Windows Protection

Ghost Antivirus Description:

GhostAntivirus (alias GhostAntivirus) is a scareware follower of the notorious Internet Antivirus Pro rogue antivirus software. Ghost Antivirus has been apparently released to become yet more aggressive and vastly distributed than its forerunner mentioned above. Ghost Antivirus infiltrates into a random targeted system through backdoor tactics which usually don’t go without the use of Trojan Downloader caught from unsafe internet sources. The most common method of Ghost Antivirus propagation is via fake online security scanners and unsafe downloads bundled with malicious software which installs Ghost Antivirus proper afterwards. Once inside your computer and active, Ghost Antivirus will partially hack your system by modifying the registry data and creating some corrupt files. This will lead to Ghost Antivirus executables permanently running from the very moment you log into Windows. As a result, Ghost Antivirus will keep triggering its fabricated system scanners, phony popup alerts, system tray notifications etc. All of these ads are trying to make it look as though you had some severe security risks. It’s at that point that Ghost Antivirus will demand your payment to remove these purportedly detected insecure entities. This sounds like blackmailing, doesn’t it? That’s exactly how cyber crooks are gaining income nowadays so please be watchful for junk programs like Ghost Antivirus. It’s strongly recommended to remove Ghost Antivirus rogue anti-spyware once you spot it on your machine (please see more information below).

Find out if your PC is infected with GhostAntivirus:

Download GhostAntivirus Free Scanner with Remover

GhostAntivirus GUI Screenshot:

How to remove GhostAntivirus manually:

To perform manual removal of GhostAntivirus, you should do the following:

Delete GhostAntivirus corrupt files:

• %Program Files%\Ghost Antivirus\
• %Program Files%\Ghost Antivirus\GhostAV.exe
• %Program Files%\Ghost Antivirus\register.ico
• %Program Files%\Ghost Antivirus\unins000.dat
• %Program Files%\Ghost Antivirus\uninst.ico
• %Program Files%\Ghost Antivirus\web.ico
• %Program Files%\Ghost Antivirus\working.log
• %Program Files%\Ghost Antivirus\Languages\
• %Program Files%\Ghost Antivirus\lib\
• %Program Files%\Ghost Antivirus\lib\ghost.sql
• %Program Files%\Ghost Antivirus\lib\Infected.wav
• %Program Files%\Ghost Antivirus\lib\listing.cfg
• %Program Files%\Ghost Antivirus\lib\version.db
• %Program Files%\Ghost Antivirus\lib\WMILib.dll
• %WINDOWS%\system32\[random].dll
• %WINDOWS%\system32\[random].dll
• %Documents and Settings%\All Users\Desktop\Ghost Antivirus.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\
• %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus Home Page.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\Purchase License.lnk
• %UserProfile%\Application Data\Ghost Antivirus\
• %UserProfile%\Application Data\Ghost Antivirus\settings.ini
• %UserProfile%\Application Data\Ghost Antivirus\uill.ini
• %UserProfile%\Application Data\Ghost Antivirus\unins000.exe
• %UserProfile%\Application Data\Ghost Antivirus\Uninstall Ghost Antivirus.lnk
• %UserProfile%\Application Data\Ghost Antivirus\lib\
• %UserProfile%\Application Data\Ghost Antivirus\lib\links.txt
• %UserProfile%\Application Data\Ghost Antivirus\lib\properties
• %UserProfile%\Application Data\Ghost Antivirus\lib\times.conf
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Ghost Antivirus.lnk
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• [random path]\onin.exe

Remove Ghost Antivirus associated registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ghost Antivirus_is1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
• HKEY_CURRENT_USER\Software\Microsoft\FTP “SearchDir” = “c:\program files\Ghost Antivirus\”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run “[random]onin”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Ghost Antivirus”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “3P_UDEC”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent “URIAPRO[1.1.3.9]“
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “Debugger” = “?”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “RealDebugger” = “?”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon “RealLogonType” = “1″

Please, note that manual removal of Ghost Antivirus is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic Ghost Antivirus removal tool below:

Download Ghost Antivirus Removal Tool