Files

%CommonDesktop%\Ghost Antivirus.lnk

%ProgramFiles%\Ghost Antivirus\GhostAV.exe

Folders

%CommonPrograms%\Ghost Antivirus
%ProgramFiles%\Ghost Antivirus
%ApplicationData%\Ghost Antivirus

RegistryEntries

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ghost Antivirus_is1
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
Value: 3P_UDEC