Emsisoft Malware-Info

Name: Adware.Win32.GhostAntivirus

Risklevel: Low Risk

Description:

Ghost Antivirus is a rogue security program. A rogue application tries to trick you by displaying false positive/misleading scan results report, which says that your computer is infected with viruses or trojan, but you will not be able to delete them before you purchase.

Removal instructions for Adware GhostAntivirus:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware GhostAntivirus.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Installation: Installed through EXE

Process: GhostAV.exe

Screenshots:

GhostAntivirusGhostAntivirusGhostAntivirusGhostAntivirusGhostAntivirusGhostAntivirusGhostAntivirusGhostAntivirus

Used folders:

  • C:\program files\Ghost Antivirus\
  • C:\program files\Ghost Antivirus\lib\
  • C:\WINDOWS\SYSTEM32\
  • C:\Documents and Settings\All Users\Desktop\
  • C:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\
  • C:\Documents and Settings\[USER]\Application Data\Ghost Antivirus\
  • C:\Documents and Settings\[USER]\Application Data\Ghost Antivirus\lib\
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\
  • C:\Documents and Settings\[USER]\Desktop\
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Windows\
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Windows Media\9.0\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\is-0QLRS.tmp\

Used files:

  • C:\program files\Ghost Antivirus\GhostAV.exe
    [1608192 Bytes] EXE File
  • C:\program files\Ghost Antivirus\register.ico
    [6830 Bytes] ICO File
  • C:\program files\Ghost Antivirus\unins000.dat
    [10948 Bytes] DAT File
  • C:\program files\Ghost Antivirus\uninst.ico
    [16486 Bytes] ICO File
  • C:\program files\Ghost Antivirus\web.ico
    [16486 Bytes] ICO File
  • C:\program files\Ghost Antivirus\working.log
    [31510 Bytes] LOG File
  • C:\program files\Ghost Antivirus\lib\ghost.sql
    [2037 Bytes] SQL File
  • C:\program files\Ghost Antivirus\lib\Infected.wav
    [9996 Bytes] WAV File
  • C:\program files\Ghost Antivirus\lib\listing.cfg
    [14251 Bytes] CFG File
  • C:\program files\Ghost Antivirus\lib\version.db
    [84 Bytes] DB File
  • C:\program files\Ghost Antivirus\lib\WMILib.dll
    [415232 Bytes] DLL File
  • C:\WINDOWS\SYSTEM32\COMMAND.COM
    [50620 Bytes] COM File
  • C:\WINDOWS\SYSTEM32\DOSX.EXE
    [53840 Bytes] EXE File
  • C:\WINDOWS\SYSTEM32\HIMEM.SYS
    [4768 Bytes] SYS File
  • C:\WINDOWS\SYSTEM32\MSCDEXNT.EXE
    [817 Bytes] EXE File
  • C:\WINDOWS\SYSTEM32\REDIR.EXE
    [3338 Bytes] EXE File
  • C:\Documents and Settings\All Users\Desktop\Ghost Antivirus.lnk
    [696 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus Home Page.lnk
    [1610 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus.lnk
    [708 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\Ghost Antivirus\Purchase License.lnk
    [1602 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Application Data\Ghost Antivirus\settings.ini
    [156 Bytes] INI File
  • C:\Documents and Settings\[USER]\Application Data\Ghost Antivirus\uill.ini
    [149 Bytes] INI File
  • C:\Documents and Settings\[USER]\Application Data\Ghost Antivirus\unins000.exe
    [758618 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Application Data\Ghost Antivirus\Uninstall Ghost Antivirus.lnk
    [1613 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Application Data\Ghost Antivirus\lib\links.txt
    [1119 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Application Data\Ghost Antivirus\lib\properties
    [1394 Bytes] File
  • C:\Documents and Settings\[USER]\Application Data\Ghost Antivirus\lib\times.conf
    [748 Bytes] CONF File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Ghost Antivirus.lnk
    [714 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Desktop\update__.exe
    [2490874 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
    [3508 Bytes] PNG File
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
    [7005 Bytes] PNG File
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
    [3501 Bytes] PNG File
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Windows\pguard.ini
    [88 Bytes] INI File
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Windows\services.exe
    [196096 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Windows Media\9.0\outat.exe
    [122880 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\is-0QLRS.tmp\update__.tmp
    [748032 Bytes] TMP File

Additional information might be found here:

Search at Google for Adware GhostAntivirus Search at Google for Adware GhostAntivirus
Search at Bing for Adware GhostAntivirus Search at Bing for Adware GhostAntivirus
Search at Yahoo for Adware GhostAntivirus Search at Yahoo for Adware GhostAntivirus

How can I protect myself from Adware GhostAntivirus?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software