GHOST SPECTRE

jajk · Aug 13, 2026

@Marie SWE So are you going to try Ghost Spectre or just haunt this thread? :lmao:

Marie SWE · Aug 13, 2026

jajk said:
@Marie SWE So are you going to try Ghost Spectre or just haunt this thread?

I'm in the middle of packing for a temporary move while they total renovate my apartment... So sadly i dont have time for any project until after the move.. then i will have three months free time to test software while they do the renovation, as i wont have access to my hardware projects during that time.

But yes i can test it and do an evaluation on G-S then and do a deep dive in it and with a smaller pentest and network packet inspection.

Whackbag · Aug 14, 2026

I've run nothing but GHOSTSPECTRE Lot Ltsc since 2024

W11 LTSC 2024 / IoT / IoT Sub – 👻

ghostclouds.win

Superlite...no defender...no complaints.

CarlSD · Aug 14, 2026

Whackbag said:
I've run nothing but GHOSTSPECTRE Lot Ltsc since 2024

W11 LTSC 2024 / IoT / IoT Sub – 👻

ghostclouds.win

Superlite...no defender...no complaints.

I get this from Firefox when I click on that link.

So, this is not for me as well.

mecanicogolf · Aug 14, 2026

CarlSD said:
I get this from Firefox when I click on that link.

So, this is not for me as well.

Try here. THIS IS OFFICIAL!

https://www.youtube.com/results?search_query=ghost+spectre+windows+11

Download here.

jajk · Aug 14, 2026

Hit my 1st snag with G-S with AMD and Realtek audio drivers fighting each other for supremacy. The AMD drivers outcompete Realtek so exclude them even though they are the ones I need to work! Uninstalled all realtek drivers. reinstalled them and problem persists so I uninstalled a few AMD drivers as well and as if by magic, Windows Update sprung to life and installed a load of drivers that fixed the problem (even though they were the same drivers that I just uninstalled). So something a bit funny with the ISO me thinks.
Next issue was a strange one..... sfc /scannow found errors but could not fix them. DISM /ONLINE /CLEANUP-IMAGE /SCANHEALTH claimed all good but DISM /ONLINE /CLEANUP-IMAGE /RESTOREHEALTH found plenty to fix. Then sfc /scannow fixed what it couldn't fix before. Was the corruption caused by the latest update to 9168 or inherent in the ISO?
Next issue is/was that Smartscreen is disabled but it still intercepts non-MS store apps and tells me that they are evil and only apps from the store are pure of heart. I will have to do a deeper dive into why it is only pretending to be disabled.
Finally found the nasty setting that allows driver manufacturers to load unwanted software onto the laptop i.e. AMD and Asus rubbish that also magically appears after a day or 2. All I need is G-Helper to fiddle with all the AMD stuff but in a 5.7MB app instead of a 1GB AMD app with the bonus of being able to disable the surplus ASUS services.
Other than that, it is shaping up O.K but at this point I would give the X-Lite Optimum 25h2 v3 respect for doing a cleaner job of it.

mecanicogolf · Aug 14, 2026

jajk said:
Hit my 1st snag with G-S with AMD and Realtek audio drivers fighting each other for supremacy. The AMD drivers outcompete Realtek so exclude them even though they are the ones I need to work! Uninstalled all realtek drivers. reinstalled them and problem persists so I uninstalled a few AMD drivers as well and as if by magic, Windows Update sprung to life and installed a load of drivers that fixed the problem (even though they were the same drivers that I just uninstalled). So something a bit funny with the ISO me thinks.
Next issue was a strange one..... sfc /scannow found errors but could not fix them. DISM /ONLINE /CLEANUP-IMAGE /SCANHEALTH claimed all good but DISM /ONLINE /CLEANUP-IMAGE /RESTOREHEALTH found plenty to fix. Then sfc /scannow fixed what it couldn't fix before. Was the corruption caused by the latest update to 9168 or inherent in the ISO?
Next issue is/was that Smartscreen is disabled but it still intercepts non-MS store apps and tells me that they are evil and only apps from the store are pure of heart. I will have to do a deeper dive into why it is only pretending to be disabled.
Finally found the nasty setting that allows driver manufacturers to load unwanted software onto the laptop i.e. AMD and Asus rubbish that also magically appears after a day or 2. All I need is G-Helper to fiddle with all the AMD stuff but in a 5.7MB app instead of a 1GB AMD app with the bonus of being able to disable the surplus ASUS services.
Other than that, it is shaping up O.K but at this point I would give the X-Lite Optimum 25h2 v3 respect for doing a cleaner job of it.

It's helpful to hear your input for myself and others to chew on. Thanks. Gives us ideas too.

EchoJPR · Aug 14, 2026

Didn't take long for someone to immediately start whining about using a custom WIndows.

EchoJPR · Aug 14, 2026

OldNavy said:
What a carry on trying to get to the download link.
Not for me I'm afraid.

G-W11-25H2-PRO-U9

WPE+ Bootable —————————With Update (26200.8894) - U9(Based on the official ISO version 25H2 with updates.)Datavaults:DownloadSwift:DownloadDLsurf (3 Part): 001 / 002 / 003 Download all Part, then extract .001 with 7-Zip to get the ISO file.File Size : 5.21GB Format : 7Zip / ISO MD5...

docs.google.com

OAT · Aug 14, 2026

EchoJPR said:
G-W11-25H2-PRO-U9

WPE+ Bootable —————————With Update (26200.8894) - U9(Based on the official ISO version 25H2 with updates.)Datavaults:DownloadSwift:DownloadDLsurf (3 Part): 001 / 002 / 003 Download all Part, then extract .001 with 7-Zip to get the ISO file.File Size : 5.21GB Format : 7Zip / ISO MD5...

docs.google.com

To those not familiar with Google docs, do not click on the download word as it is not a link.
Instead, hover over download and highlight it as you would to copy the word, then the link will appear for you to copy to the clipboard.
Finally, paste it in your browser's address bar.

Whackbag · Aug 15, 2026

CarlSD said:
I get this from Firefox when I click on that link.

So, this is not for me as well.

Then you've done something to your FF install so it only queries http instead of https, mine is fine and secure.

starchase · Aug 15, 2026

Whackbag said:
Then you've done something to your FF install so it only queries http instead of https, mine is fine and secure.

Yep, works for me as well using FF.
See instruction above concerning the link:
"To those not familiar with Google docs, do not click on the download word as it is not a link.
Instead, hover over download and highlight it as you would to copy the word, then the link will appear for you to copy to the clipboard."

jajk · Aug 15, 2026

Anyone else seeing this in autoruns? \infatica (Verified) Infatica Pte. Ltd. C:\Program Files (x86)\Infatica\infatica_agent.exe
It is an AI internet scraping agent (google it for a better description).
I found this on IoT version of Ghost Spectre but can't work out if it is from Microsoft or whoever else would put such a diabolical thing on my laptop. Maybe it could be from Firefox installation - it is the first time in many years that I am trying out Firefox now that Vivaldi has gone over to the dark side (stopped allowing UBlock Origin to run).

Ghot · Aug 15, 2026

It's not from Firefox or Microsoft.

infatica-service-app.exe is a proxyware executable file linked to the Infatica Peer-to-Business (P2B) Software Development Kit (SDK), which turns your computer into a residential proxy node to route external internet traffic. [1, 2]

What It Does

Resource Sharing: It uses your system's RAM and internet bandwidth for corporate tasks like market research and web scraping. [1, 2]

Silent Bundling: Users on platforms like the Windows 11 Forum report that it often installs without explicit notice, frequently piggybacking on third-party software installations such as the K-Lite Codec Pack. [1]

Security Concerns: Security tools frequently flag it as a Potentially Unwanted Program (PUP) because it consumes background resources and routes external data through your private IP address. [1, 2]

How to Remove It

End the Process: Open Task Manager, locate infatica-service-app.exe, and select End Task.

Uninstall the App: Go to Settings > Apps > Installed apps, look for Infatica or related entries, and click Uninstall.

Delete Residual Files: Navigate to C:\Program Files (x86) or C:\Program Files, find the Infatica folder, and delete it manually.

Run a Security Scan: Use a trusted tool like Malwarebytes to run a threat scan and clear out remaining PUP files or registry entries. [1, 2, 3]

Marie SWE · Aug 15, 2026

jajk said:
Anyone else seeing this in autoruns? \infatica (Verified) Infatica Pte. Ltd. C:\Program Files (x86)\Infatica\infatica_agent.exe
It is an AI internet scraping agent (google it for a better description).
I found this on IoT version of Ghost Spectre but can't work out if it is from Microsoft or whoever else would put such a diabolical thing on my laptop. Maybe it could be from Firefox installation - it is the first time in many years that I am trying out Firefox now that Vivaldi has gone over to the dark side (stopped allowing UBlock Origin to run).

as @Ghot said..... infatica_agent.exe is a Windows agent for Infatica P2B Network, proxy/residential bandwidth-sharing service and may send/receive network traffic... bla-bla-bla that is already said by Ghot

What is interesting is.. Did you installed any kind of software and this one got installed at the same time?
What time/date stamp do the file have.. so you can try to pinpoint when it got in.

Edit:
If you only installed Firefox from Mozilla's website and no other software.
If so, then I'm kind of interested in the specific ISO you have downloaded.. (just in case they replaced the ISO on that site you downloaded from)

jajk · Aug 15, 2026

I know what it is but I do not know what it piggybacked on to get installed. Maybe it was already there in the ISO? Which is why I am having a good poke around to find such things in Ghost Spectre. There are strange things in both IoT and Home versions so far - had a mystery Synaptics driver loaded in home version that I couldn't get rid of (I don't have any Synaptics pointing devices). Malwarebytes found 8 infected files - looks like the Ghost Spectre IoT V9 ISO has got a sting in its tail.

Marie SWE · Aug 15, 2026

jajk said:
I know what it is but I do not know what it piggybacked on to get installed. Maybe it was already there in the ISO? Which is why I am having a good poke around to find such things in Ghost Spectre. There are strange things in both IoT and Home versions so far - had a mystery Synaptics driver loaded in home version that I couldn't get rid of (I don't have any Synaptics pointing devices). Malwarebytes found 8 infected files - looks like the Ghost Spectre IoT V9 ISO has got a sting in its tail.

if you have the time.... and if you feel for it.

reinstall it again, but this time without internet connection and see if it's there in the out of the box install.

Edit:
sad to hear if it seems as it has "a sting in its tail"

jajk · Aug 15, 2026

I expect the ISO does not have infected files but instead has a scheduled task queued up to infect the P.C later as was the standard way of propagating this in the past. Interesting to me is that all the latest MS "security" add-ins never picked up on anything dodgy but they did have a bitch at me loading non-MS Store apps that weren't a threat in any way except to MS profit. Going back to X-Lite 25H2 now - seen enough of G-S.

Marie SWE · Aug 15, 2026

jajk said:
I expect the ISO does not have infected files but instead has a scheduled task queued up to infect the P.C later as was the standard way of propagating this in the past. Interesting to me is that all the latest MS "security" add-ins never picked up on anything dodgy but they did have a bitch at me loading non-MS Store apps that weren't a threat in any way except to MS profit. Going back to X-Lite 25H2 now - seen enough of G-S.

I'm getting more and more interesting in digging into that G-S ISO from your posts.

If you curious.. test Chris Titus tool to create your own mini-windows iso version

Chris Titus Tech's Windows Utility (WinUtil) Releases

Chris Titus Tech's Windows Utility (WinUtil) 26.06.23 Pre-Release / 26.05.12 A curated compilation of Windows system tasks streamline installs, debloat with tweaks, troubleshoot with config, and configure Windows updates. Run it fresh on every new Windows install...

www.elevenforum.com

Edit:
5am... time to shut down my power-plants for tonight and save the world a few kWh of electricity.

Good night folks.

jajk · Aug 15, 2026

Before I leave the G-S community, here is what Malware bytes picked up:

The MyASUS Installer.exe is self-explanatory what it is (if you have an ASUS Laptop). It is one of those unsolicited self installing useless Apps that MS is complicit in pushing.
The NavigationUpdateInstaller.exe is an app for updating the nav maps in my Hyundai vehicle.
The windowsdesktop-runtime file is directly downloaded from MS (.NET ver 10 install)
The other 3 reg values are straight from the install of Ghost Spectre IoT ver 9 iso.
I will leave it up to others to decide if these are real threats or just overselling the virus scanner's prowess.

I said 8 detentions but 2 of these are known to me and in legacy files unused in this situation. I plead the 5th on those 2

GHOST SPECTRE

Well-known member

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Active member

Attachments

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Venomous Member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Similar threads

My Computers

My Computers

My Computer

My Computer

My Computer

My Computers

My Computer

My Computer

My Computer

My Computers

My Computer

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers