the page.  Copy this link into your response.  Thank you  @+  -- ***-----------------------Security Contributor-------------------------*** We have all been beginners at something at some point. But knowledge is the reward for diligence.

Entilore · Answer

I can't run it; 360 Total Security automatically deletes it (apparently ZHP diag is a Trojan ... Haha).

Anonymous user · Answer

Re  [*] Download to the desktop RogueKiller (by tigzy)  (choose between the 32 and 64-bit version depending on your Windows, if you don't know, just ask me!)  [*] Close all programs [*] Launch RogueKiller.exe. [*] Wait for the Prescan to finish ... [*] Click on Scan. Click on Report and copy-paste the content of the report  @+  -- ***-----------------------Security Contributor-------------------------*** We've all been beginners at something at some point. But knowledge is the reward for diligence.

Entilore · Answer

Here's the report: RogueKiller V9.2.13.0 (x64) [Sep 25 2014] by Adlice Software Email: https://www.adlice.com/contact/ Reports: https://forum.adlice.com/ Website: https://www.surlatoile.org/RogueKiller/ Blog: https://www.adlice.com/  Operating System: Windows 8.1 (6.3.9200) 64-bit version Startup: Normal mode User: Camille [Admin rights] Mode: Removal -- Date: 09/27/2014 17:36:21  ¤¤¤ Malicious Processes: 0 ¤¤¤  ¤¤¤ Registry Entries: 13 ¤¤¤ [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NOT SELECTED [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NOT SELECTED [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs : C:\Users\Camille\AppData\Local\Smartbar\Application\Resources\crdlil64.dll [x] -> REPLACED () [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-2190123621-3127979045-682105981-1001\Software\Microsoft\Internet Explorer\Main | Start Page : www.google.com -> NOT SELECTED [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-2190123621-3127979045-682105981-1001\Software\Microsoft\Internet Explorer\Main | Start Page : www.google.com -> NOT SELECTED [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-2190123621-3127979045-682105981-1002\Software\Microsoft\Internet Explorer\Main | Start Page : https://fr.yahoo.com?fr=hp-avast&type=avastbcl -> NOT SELECTED [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-2190123621-3127979045-682105981-1002\Software\Microsoft\Internet Explorer\Main | Start Page : https://fr.yahoo.com?fr=hp-avast&type=avastbcl -> NOT SELECTED [PUM.SearchPage] (X64) HKEY_USERS\S-1-5-21-2190123621-3127979045-682105981-1001\Software\Microsoft\Internet Explorer\Main | Search Page : www.google.com -> NOT SELECTED [PUM.SearchPage] (X86) HKEY_USERS\S-1-5-21-2190123621-3127979045-682105981-1001\Software\Microsoft\Internet Explorer\Main | Search Page : www.google.com -> NOT SELECTED [PUM.SearchPage] (X64) HKEY_USERS\S-1-5-21-2190123621-3127979045-682105981-1002\Software\Microsoft\Internet Explorer\Main | Search Page : https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} -> NOT SELECTED [PUM.SearchPage] (X86) HKEY_USERS\S-1-5-21-2190123621-3127979045-682105981-1002\Software\Microsoft\Internet Explorer\Main | Search Page : https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} -> NOT SELECTED  ¤¤¤ Scheduled Tasks: 4 ¤¤¤ [Suspicious.Path] IAVUSUXT.job -- C:\Users\Camille\AppData\Roaming\IAVUSUXT.exe (/infocmdline=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) -> DELETED [Suspicious.Path] UCE.job -- C:\Users\Camille\AppData\Roaming\UCE.exe (/infocmdline=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) -> DELETED [Suspicious.Path] \IAVUSUXT -- C:\Users\Camille\AppData\Roaming\IAVUSUXT.exe (/infocmdline=JxbBtRUVIp3nbm9zeKblL0j2tiy4m6nb5eFzhrqXfpJ0la9e4fUsOvn55G2U/Yvz5M+RCDG1qTPzLSmW5QXcP2SApQMomw8fkPYRKKwVx9k1vnJvdQNA2B3PWa9/EfSLXeu5ucRUUsd0pS4XlQE1VYNzPGXoTAT26qQUk95aBR+q7oXOm8K6ThZ2uBA8evg4uMG6/pldh4GIvbrwFhEkMdzSjuY/tmF3kyY4nuaKxP5Ov/ghfwWqI+NVrnJ05Ip8Ssn8Pup757waKc9zoh85ok/f17CJ7t6UD61VUjvXrKNEZ9fxa4wmKk6KW7tKpowFElDRlNlmObLszkJ/QAKWWq81HiXscOWx6FdCkw3aixMHZtAJ3k3Y3bJ26ThoNCAW1rhIUMp6K5VmSHJ8ovmaV+CITagyN8JGJoxwVdUbDYpZnTSC9RjwAqKw+E4vC9Td7vFRCqX7D2VlcSoY/TX03GrY2Jm8zrCVEPduTpJDQCgWqz1alIEhjtaGBvuaUcBisZkLutK+wRg09MBTdV6esMVJAnVrHQ18v7KwLAnjHLQ6qygpZwcc4FRKmt288xLM80NNLghoNjL7A5LleUPNwEK91s0rHvKmd83SdnKb64/+DklNpVBvfiP1S7ufH9ZR3T06y0c1dfgiSyZsKto8dEXbr5D/fQu+D2xz3adWKyg=) -> DELETED [Suspicious.Path] \UCE -- C:\Users\Camille\AppData\Roaming\UCE.exe (/infocmdline=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) -> ERROR [0]  ¤¤¤ Files: 0 ¤¤¤  ¤¤¤ HOSTS File: 0 ¤¤¤  ¤¤¤ Antirootkit: 0 (Driver: CHARGE) ¤¤¤  ¤¤¤ Web Browsers: 0 ¤¤¤  ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: ST1000LM024 HN-M101MBB +++++ --- User --- [MBR] 27e1843659451c18b582d4bcf7e5786c [BSP] 9cb9bd99896f179553067dcea5b1f913 : Unknown MBR Code Partition table: 0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB User = LL1 ... OK User = LL2 ... OK   ============================================ RKreport_SCN_09272014_173609.log

Anonymous user · Answer

Re  try to post me a ZHPDiag report now; thank you  @+  -- ***-----------------------Security Contributor-------------------------*** We have all been beginners at something at some point. But knowledge is the reward for diligence.

Entilore · Answer

I'm not sure at all about that, I have none of the options you mentioned: no configure, no magnifier, just repair.   ~ ZHPCleaner v2014.9.26.147 by Nicolas Coolman (26/09/2014) ~ Run by Camille (Administrator) (27/09/2014 17:51:14) ~ WebSite : https://nicolascoolman.eu ~ Forum : https://nicolascoolman.eu ~ State version : Updated version ~ Report : C:\Users\Camille\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Camille\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ Windows 81, 64-bit (Build 9600)   ---\ Restoration of default proxy settings. REPLACED PARAMETERS: EnableHttp1_1 ( 1 )   ---\ Repair of Microsoft Internet Explorer browser. REPLACED PARAMETERS: Start Page ( https://fr.yahoo.com?fr=hp-avast&type=avastbcl ) REPLACED PARAMETERS: Search Page ( https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} ) REPLACED PARAMETERS: Search Page ( https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} )   ---\ Deletion of harmful Browser Helper Objects from browsers (BHO). DELETED: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171196}\f3b99230f329013156aa33422def983b0061796 (PUP.CrossRider) DELETED: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171196}\f3b99230f329013156aa33422def983b0061796 (PUP.CrossRider)   ---\ Repair of the host file. ~ The host file is legitimate. (21)   ---\ Deletion of harmful extensions from Google Chrome (Manifest). DELETED EXT: eofcbnmajmjmplflapaojjnihcjkigck [Orphean]   ---\ Deletion of Adwares, PUPs, Spywares. MOVED: C:\WINDOWS\Prefetch\IMINENTMINIBARIE.EXE-5F5CED2A.pf (PUP.Minibar) MOVED: C:\WINDOWS\Prefetch\MINIBARFIREFOX.EXE-AD2AFDA7.pf (PUP.Minibar) MOVED: C:\WINDOWS\Prefetch\SOFTONICDOWNLOADER_POUR_ADBLO-4BA27204.pf (PUP.Softonic) MOVED: C:\WINDOWS\Prefetch\UMBRELLA236.EXE-6A77BC7A.pf (Adware.IMBooster)    ---\ Repair summary ~ Repair successfully completed ~ This browser is absent (Opera Software) ~ Repair canceled by the user (Internet Explorer)   End of clean at 17:51:58 =================== ZHPCleaner-27092014-17_51_58.txt

Anonymous user · Answer

Re  You posted a ZHPcleaner and not a ZHPDiag. Please read the procedure carefully before posting  Thank you  -- ***-----------------------Security Contributor-------------------------*** We have all been beginners at something at one point. But knowledge is the reward of diligence.

Entilore · Answer

Here is the truth:  https://pjjoint.malekal.com/files.php?id=ZHPDiag_20140927_t8p14z12b7c8

Anonymous user · Answer

Re  Use of the ZHPFix tool:  * Copy all the text present in the box below (select it with your mouse / Right-click on it and choose "copy" or press Ctrl+C)  ZHPFix Script O4 - HKLM\..\Wow6432Node\Run: [QHSafeTray] . (.Qihu Software Co. Limited - 360 Total Security.) -- C:\Program Files (x86)\360\Total Security\safemon\360Tray.exe O23 - Service: 360 Total Security (QHActiveDefense) . (.No owner - 360 Total Security.) - C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [MD5.07605ABEB10FC533881C91F19DECF69A] [APT] [AutoKMS] (...) -- C:\WINDOWS\AutoKMS\AutoKMS.exe [1923584] O39 - APT: AutoKMS - (...) -- C:\Windows\Tasks\AutoKMS.job [302] O39 - APT: AutoKMS - (...) -- C:\Windows\System32\Tasks\AutoKMS [302] O42 - Software: Yahoo Community Smartbar Engine - (.Linkury Inc..) [HKCU][64Bits] -- {072e8fb1-c93b-499a-9ace-efee4d773f97} [HKCU\Software\360] O43 - CFD: 25/09/2014 - 23:57:58 - [] ----D C:\Program Files (x86)\360 O43 - CFD: 26/09/2014 - 00:02:43 - [] ----D C:\ProgramData\360safe O45 - LFCP:[MD5.94F2FF3D17FFF3DE4434C353E48CE03A] - 25/09/2014 - 22:57:18 ---A- - C:\Windows\Prefetch\IMINENTSOFTONICREADY.EXE-516DAE4C.pf O61 - LFC: 25/09/2014 - 18:04:17 ---A- . (...) -- C:\Users\Camille\AppData\Local\Microsoft\Windows\INetCache\IE\2QKE9YZB\MinibarFirefox[1].exe [1144648] O61 - LFC: 25/09/2014 - 18:04:17 ---A- . (.Sien SA.) -- C:\Users\Camille\AppData\Local\Microsoft\Windows\INetCache\IE\F0ZTZ020\MinibarChrome[1].exe [755840] O61 - LFC: 25/09/2014 - 18:04:18 ---A- . (...) -- C:\Users\Camille\AppData\Local\Microsoft\Windows\INetCache\IE\OMZTKQ7N\IminentMinibarIE[1].exe [1062760] O90 - PUC: "F274703B9DB704042955ECD6A611693A" . (.Software Updater.) -- C:\WINDOWS\Installer\{B307472F-7BD9-4040-9255-CE6D6A1196A3}\icon.ico [MD5.103F619246C8BEFBA0EFA12CD1092648] [WIS][27/08/2014] (.LPT - LPT System Updater Service.) -- C:\Windows\Installer\a146b02.msi [2154496] SR - | Auto 10/09/2014 707184 | (QHActiveDefense) . (...) - C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [HKLM\Software\Wow6432Node\360Safe] C:\WINDOWS\AutoKMS\AutoKMS.exe C:\Windows\Tasks\AutoKMS.job C:\Windows\System32\Tasks\AutoKMS C:\Windows\Installer\a146b02.msi C:\Users\Camille\AppData\Local\Temp\IminentSoftonicReady.exe O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2190123621-3127979045-682105981-1002Core [942] O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2190123621-3127979045-682105981-1002UA [964]  O41 - Driver: (360Box64) . (.360.cn - 360Box64.) - C:\Windows\System32\DRIVERS\360Box64.sys  O41 - Driver: (360Camera) . (.360.cn - 360???? ???????.) - C:\Windows\System32\Drivers\360Camera64.sys  O41 - Driver: (360FsFlt) . (.Qihu 360 Software Co., Ltd. - 360 Internet Security Proactive Defense.) - C:\Windows\System32\DRIVERS\360FsFlt.sys  [HKLM\Software\Wow6432Node\360TotalSecurity]  [HKLM\Software\Wow6432Node\360softmgr]  O44 - LFC:[MD5.A583F4DAAA4DB87BF92FD033966ABC4B] - 25/09/2014 - 22:58:23 ---A- . (.360.cn - 360Box64.) -- C:\Windows\System32\Drivers\360Box64.sys [305736]  O44 - LFC:[MD5.D31541708A595BCA380105D44C2C2AD5] - 25/09/2014 - 22:58:24 ---A- . (.360.cn - 360???? ???????.) -- C:\Windows\System32\Drivers\360Camera64.sys [40520]  O44 - LFC:[MD5.15FE196A71357AC9FF6E5A4B360BDB20] - 25/09/2014 - 22:58:24 ---A- . (.360.cn - 360???? ??????.) -- C:\Windows\System32\Drivers\360AntiHacker64.sys [100424]  O44 - LFC:[MD5.3AA0D07082BF4B4EFF8BAE9F4EDF783B] - 25/09/2014 - 22:58:27 ---A- . (.Qihu 360 Software Co., Ltd. - 360 Internet Security Proactive Defense.) -- C:\Windows\System32\Drivers\360fsflt.sys [311888]  O58 - SDL:10/09/2014 - 11:53:14 ---A- . (.360.cn - 360???? ??????.) -- C:\Windows\System32\Drivers\360AntiHacker64.sys [100424]  O58 - SDL:10/09/2014 - 11:53:14 ---A- . (.360.cn - 360Box64.) -- C:\Windows\System32\Drivers\360Box64.sys [305736]  O58 - SDL:10/09/2014 - 11:53:14 ---A- . (.360.cn - 360???? ???????.) -- C:\Windows\System32\Drivers\360Camera64.sys [40520]  O58 - SDL:10/09/2014 - 11:53:14 ---A- . (.Qihu 360 Software Co., Ltd. - 360 Internet Security Proactive Defense.) -- C:\Windows\System32\Drivers\360fsflt.sys [311888]  O61 - LFC: 25/09/2014 - 18:04:31 ---A- . (...) -- C:\Users\Camille\Desktop\abp.exe [448783]  O61 - LFC: 27/09/2014 - 18:04:31 ---A- . (...) -- C:\Users\Camille\Desktop\Norton_Removal_Tool.exe [870728]  [MD5.C0B59FF7EE933362B2D5D1941094C879] [SPRF][25/09/2014] (...) -- C:\Users\Camille\Desktop\abp.exe [448783]  [MD5.9631FA36F4784888F0918394778B8B07] [SPRF][27/09/2014] (...) -- C:\Users\Camille\Desktop\Norton_Removal_Tool.exe [870728] ShortcutFix EmptyPrefetch FirewallRAZ Emptytemp EmptyCLSID  -------------------------------------------------------------------------------------------- Run ZHPFix from the shortcut on your Desktop (if you are using Windows Vista, 7, or 8, do it by right-clicking --> Run as administrator)  Click on the  Import  button. The content of the clipboard will be pasted into the input area of ZHPFix   NB (W8) : In some cases, the script is automatically pasted into the script area and does not require clicking the "IMPORT" button.  * Click the  GO  button to start the cleanup.  -> let the tool work and do not touch anything ... -> If you are asked to restart the PC to complete the cleaning, do it!   Once completed, a new report will be displayed: post the content of this report in your next response ... This report is copied to the desktop  ( this report is also saved in this folder:  - For XP: C:\Documents and Settings\username\Local Settings\Application Data\ZHP - Since Vista: C:\Users\username\AppData\Roaming\ZHP\ZHPFix [R1].txt)  @+  -- ***-----------------------Security Contributor-------------------------*** We have all been a beginner at something. But knowledge is the reward of diligence.

Entilore · Answer

Here is the result:  ZHPFix Report 2014.9.16.7 by Nicolas Coolman, Update of 09/16/2014 Registry export file: Run by Camille at 09/27/2014 06:29:20 PM High Elevated Privileges: OK Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)  Trash emptied (00mn 09s) Prefetcher folder emptied Browser shortcut repair  ========== Memory Processes ========== DELETED: Memory Process: C:\WINDOWS\AutoKMS\AutoKMS.exe DELETED: Memory Process: C:\Users\Camille\AppData\Local\Temp\IminentSoftonicReady.exe  ========== Registry Keys ========== DELETED:³ Service: QHActiveDefense DELETED: HKCU\Software\360 DELETED: [HKLM\Software\Classes\Installer\Products\F274703B9DB704042955ECD6A611693A] DELETED: [HKLM\Software\Classes\Installer\Features\F274703B9DB704042955ECD6A611693A] DELETED:³ HKLM\Software\Wow6432Node\360Safe DELETED:³ HKLM\Software\Wow6432Node\360TotalSecurity DELETED: HKLM\Software\Wow6432Node\360softmgr  ========== Registry Values ========== ERROR RunValue: QHSafeTray No Standard Profile Value: FirewallRaz : No Domain Profile Value: FirewallRaz : DELETED: FirewallRaz (Domain) : {9E3D57FC-7C37-4424-9352-4831E97D029D} DELETED: FirewallRaz (Domain) : {548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6} DELETED: FirewallRaz (Domain) : NetPres-In-TCP-NoScope DELETED: FirewallRaz (Domain) : NetPres-Out-TCP-NoScope DELETED: FirewallRaz (None) : NetPres-WSD-In-UDP DELETED: FirewallRaz (None) : NetPres-WSD-Out-UDP DELETED: FirewallRaz (Public) : NetPres-In-TCP DELETED: FirewallRaz (Public) : NetPres-Out-TCP DELETED: FirewallRaz (None) : MCX-Prov-Out-TCP DELETED: FirewallRaz (None) : MCX-McrMgr-Out-TCP DELETED: FirewallRaz (Private) : {A67D968A-3E32-450B-88C6-2916D3C0CBED} DELETED: FirewallRaz (Private) : {6FB17EE1-9F79-4F63-933B-22B90C6C4123} DELETED: FirewallRaz (Public) : {9CBDB688-1560-4EC3-B3C4-13B86FD1A88A} DELETED: FirewallRaz (Public) : {99AB5382-1059-45AC-AAEB-E32736E99DF9} DELETED: FirewallRaz (Domain) : {E7985E1D-C36F-4787-80A8-6350D07E9266} DELETED: FirewallRaz (None) : {808F1451-4108-46FD-ADBB-F17324B5F0BD} DELETED: FirewallRaz (Private) : {9AEFA097-386D-4148-94C1-1B123FA68813} DELETED: FirewallRaz (Private) : {3D4C61C0-E773-4672-AE52-48130E65BA61}  ========== Folders ========== No empty Local user CLSID folders  ========== Files ========== DELETED Restart: c:\program files (x86)\360	otal security\safemon\360tray.exe DELETED: c:\windows\prefetch\iminentsoftonicready.exe-516dae4c.pf DELETED: c:\users\camille\appdata\local\microsoft\windows\inetcache\ie\2qke9yzb\minibarfirefox[1].exe DELETED: c:\users\camille\appdata\local\microsoft\windows\inetcache\ie\f0ztz020\minibarchrome[1].exe DELETED: c:\users\camille\appdata\local\microsoft\windows\inetcache\ie\omztkq7n\iminentminibarie[1].exe DELETED: C:\Windows\Installer\a146b02.msi DELETED Restart: c:\windows\system32	asks\facebookupdatetaskusers-1-5-21-2190123621-3127979045-682105981-1002core DELETED Restart: c:\windows\system32	asks\facebookupdatetaskusers-1-5-21-2190123621-3127979045-682105981-1002ua DELETED Restart: c:\windows\system32\drivers\360box64.sys DELETED Restart: c:\windows\system32\drivers\360camera64.sys DELETED Restart: c:\windows\system32\drivers\360antihacker64.sys DELETED Restart: c:\windows\system32\drivers\360fsflt.sys DELETED: c:\users\camille\desktop\abp.exe DELETED: c:\users\camille\desktop
orton_removal_tool.exe DELETED Temporary Windows (874) (307 528 646 bytes)  ========== Scheduled Task ========== DELETED: AutoKMS DELETED: AutoKMS   ========== Summary ========== 2: Memory Processes 7: Registry Keys 21: Registry Values 1: Folders 15: Files 2: Scheduled Tasks   End of clean in 02mn 04s  ========== File Path Report ========== C:\Users\Camille\AppData\Roaming\ZHP\ZHPFix[R1].txt - 09/27/2014 06:29:30 PM [3879]

Anonymous user · Answer

Re  Do you still have any problems?  See you soon  -- ***-----------------------Security Contributor-------------------------*** We have all been beginners at something at one point. But knowledge is the reward of diligence.

Entilore · Answer

No, 360 still exists.  I think I'm going to do a system recovery. We'll see what happens.

Anonymous user · Answer

Keep me posted; thanks  -- ***-----------------------Security Contributor-------------------------*** We've all been a beginner at something at one point. But knowledge is the reward for diligence.

tigilles1 · Answer

Hello, I have the same problem. I wanted to download iMesh with Softonic, but the program ♥Softonic♥ blocked iMesh, and instead, I got 360 Total Security, which is now blocking my software downloads. It’s a real mess that I can’t get rid of ♥. I tried with several free programs like Malwarebytes ♥, AdwCleaner, Avast ♥, AVG Internet, ESET Mod32. The last one I tried, CCleaner ♥, didn't want to uninstall it. I don't know what to do anymore. Your help would be greatly appreciated. Thank you in advance. P.S. My PC is a Toshiba and it runs on Windows 7.

Unable to uninstall 360 Total Security

22 answers

Computer tower

Texture issues in enshrouded

Antivirus

I have a funyet mini pc and the video output has failed.

Gmail unavailable in edge

Facebook is having trouble loading.

Car parts 24 and autodoc complicated site

8 keys not working on my laptop keyboard

Printing issue: copy on hp officejet 3831 windows 10

Flood of emails about tracking pixels: new regulation at fault