What is the GHS file format?
.ghs files are continuation segments of a Norton Ghost disk or partition image. When Norton Ghost creates an image that exceeds its default split threshold (approximately 2 GB - chosen to fit FAT32 volumes and CD/DVD media), it automatically divides the image into a master file and one or more numbered continuation segments named name001.ghs, name002.ghs, and so on. The corresponding master file uses the .gho extension, though some Ghost versions name it name000.ghs.
.ghs files store raw continuation data in Norton Ghost’s proprietary binary format. The exact structure is undocumented; the segments use optional lossless compression and support password-based encryption. No public magic byte signature has been identified for .ghs continuation files. All segments must be present to restore the image successfully - Ghost verifies internal checksums across the complete set.
Norton Ghost was developed by Symantec (originally acquired from Binary Research) and was discontinued on April 30, 2013, with support ending June 30, 2014. Ghost 12 and later switched to the .v2i format, so .ghs files are associated with Ghost versions 6.5 through 11.x.
Restoring .ghs archives today typically requires an old Ghost installation. Third-party disk-imaging tools such as Acronis True Image and Macrium Reflect cannot directly restore Ghost .ghs/.gho sets, though specialist forensic utilities may partially convert them. Modern equivalents use .tib or .mrimg formats instead.
Security & safety
RISK: LOW.GHS files are backup image segments - passive data files that cannot execute. The main risks are data loss (missing segments make the set unrestorable) and bit rot over time on old storage media. Because Ghost is discontinued, restoring on modern hardware with UEFI/GPT disks is unreliable; consider migrating to a modern backup format.
Format details
in a nutshellPrograms that open GHS files
Windows3 apps
Norton Ghost (legacy)
Paid Requires Ghost 11.x or earlier. Boot from Ghost rescue media or run from Windows; select Restore Image and point to the .gho file - Ghost loads .ghs segments automatically.
Acronis True Image (now Acronis Cyber Protect Home Office)
Paid Acronis can read some Norton Ghost .gho/.ghs images; open via 'Disk Recovery' workflow. Check compatibility with your specific Ghost version.
R-Drive Image
Paid Supports Norton Ghost .gho format; open the master .gho file with .ghs segments in the same folder to restore or browse files. Technical details
deep spec| Encoding | Binary (proprietary Norton Ghost format; undocumented) |
| Byte order | Little-endian |
| Container | Proprietary continuation segment of a Norton Ghost disk/partition image set |
| Magic bytes | None publicly documented for .ghs continuation segments |
| Compression | Proprietary lossless Ghost compression; algorithm undocumented |
| Encryption | Optional password-based encryption (Ghost feature); algorithm undocumented |
| Default segment size | ~2 GB per segment (split threshold chosen to fit FAT32 volumes and optical media) |
| Segment naming | name001.ghs, name002.ghs, … ; master file is name.gho (or name000.ghs in some versions) |
| Integrity checking | Internal checksums verified by Ghost across the full image set; individual segments cannot be verified in isolation |
| Restoration requirement | All .ghs segments plus the master .gho file must be present and intact for a successful restore |
| Ghost version compatibility | .gho/.ghs format used in Ghost 6.5 through 11.x; Ghost 12+ switched to .v2i format |
| Software status | Norton Ghost discontinued April 30, 2013; support ended June 30, 2014 |
| Modern alternatives | Acronis True Image (.tib), Macrium Reflect (.mrimg); neither reads .ghs directly |
| Released | Ghost 6.5 (early 2000s) - segment naming convention introduced |
| Latest version | Norton Ghost 15.0 (2010, last consumer release) |
GHS conversions
Community Q&A
asked by usersNo questions yet - be the first to ask about GHS files.
