Gh0st.exe

Viruses and worms
1

Dear everyone,

Yesterday I got infected by a virus from my friend’s external harddisk… the process name is “suchost.exe” and it places files named “gh0st.exe” in all my drives (C,D,E,F). Avast (the latest VPS and prog version) did not detect anything, so I removed them manually by finding & killing the process using Process Explorer and deleted them using search function, then reboot. After that the virus did not appear again, but everytime I want to open all my drives, I must use right click - explore (please see the screenshot attached for more detailed information). Could anyone help me with how to restore my PC back to normal?

And I also attached my hijackthis log, please help me to check whether it’s clean or not.

Thanks a lot,

William.

2

Can you use Windows System Restore feature to restore your computer to a situation before the infection?
It would be good if you have sent the files (infected) for analysis and help avast improving detection.

3

Unfortunately, I turned the System Restore function off.
But I am able to retrieve the file (gh0st.exe), my friend still has the file in his external harddisk.

4

Take care on handling it…