How to Remove Ghost Antivirus



Ghost Antivirus is a rogue antivirus application that is the successor to Antivirus Pro. This rogue is pushed through trojan horse activity and aggressive advertising tactics. It makes things very challenging to remove this rogue because it disables task manager, as well as any security programs that it detects. It also installs other malware on your system and terminates explorer.exe which makes the desktop unusable. It is possible to remove this rogue and you need to reboot into safe mode (with networking) in order to do so. Read on for how to remove ghost antivirus.


First you should boot up in safe mode with networking. In order to access the menu to choose how to boot you will need to press F8 when your computer boots up (yet just before the Windows splash screen.) After you have made it into safe mode then you should be able to download and install malwarebytes antimalware. (From the virus removal toolkit page.)

After it is installed, update and perform a full scan. Make sure to remove anything that it finds. For your reference the following files and folders are associated with Ghost antivirus and should be deleted for a manual removal of ghost antivirus. However, due to the nature of the rogue manual removal is not suggested.

If you do delete the following files to remove ghost antivirus then you should follow that up with a scan of your computer by malwarebytes antimalware or superantispyware and then follow that up with a scan with a trusted antivirus application. The files associated with this rogue are:

%docs%All UsersDesktopGhost Antivirus.lnk
%docs%All UsersStart MenuProgramsGhost Antivirus
%docs%All UsersStart MenuProgramsGhost AntivirusGhost Antivirus Home Page.lnk
%docs%sAll UsersStart MenuProgramsGhost AntivirusGhost Antivirus.lnk
%docs%All UsersStart MenuProgramsGhost AntivirusPurchase License.lnk
%user%Application DataGhost Antivirus
%user%Application DataGhost Antivirussettings.ini
%user%Application DataGhost Antivirusuill.ini
%usere%Application DataGhost Antivirusunins000.exe
%user%Application DataGhost AntivirusUninstall Ghost Antivirus.lnk
%user%Application DataGhost Antiviruslib
%user%Application DataGhost Antivirusliblinks.txt
%user%Application DataGhost Antiviruslibproperties
%user%Application DataGhost Antiviruslibtimes.conf
%user%Application DataMicrosoftInternet ExplorerQuick LaunchGhost Antivirus.lnk
%user%Local SettingsApplication DataMicrosoftInternet ExploreriGSh.png
%user%Local SettingsApplication DataMicrosoftInternet ExploreriMSh.png
%user%Local SettingsApplication DataMicrosoftInternet ExploreriPSh.png
%user%Local SettingsApplication DataMicrosoftWindowspguard.ini
%user%Local SettingsApplication DataMicrosoftWindowsservices.exe
RANDOMRANDOMonin.exe
%progfiles%Ghost Antivirus
%progfiles%Ghost AntivirusGhostAV.exe
%progfiles%Ghost Antivirusregister.ico
%progfiles%Ghost Antivirusunins000.dat
%progfiles%Ghost Antivirusuninst.ico
%progfiles%Ghost Antivirusweb.ico
%progfiles%Ghost Antivirusworking.log
%progfiles%Ghost AntivirusLanguages
%progfiles%Ghost Antiviruslib
%progfiles%Ghost Antiviruslibghost.sql
%progfiles%Ghost AntiviruslibInfected.wav
%progfiles%Ghost Antivirusliblisting.cfg
%progfiles%Ghost Antiviruslibversion.db
%progfiles%Ghost AntiviruslibWMILib.dll
%win%system32RANDOM.dll
%win%system32RANDOM.dll

Remember to keep scanning with your malware removal tools and antivirus until the system comes up clean!

Related Posts

Blog Traffic Exchange Related Posts
  • How to Remove Windows Enterprise Defender (Removal Guide) Windows Enterprise Defender is a rogue antivirus application that uses the name of Windows Defender and the similarities of their name to appear as an official product or add on to windows. Of course, the real Windows Defender is a legitimate application, but Windows Enterprise Defender is a rogue antivirus......
  • How to Remove Eco Antivirus 2010 | Eco Antivirus 2010 Removal Guide Eco Antivirus 2010 is a slight twist (renaming) of the recent Eco Antivirus rogue that has made the rounds. These rogues pretend to be antivirus, or antispyware software, but in reality are not much more than a scam trying to squeeze money out of unsuspecting computer users. These rogue applications......
  • How to Remove SecurityFighter | Security Fighter Removal SecurityFighter is making the rounds as yet another rogue security application. It installs itself via trojans and web popups and creates files that it then claims are viral and need to be cleaned out for your computer to be safe. Of course, they never can do that without you first......
Blog Traffic Exchange Related Websites
  • Using MySQL In A Hosting Environment MySQL is a heavy-duty database server. Used with various software languages, most notably PHP, and part of the LAMP family (which is comprised of Linux, Apache, MySQL, and PHP), Whether it's a customer relations management list or medical records, any data you have that needs storing, is stored on a......
  • World Wide Web Security Essentials Is Not A Real Spyware Remover. It Resembles The Functions And Looks World wide web Security Essentials is not a real spyware remover. It resembles the functions and looks of genuine spyware removal software but has no capacity to eliminate any virus, trojan or malware. Web Security Essentials is the newest addition to the growing list of rogue Antivirus programs. Internet Security......
  • 10 Free Online Budgeting Applications One of the great things about the Internet is that free stuff is everywhere. Sometimes you can even find good free stuff. It may surprise you that there are a lot of companies offering to help you budget your money for free. Before I go too much further with the......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site