How to Remove Gozi
The Gozi trojan virus installs from infected PDF files and steals passwords from your computer. The virus uses one DLL file to infect the computer, but you need the Microsoft "PendMoves and MoveFile" utility to delete the DLL while the computer runs. The utility deletes the file even though it's used as a Windows service. Microsoft distributes the utility for free to delete services.
Other People Are Reading
Instructions
-
-
1
Open a Web browser tab and download the "PendMoves and MoveFile" utility. The software doesn't have an installation program. Extract the content of the zip file to a directory on your computer.
-
2
Click the Windows "Start" button and type "cmd" in the search text box. Press "Enter" to open the command prompt.
-
-
3
Type "cd path" where "path" is the folder in which you extracted the zip file in step one. Press "Enter" to execute the statement.
-
4
Type the following statement in the command prompt:
movefile lnksinfo.dll ""
The "lnksinfo.dll" file is the DLL used by the trojan. The "movefile" command tells the prompt to remove the file, which is indicated by the blank string in the second parameter.
-
1
