Ghost Antivirus manual removal:
Kill processes:
ghostav.exe unins000.exe [random symbols]onin.exe services.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ghost Antivirus_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\FTP “SearchDir” = “%Program Files%\Ghost Antivirus\”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run “onin”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Ghost Antivirus”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “3P_UDEC”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent “URIAPRO[1.1.3.9]“
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “Debugger” = “?”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “RealDebugger” = “?”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon “RealLogonType” = “1″
Unregister DLLs:WMILib.dll [random symbols].dll
Delete files:ghostav.exe register.ico unins000.dat uninst.ico web.ico working.log ghost.sql Infected.wav listing.cfg version.db WMILib.dll [random symbols].dll Ghost Antivirus.lnk Ghost Antivirus Home Page.lnk Ghost Antivirus.lnk Purchase License.lnk settings.ini uill.ini unins000.exe Uninstall Ghost Antivirus.lnk links.txt times.conf Ghost Antivirus.lnk iGSh.png iMSh.png iPSh.png pguard.ini services.exe [random symbols]onin.exe
Delete directories:%Program Files%\Ghost Antivirus\
%Program Files%\Ghost Antivirus\Languages\
%Program Files%\Ghost Antivirus\lib\
%Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\
%Documents and Settings%\All Users\Application Data\Ghost Antivirus\
%Documents and Settings%\[User Name]\Application Data\Ghost Antivirus\lib\
Post Comment:
Attention: Use this form only if you have additional information about Ghost Antivirus parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.