Title: Ghost

Remove Ghost. Removal instructions

Severity scale:

(67 / 100)

Ghost is a large RAT virus family, designed to annoy the victim by performing stupid useless operations, such as open/close CD-rom, turn off/on the monitor, etc. The virus in a non-destructive type of RAT. It can not damage the system, however some versions include a "keylogger" ability. Some personal information, such as passwords and bank account numbers can be lost. The author of this pest is a hacker called Lame_Joker. The pest is written in Visual Basic. Many variants (Ghost 2.0, Ghost 2.1, Ghost 2.2, Ghost 2.3, Ghost 2.4a, Ghost Mini-Server 2.3) appeared in the internet from October 2001 to August 2002. The place of origination is Israel.

From the publisher:

"The purpose of this program is to ANNOY THE VICTEM without giveing the 'hacker' the tools that could destroy or damage the victem's computer... Open/Close you host's CD-ROM drive, Hide/Show start button, Hide/Show startBar, Hide/Show taskIcons, Disable/Enable Ctrl+alt+del, Set a random background color, Logoff user, Force restart, send customed messages, Send host to a url, Blackout/Blackin host's windows, Start host's notepad, Chack ICQ UINs for online status, Prank host, Put a custome junk File on Host's DeskTop ,Print crap on host's printer, reset host's mouse position and Hide/Show teskBar Clock. Pranks: Microsoft warning - Send the host a fake worning message from the Microsoft server telling it that an illegal Windows key number was detected installed on his system. Tip of the day - Let the host know about some interesting yet stupid tips/facts about himself.'
'This server is undetected to most antivirus programs! Including Macaffe,Norton,The cleaner,AVP,Panda,Esafe(Antivirus) etc... Server is very small (31k), and was tested on Win9x/NT/ME/XP systems. In order to work, Microsoft VB runtime files must be installed on target PC (including winsock controls!)"

Ghost properties:
• Allows remote user connection
• Logs keystrokes
• Hides from the user
• Stays resident in background

Automatic Ghost removal:

remover for Ghost

SpyHunter is recommended remover to uninstall Ghost. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Ghost using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing Ghost (2005-03-27 14:15:40)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Ghost (2005-03-27 14:15:40)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Ghost (2005-03-27 14:15:40)

XoftSpySE Anti Spyware

download | review

Ghost manual removal:

FORUM:
Discuss Ghost in
spyware removal forum

Kill processes:
binder.exe, ghost.exe, ghostserver.exe, ghostservereditor.exe, mini-server.exe, server.exe, winsck_droper.exe

HELP:
how to kill malicious processes

Delete files:
alpha.txt, binder.exe, ghost mini-server.txt, ghost.exe, ghostserver.exe, ghostservereditor.exe, mini-server.exe, readme.txt, server.exe, small server.bat, winsck_droper.exe

HELP:
how to remove harmful files

Information added: 2005-03-27 11:38:25
Information updated: 2005-03-27 11:38:25

Additional resources related to Ghost:

Attention: If you know or you have a website or page about Ghost removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Ghost parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.