|
Title: Ghost Antivirus
Type: Rogue Antispyware
Remove Ghost Antivirus. Removal instructions
Also known as: GhostAntivirus
Severity scale:
 (96 / 100)
Ghost Antivirus loads fake system scanners when installed. It displays exaggerated scan results with tons of worms, Trojans and other spyware “detected” after checking. This application typically shows fake alerts about a critical security level such as “Serious security and privacy threats found on your computer!” and using such messages tries to convince PC users that they really have security problems on their PCs. Finally, as a solution for fixing everything and deleting all these cyber threats, Ghost Antivirus directs victims to purchase its “full’ version. However, wasting your money in such a way is not recommended! All the files, reported by Ghost Antivirus as infections, in reality are legitimate Windows files, so their removal can even affect a proper operation of your PC. Ghost Antivirus attacks compromised machines with trojans and fake online anti-malware scanners help that usually are met on insecure websites. There are tens of domains that are known to be bonded with this malware: 93.190.140.165 Softwareanti com 93.190.140.165 Softwarejar com 93.190.140.165 Softwarerising com 93.190.140.165 Softwaresecure net 93.190.140.165 Softwarespyware net 93.190.140.165 Softwarethe net 93.190.140.165 Softwarethreats com 93.190.140.165 Softwarethreats net 93.190.140.165 Softwarexp net 93.190.140.165 Softwarespam net 93.174.95.194 Ghost-antivirus com 93.174.95.194 Ghost-pay com 93.174.95.194 Ghostantivirus com 93.174.95.194 Ghostpays com. When downloaded and installed, GhostAntivirus firstly protects itself by disabling Task Manager and also installing other malware which has a filename It must be clear that Ghost Antivirus seeks only to mislead users into purchasing its “full” version. This ransom ware should not be purchased in any circumstances and must be removed once after detection. Contact your credit card immediately if you have already purchased Ghost Antivirus. Dispute the charges and delete every file connected to this malware. A reputable anti-spyware is highly recommended when you find this malware on your computer. Remove Ghost Antivirus ASAP. Related files: [random symbols]onin.exe, services.exe, pguard.ini, iPSh.png, iMSh.png, iGSh.png, times.conf, links.txt, Uninstall Ghost Antivirus.lnk, unins000.exe, uill.ini, settings.ini, Purchase License.lnk, Ghost Antivirus Home Page.lnk, Ghost Antivirus.lnk, [random symbols].dll, wmilib.dll, version.db, listing.cfg, Infected.wav, ghost.sql, working.log, web.ico, uninst.ico, unins000.dat, register.ico, ghostav.exe Ghost Antivirus properties: • Changes browser settings • Shows commercial adverts • Connects itself to the internet • Hides from the user • Stays resident in background Ghost Antivirus snapshot:  Automatic Ghost Antivirus removal: 
Tested and Confirmed! STOPzilla removes Ghost Antivirus (2010-01-14 01:00:06)
Tested and Confirmed! Malwarebytes Anti Malware removes Ghost Antivirus (2010-01-14 01:00:06)
We are testing Spyware Doctor's efficiency at removing Ghost Antivirus
(2010-01-15 00:39:20)
Ghost Antivirus manual removal:Kill processes:ghostav.exe unins000.exe [random symbols]onin.exe services.exe Delete registry values: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ghost Antivirus_is1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe HKEY_CURRENT_USER\Software\Microsoft\FTP ??SearchDir?? = ??%Program Files%\Ghost Antivirus\?? HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run ??onin?? HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ??Ghost Antivirus?? HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce ??3P_UDEC?? HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent ??URIAPRO[1.1.3.9]?? HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe ??Debugger?? = ????? HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe ??RealDebugger?? = ????? HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ??RealLogonType?? = ??1? Unregister DLLs: WMILib.dll [random symbols].dll Delete files: ghostav.exe register.ico unins000.dat uninst.ico web.ico working.log ghost.sql Infected.wav listing.cfg version.db WMILib.dll [random symbols].dll Ghost Antivirus.lnk Ghost Antivirus Home Page.lnk Ghost Antivirus.lnk Purchase License.lnk settings.ini uill.ini unins000.exe Uninstall Ghost Antivirus.lnk links.txt times.conf Ghost Antivirus.lnk iGSh.png iMSh.png iPSh.png pguard.ini services.exe [random symbols]onin.exe Delete directories: %Program Files%\Ghost Antivirus\ %Program Files%\Ghost Antivirus\Languages\ %Program Files%\Ghost Antivirus\lib\ %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\ %Documents and Settings%\All Users\Application Data\Ghost Antivirus\ %Documents and Settings%\[User Name]\Application Data\Ghost Antivirus\lib\ 
Information added: 2010-01-14 01:00:06
Information updated: 2010-01-14 22:02:05 Additional resources related to Ghost Antivirus:Attention: If you know or you have a website or page about Ghost Antivirus removal, feel free to add a link to this list: add url |
Latest spyware news:
Subscribe to news
Similar parasites:
|
FORUM:
HELP:
Spreading the knowledge:
It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your
visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
Post Comment: