Ghost Antivirus

Ghost Antivirus Description

ScreenshotGhost Antivirus is a fake anti-virus application. The rogue Ghost Antivirus is in no way related to the legitimate Ghost Antivirus of Norton or Symantec. Once the rogue Ghost Antivirus has entered a computer system it will use deceptive tactics such as displaying bogus system alerts and pop-up windows, to scare victims into purchasing the "full version" of the software. Ghost Antivirus will also conduct a system scan that will produce a fabricated report of numerous malware infections found on the system. Users are advised to ignore all scan reports and alerts displayed by Ghost Antivirus; it is a useless application used to con users out of their money.

Ghost Antivirus comes from the FakeXPA family, an enormous family of rogue security programs. Some of the countless rogue security programs that are part of Ghost Antivirus family include Antivirus 2010, Antivirus 360, AntivirusBEST, Nortel Antivirus, Alpha Antivirus, Anti-virus Professional, Cyber Security, MaCatte Antivirus 2009, Eco Antivirus, Antivir, Personal Security, Antivirus 7, Antivirus GT, Earth Antivirus, Antivirus 8, AVG Antivirus 2011, E-Set Antivirus 2011, XP Antivirus 2013.

Aliases: Downloader.MisleadApp [Symantec], GhostAntivirus [Sunbelt], Mal/FakeAV-BI [Sophos], Medium Risk Malware, RogueAntiSpyware.Generic, Trj/CI.A [Panda], W32/FakeAV.Q!genr, Win32/Adware.Antivirus2008 [NOD32], Trojan.Agent.578560 [McAfee-GW-Edition], Generic FakeAlert!du [McAfee], Trojan-Downloader.Win32.FraudLoad.gjv [Kaspersky], W32/FakeAV.BI [Fortinet], Win32.Downloader.Mis [eSafe], TrojWare.Win32.FraudLoad.~E [Comodo] and Trojan.Agent.ATV [CAT-QuickHeal].

Technical Information

Screenshots & Other Imagery

Ghost Antivirus Image 1 Ghost Antivirus Image 2 Ghost Antivirus Image 3 Ghost Antivirus Image 4 Ghost Antivirus Image 5 Ghost Antivirus Image 6

File System Details

Ghost Antivirus creates the following file(s):
# File Name Size MD5 Detection Count
1 GhostAV.exe 1,608,192 4a39c5f2f68f7687e2ea09a22fa7c171 3
2 GhostAntivirusInstall_33_0_deleted[1].exe 578,560 9eb0c33803a78d4f429db494c254208d 0

Registry Details

Ghost Antivirus creates the following registry entry or registry entries:
Directory
%AppData%\Ghost Antivirus
%ProgramFiles%\Ghost Antivirus

More Details on Ghost Antivirus

The following URL's were found:
Tip: We recommend blocking the domain names as well as the IP addresses associated with them.
  • Ghost-pay.com
  • Ghostantivirus.com
  • Ghostpays.com
  • Softwareanti.com
  • Softwarejar.com
  • Softwarerising.com
  • Softwaresecure.net
  • Softwarespam.net
  • Softwarespyware.net
  • Softwarethe.net
  • Softwarethreats.com
  • Softwarethreats.net
  • Softwarexp.net

Related Posts

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.