These dodgy software makers never quit as another program has been released, Its name is Ghost Antivirus and its only aim is to disguise itself as a legitmate antivirus program that will remove threats and continue to protect your PC which simply is not the case. These programs are called Rogue anti-spyware programs that gain access to your PC through backdoor Trojans and once installed will continue to annoy you with fake pop-up messages and system scans which lead the user to believe they need to purchase the full version of the program to remove the found threats. Whatever you do not purchase the useless software and look to remove Ghost Antivirus for good by reading the guide below:
Threat Level: High
Ignoring Ghost Antivirus will cause major system disruption and further malware invasion which will risk your privacy and computers security.
Note : To avoid the unnecessary risk of damaging your computer, we highly recommend you use a good malware removal utility to automatically detect and remove Ghost Antivirus and other spyware threats on your PC. Plus you will be enabling real time protection so you never get infected by spyware again
Download Spyware Doctor Ghost Antivirus Removal Tool
You May Have to Start Your PC In Safe Mode To Remove This Virus: As the computer is booting press “F8” to load into safe mode. When the Windows Advanced Options menu appears, select “Safe Mode with Networking“. Now download the removal tool and scan your PC to detect and remove the malware
Ghost Antivirus Manual Removal:
**Manual Removal is a Highly Risky Procedure and Only recommended for Full Computer Experts, Deleting The wrong File could Cause an Entire System Failure**
The best way to remove Ghost Antivirus would be to use a proven Spyware removal Tool.
Note: This manual removal process is very difficult, nothing is guaranteed, and you run the risk of destroying your computer. We highly recommend you use Spyware Doctor 2010 to remove the threat:
Stop Ghost Antivirus processes:
GhostAV.exe
unins000.exe
services.exe
[random]onin.exe
Remove Ghost Antivirus registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ghost Antivirus_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\FTP “SearchDir” = “c:\program files\Ghost Antivirus\”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run “onin”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Ghost Antivirus”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “3P_UDEC”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent “URIAPRO[1.1.3.9]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “Debugger” = “?”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “RealDebugger” = “?”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon “RealLogonType” = “1″
Remove Ghost Antivirus DLLs:
c:\Program Files\Ghost Antivirus\lib\WMILib.dll
c:\WINDOWS\system32\[random].dll
c:\WINDOWS\system32\[random].dll
Delete Ghost Antivirus files:
c:\Program Files\Ghost Antivirus\GhostAV.exe
c:\Program Files\Ghost Antivirus\register.ico
c:\Program Files\Ghost Antivirus\unins000.dat
c:\Program Files\Ghost Antivirus\uninst.ico
c:\Program Files\Ghost Antivirus\web.ico
c:\Program Files\Ghost Antivirus\working.log
c:\Program Files\Ghost Antivirus\lib\ghost.sql
c:\Program Files\Ghost Antivirus\lib\Infected.wav
c:\Program Files\Ghost Antivirus\lib\listing.cfg
c:\Program Files\Ghost Antivirus\lib\version.db
c:\Documents and Settings\All Users\Desktop\Ghost Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus Home Page.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\Purchase License.lnk
%UserProfile%\Application Data\Ghost Antivirus\settings.ini
%UserProfile%\Application Data\Ghost Antivirus\uill.ini
%UserProfile%\Application Data\Ghost Antivirus\unins000.exe
%UserProfile%\Application Data\Ghost Antivirus\Uninstall Ghost Antivirus.lnk
%UserProfile%\Application Data\Ghost Antivirus\lib\links.txt
%UserProfile%\Application Data\Ghost Antivirus\lib\properties
%UserProfile%\Application Data\Ghost Antivirus\lib\times.conf
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Ghost Antivirus.lnk
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
\onin.exe
Get rid of Ghost Antivirus folders:
c:\Program Files\Ghost Antivirus\
c:\Program Files\Ghost Antivirus\Languages\
c:\Program Files\Ghost Antivirus\lib\
c:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\
%UserProfile%\Application Data\Ghost Antivirus\
%UserProfile%\Application Data\Ghost Antivirus\lib\
Please, be aware that manual removal of Ghost Antivirus is a cumbersome procedure and does not ensure complete deletion of the malware, due to the fact that some files might be hidden or may automatically reanimate themselves afterwards.
Recommended Removal:
Our suggestion for preventing future malware is to obtain a good online anti-spyware program, which will make sure that your system remains safe when you surf on the web. Using and downloading from the internet without Spyware protection in play is basically asking for trouble!
If you think you may already have Ghost Antivirus, then use our removal tool to find Ghost Antivirus and other common malware infections.
