Home article search

How do I remove Win32/Goblin malware?



  1. Click the link below to download the ESETGoblinCleaner tool. Save the file to your Desktop:
  2. Click Start All ProgramsAccessoriesCommand Prompt.
    • Windows 8 users: Press Windows key + F to search, click Apps, enter Command Prompt into the search bar and then click Command Prompt.
  3. Enter the command below, where  C:\Users\username\desktop is the directory where your desktop is located (for example C:\users\joesmith\desktop). If you entered the command correctly, the command prompt will change to display the directory you entered.
    • CD C:\Users\username\desktop
  4. Enter the command: ESETGoblinCleaner.exe followed by the path or file you want to scan. For example, the following will scan the entire C drive: ESETGoblinCleaner.exe C:\.
    • You can add the string >username\Desktop\GoblinLog.txt after the path or file you want to scan to have the ESETGoblinCleaner tool record a log file of the scan and save it to your desktop. For example: ESETGoblinCleaner.exe C:\ > %username%\Desktop\GoblinLog.txt
  5. Once the cleaner is done scanning all specified files/folders, it will display scan results in the command prompt (see Figure 1-1).

Figure 1-1

  1. Open the main program window by double-clicking the ESET icon  in your Windows notification area or by clicking Start → All Programs → ESET → ESET Smart Security or ESET NOD32 Antivirus.
  2. Click Computer Scan → Custom scan and select In-depth scan from the Scan profile drop-down menu.

Figure 1-2

  1. Select the check box next to Computer and click Scan. The scan will remove any remnants of the malware still left on your system.

    Windows XP users: Select the check box next to My Computer and then click Scan.

Figure 1-3

If you are still unable to resolve your issue, please email ESET Technical Support.

Need Personalized Assistance in North America?

If you're not already an ESET customer, ESET Support Services are available to clean, optimize and secure your system. Call 866-944-3738 or click to schedule an appointment with ESET Support Services today!

Was this information helpful?