Ghost Antivirus

Ghost Antivirus Description

ScreenshotGhost Antivirus is a fake anti-virus application. The rogue Ghost Antivirus is in no way related to the legitimate Ghost Antivirus of Norton or Symantec. Once the rogue Ghost Antivirus has entered a computer system it will use deceptive tactics such as displaying bogus system alerts and pop-up windows, to scare victims into purchasing the "full version" of the software. Ghost Antivirus will also conduct a system scan that will produce a fabricated report of numerous malware infections found on the system. Users are advised to ignore all scan reports and alerts displayed by Ghost Antivirus; it is a useless application used to con users out of their money.

Ghost Antivirus comes from the FakeXPA family, an enormous family of rogue security programs. Some of the countless rogue security programs that are part of Ghost Antivirus family include Personal Security, Antivirus 2010, Earth Antivirus, Antivir, E-Set Antivirus 2011, XP Antivirus 2013, Antivirus 8, Antivirus 360, Antivirus 2009, AntivirusBEST, Alpha Antivirus, MaCatte Antivirus 2009, Cyber Security, AVG Antivirus 2011, Personal Security Pro, Eco Antivirus, XP Antivirus 2012, Antivirus GT, Antivirus 7, Nortel Antivirus, Anti-Virus Professional.

Aliases: Downloader.MisleadApp [Symantec], Win32.Downloader.Mis [eSafe], TrojWare.Win32.FraudLoad.~E [Comodo], Trojan.Agent.ATV [CAT-QuickHeal], Downloader.Zlob.AQQB [AVG], TR/Agent.578560 [AntiVir], Adware.Win32.GhostAntivirus!A2 [a-squared], Trojan.Vundo.Gen!Pac.44 [VirusBuster], Trojan-Downloader.Win32.FraudLoad.gin [VBA32], W32/FakeAV.BI [Fortinet], Trojan-Downloader.Win32.FraudLoad.gjv [Kaspersky], Generic FakeAlert!du [McAfee], GhostAntivirus [Sunbelt], Mal/FakeAV-BI [Sophos] and Medium Risk Malware [Prevx].

Infected with Ghost Antivirus? Scan Your PC for Free

Download SpyHunter's Spyware Scanner
to Detect Ghost Antivirus
* SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats. Read more on SpyHunter. If you no longer wish to have SpyHunter installed on your computer, follow these steps to uninstall SpyHunter.

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in "Safe Mode with Networking" and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Screenshots & Other Imagery

Ghost Antivirus Image 1 Ghost Antivirus Image 2 Ghost Antivirus Image 3 Ghost Antivirus Image 4 Ghost Antivirus Image 5 Ghost Antivirus Image 6

File System Details

Ghost Antivirus creates the following file(s):
# File Name Size MD5 Detection Count
1 %ProgramFiles%\Ghost Antivirus 91
2 %AllUsersProfile%\Start Menu\Programs\Ghost Antivirus 90
3 GhostAV.exe 1,608,192 50
4 Uninstall Ghost Antivirus.lnk 35
5 Ghost Antivirus Home Page.lnk 34
6 Ghost Antivirus.lnk 33
7 GhostAntivirusInstall_33_0_deleted[1].exe 578,560 9eb0c33803a78d4f429db494c254208d 3
8 GhostAV.exe 1,608,192 4a39c5f2f68f7687e2ea09a22fa7c171 2

Registry Details

Ghost Antivirus creates the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}
Ghost Antivirus
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
Ghost Antivirus_is1

More Details on Ghost Antivirus

The following URL's were found:
Tip: We recommend blocking the domain names as well as the IP addresses associated with them.
  • Ghost-pay.com
  • Ghostantivirus.com
  • Ghostpays.com
  • Softwareanti.com
  • Softwarejar.com
  • Softwarerising.com
  • Softwaresecure.net
  • Softwarespam.net
  • Softwarespyware.net
  • Softwarethe.net
  • Softwarethreats.com
  • Softwarethreats.net
  • Softwarexp.net

Site Disclaimer

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as is:
What is 5 + 5 ?