How to Remove “Ghostexp.exe”

What is ghostexp.exe?

ghostexp.exe is a legitimate file process developed by Symantec.  It is associated with Windows process part of Norton Ghost. You can locate the file in C:\Program files. The virus is created by malware authors and are named them after ghostexp.exe file.

Affected Platform: Windows OS

How to check if your computer is infected with ghostexp.exe malware?

Keep an eye for the following symptoms to check if your PC is infected with ghostexp.exe malware:

  • Unstable internet connection
  • Browser redirects to unwanted websites
  • PC performance slows down
  • Browser is bombarded with hordes of popup ads
  • System screen freezes repeatedly

If you find any of  the above mentioned symptoms, take the following steps to be sure about the malware infection:

1) Press CTRL+ALT+DEL keys to open Task Manager.

2) Go to the process tab and right-click on the ghostexp.exe file and open its location.

If the file is located outside C:\Program files, then you should take measures to get rid of the malware.

How to remove ghostexp.exe  malware from system with Comodo Cleaning Essentials?

Comodo Cleaning Essentials (CCE) incoporates antivirus software with unique features like auto-sandboxing to identify and obstruct every suspicious process running on an endpoint with a single click. To remove malwares using ghostexp.exe, follow the steps mentioned below:

Step 1: Download the CCE suite.

Step 2: To start the application, double-click on the CCE.exe file.

Step 3: It then probes the antivirus to initiate a full system scan to identify and remove any existing malicious files.

Step 4: If threats are found during the scanning, you will be prompted with an alert screen.

Step 5: Comodo Cleaning Essentials will remove ghostexp.exe  malware from your computer including all other malwares!
 

3

Malware Entries

First Seen: 21 July 2008 at 2:56 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Symantec Corporation Executable 1a6baacf126b93e0
70a3efb22030a9e5
95b1f307
29eca4b5ad29ac76
200053635799f783
Win32.Packer
.B
No 11.0.2.157
3
11.0.2.157
3
Internal Submission N/A
2 Symantec Corporation Executable 9dd1649faacf36c3
0ee1cb1f5cdfd5b0
b88de79e
abdb41e134fa4062
fa60a20013fa4281
Virus.Win32.
Alman.A
No 2003.789 2003.789 Vietnam N/A
3 Symantec Corporation Executable bfb63e8caaebc28f
b4684a3908c08618
e23640e7
563f3798abc92ba5
a8d8171dff629bdb
TrojWare.Win
32.Boaxxe.DQ
No 11.0.2.157
3
11.0.2.157
3
Internal Submission N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
44

Safe Entries

First Seen: 18 June 2008 at 10:02 am
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Symantec Corporation Executable 6e5a53bf6e4268ff
eff46066e48f355b
e54d53b0
03a735fd23446e4f
8605f9d601541ee1
Yes 11.5.0.216
5
11.5.0.216
5
United States
2 Symantec Corporation Executable 1be536b8f36f0611
7964a2c1b0c425e7
bb23c85e
4d6cb69cfb849062
aa05c0570ed19a01
Yes 11.0.2.157
3
11.0.2.157
3
United States
3 Symantec Corporation Executable 03c304b4596071ac
e1ba612394d6ee32
f171d773
f3b71c000240fe7a
001803fd75752e93
Yes 11.5.1.226
6
11.5.1.226
6
United States
4 Symantec Corporation Executable 95bab3306883c954
fccc627ab1fec1be
9780a850
e01ae1981221a19c
ee19e1939dd007ba
Yes 11.0.0.150
2
11.0.0.150
2
United States
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Free Antivirus protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security