Rogue software details: Win Security 360

Win Security 360 is a rogue security program discovered by security researcher Bharath M Narayan. This program is promoted through the use of malware and online scams that pretend to be online anti-malware scanners. When the program is installed on your computer it will be configured to start automatically when Windows starts. Once started it will scan your computer and list a variety of infections, but will state it will not remove them unless you first purchase the program. In reality, the infections it detects are all legitimate programs that include cmd.exe, expand.exe, and mbam.exe. Therefore, please do not act upon any of the scan results it displays as you may delete a file that is required for Windows to operate properly.

Win Security 360 screen shot
Win Security 360 screen shot
For more screen shots of this infection click on the image above.
There are a total of 6 images you can view.

While Win Security 360 is running it will also terminate legitimate programs that may be running. When it terminates these programs it will state that the program is infected and that it has crashed. The text of the alert is:

Application <program>.exe has crashed because of Conficker.Worm Virus.

Infected File: <path to process that is terminated>

Potential Risks: Viruses is spreading over your PC and the system status is unsafe. Your service provider may lock you out of internet access, because your PC is potentially harmful.

Viruse””s actions: Steal your personal data and send it to the remote host. Spread between your friends quickly (via internet or storage drives). Send spam and malicious codes from your computer.

This alert will then prompt you to protect yourself from this supposed infection by purchasing the program. It goes without saying that you should definitely not purchase Win Security 360 as this is just a trick to make you think your program is infected.

Without a doubt, Win Security 360 was created with one purpose in mind; to scam you into thinking you are infected so that you will then purchase the program. As said previously, please do not purchase this program and if you already have, please contact your credit card company and dispute the charges. Last, but not least, to remove this infection and any related malware, please use the removal guide below.