How to get rid of Ghost Antivirus
Filed Under (Rogue Antispyware) by admin on 15-01-2010
0
About Ghost Antivirus:
When you notice a first warning messages about threats on your PC you should immediately recognize Ghost Antivirus (GhostAntivirus) to be an unsafe and misleading application that is created with the only purpose to scare you and brainwash to buying the registered version of Ghost Antivirus. Ghost Antivirus is a really junk scareware program that you may get on your PC by chance while surfing the web and visiting some unsafe sites. As it usually happened Ghost Antivirus is downloaded to you system with help of Trojans that serve as transport, programmed by black hat IT specialists. It looks like they never have holidays and their only desire is to flood internet with great amount different rogue applications. When you reboot you machine you’ll notice at once fake system tray notifications, infiltration alerts and bogus virus scanners that don’t stop to pop up. All symptoms mean that the application is really rogue and malicious and the best you can do in this situation is to get rid of Ghost Antivirus without any delay.
Download Ghost Antivirus remover tool.

How to get rid of Ghost Antivirus manually:
To get rid of Ghost Antivirus you must stop and remove processes, unregister DLL files, search and delete all other Ghost Antivirus files and registry utility. Follow the Ghost Antivirus removal instructions below.
Search and delete Ghost Antivirus registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ghost Antivirus_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\FTP “SearchDir” = “c:\program files\Ghost Antivirus\”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run “onin”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Ghost Antivirus”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “3P_UDEC”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent “URIAPRO[1.1.3.9]“
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “Debugger” = “?”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “RealDebugger” = “?”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon “RealLogonType” = “1″
Search and delete Ghost Antivirus files:
c:\Program Files\Ghost Antivirus\
c:\Program Files\Ghost Antivirus\GhostAV.exe
c:\Program Files\Ghost Antivirusegister.ico
c:\Program Files\Ghost Antivirus\unins000.dat
c:\Program Files\Ghost Antivirus\uninst.ico
c:\Program Files\Ghost Antivirus\web.ico
c:\Program Files\Ghost Antivirus\working.log
c:\Program Files\Ghost Antivirus\Languages\
c:\Program Files\Ghost Antivirus\lib\
c:\Program Files\Ghost Antivirus\lib\ghost.sql
c:\Program Files\Ghost Antivirus\lib\Infected.wav
c:\Program Files\Ghost Antivirus\lib\listing.cfg
c:\Program Files\Ghost Antivirus\lib\version.db
c:\Program Files\Ghost Antivirus\lib\WMILib.dll
c:\WINDOWS\system32\.dll
c:\WINDOWS\system32\.dll
c:\Documents and Settings\All Users\Desktop\Ghost Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\
c:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus Home Page.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\Purchase License.lnk
%UserProfile%\Application Data\Ghost Antivirus\
%UserProfile%\Application Data\Ghost Antivirus\settings.ini
%UserProfile%\Application Data\Ghost Antivirus\uill.ini
%UserProfile%\Application Data\Ghost Antivirus\unins000.exe
%UserProfile%\Application Data\Ghost Antivirus\Uninstall Ghost Antivirus.lnk
%UserProfile%\Application Data\Ghost Antivirus\lib\
%UserProfile%\Application Data\Ghost Antivirus\lib\links.txt
%UserProfile%\Application Data\Ghost Antivirus\lib\properties
%UserProfile%\Application Data\Ghost Antivirus\lib\times.conf
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Ghost Antivirus.lnk
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
How to get rid of Ghost Antivirus automaticaly:
If you think about manual removal, please, take into consideration that manual removal of Ghost Antivirus needs to be completed with a great attention to an every single detail. It’s is a procedure of high responsibility and should be done very carefully. Needless to underline that only professional can complete such task without mistakes. So we highly recommend you in order to avoid further destroying of your computer system and to ensure problem-free removal, use the automatic Ghost Antivirus removal tool. You can try it following the link below:

