Stand-alone malware removal tools

KB Solution ID: SOLN2372|Last Revised: May 23, 2013

ESET products automatically identify and clean the majority of infected files. Click the following ESET Knowledgebase article if you think your computer is infected with a virus or malware: I think my computer has a virus - what should I do?

If you still experience abnormal system behavior or believe you are infected with malware after following the instructions in the Knowledgebase article above, we recommend that you contact ESET Customer Care.
 
ESET provides tools to remove particularly resilient threats, including rogue antivirus programs, Antispyware programs and malware, which you can download below: 
 

Download Link

Related Knowledgebase Content Threat Description
(Virus Database)
ERA Remover
(ESET Rogue Applications Remover)


DOWNLOAD (32-bit)

DOWNLOAD (64-bit)

version: 1.0.4.1
Last Updated:
October 10, 2012


How do I use the ESET Rogue Application Remover (ERAR)?


Important! This tool must be run with  administrator rights.

 
 -----

 

You can download stand-alone removal tools from the alphabetical list below:

Threat Name (A – Z)

Threat Cleaner
Download Link

Related Knowledgebase Content Threat Description
(Virus Database)
ACAD/Medre.A

DOWNLOAD
version: 1.1.0.4
Last Updated:
April 10, 2013

---- ACAD/Medre.A
Bubnix

DOWNLOAD
version: 1.1.0.0
Last Updated:
April 10, 2013

---- Win32/Bubnix.AA
Codplat.AA

DOWNLOAD
version: 1.1.0.1
Last Updated:
April 10, 2013

--- ---
Conficker

DOWNLOAD
version: 1.1.5.1
Last Updated:
April 10, 2013

Conficker – How do I protect myself?  Win32/Conficker.AA
Daonol

DOWNLOAD
version: 1.2.0.0
Last Updated:
December 21, 2009

Fixing multiple problems caused by Win32/Daonol.C infiltration Win32/Daonol.C
Dorkbot.B

DOWNLOAD
version: 1.0.0.3
Last Updated:
November 9, 2012

--- Win32/Dorkbot.B
Filecoder.AA

DOWNLOAD
version: 1.0.0.1
Last Updated:
January 31, 2012

----

Win32/Filecoder.AA

Filecoder.AE

DOWNLOAD
version: 1.1
Last Updated:
April 20, 2012

----

Win32/Filecoder.AE

Filecoder.AR

DOWNLOAD
version: 1.0.0.1
Last Updated:
February 20, 2013

----

Win32/Filecoder.AR

Filecoder.NAC

DOWNLOAD
version: 1.0.0.1
Last Updated:
November 27, 2012

----

Win32/Filecoder.NAC

Filecoder.Q

DOWNLOAD
version: 3.1.1
Last Updated:
April 24, 2012

----

Win32/Filecoder.Q

Filecoder.R

DOWNLOAD
version: 1.0.0.0
Last Updated:
February 17, 2011

---

Win32/Filecoder.R

Goblin

DOWNLOAD
version: 1.0.0.5
Last Updated:
  February 6, 2013

How do I remove Win32/Goblin malware?

Win32/Goblin.C.Gen

IRCBot.ANR

*Requires manual command line parameter; see Related Knowledgebase Content
version: 1.1.0.0
Last Updated:
September 4, 2009

How to use the ESET Win32/IRCBot stand-alone cleaner from the Command Prompt window Win32/IRCBot.ANR
Mabezat

DOWNLOAD
version: 1.0.0.2
Last Updated:
November 9, 2012

How do I remove a Win32/Mabezat infection? Win32/Mabezat.A
Mebroot

DOWNLOAD
version: 2.0.0.2
Last Updated:
September 23, 2010

--- Win32/Mebroot
Merond.O

*Requires manual command line execution
see
version: 2.0.0.1 
Last Updated: 
November 12, 2010

How to use the ESET Merond.O stand-alone cleaner from the Command Prompt Win32/Merond.O
Necurs.A

DOWNLOAD
version: 2.0.0.0
Last Updated:
November 26, 2012

How do I run the Win32/Necurs cleaner? "Win32/Trojan
Downloader.
Necurs.A
"
Olmarik

DOWNLOAD
version: 1.5.0.3
Last Updated:
August 13, 2010

Win32/Olmarik removal video

 

Warning! Risk of data loss. Make sure to create a backup of your personal data before running this tool.

Important !After successful use of the cleaning tool restart your computer and run a full computer scan as described in the following instructions:

ESET products version 6.x
ESET products version 5.x

Win32/Olmarik.AGF

OlmarikTdl4

Olmasco

DOWNLOAD
version: 1.6.0.7
Last Updated:
May 8, 2013

Win32/Olmarik removal video

 

Warning! Risk of data loss. Make sure to create a backup of your personal data before running this tool.

Important! After successful use of the cleaning tool restart your computer and run a full computer scan as described in the following instructions:

ESET products version 6.x
ESET products version 5.x

Win32/Olmasco.R
Quervar.C

DOWNLOAD
version: 1.0.0.5
Last Updated: 
January 17, 2013

*Requires manual command line execution
see

How do I remove a Quervar infection? Win32/Quervar.C
Rovnix.A

DOWNLOAD
version: 1.0.0.0
Last Updated: 
December 15, 2011

--- Win32/Rovnix.A
Simda

DOWNLOAD (32-bit)
version: 1.0.0.2
Last Updated: 
May 13, 2013

--- Win32/Simda.B
Sirefef / Sirefef.EV / ZeroAccess

DOWNLOAD
version: 1.1.0.10
Last Updated: 
May 23, 2013

*See Related Knowledgebase content for illustrated instructions

How do I remove Sirefef (ZeroAccess) trojan? Win32/Sirefef
Spy.Zbot.ZR

DOWNLOAD
version: 1.0.0.1
Last Updated:
October 18, 2012  

How do I use the ESET ZbotZRcleaner tool to remove a Spy.zbot infection? ---
SpyEye

DOWNLOAD
version: 1.1.0.0
Last Updated:
April 10, 2013

--- Win32/Spy.SpyEye.B
Trustezeb.A

DOWNLOAD
version: 0.9.0.0
Last Updated:
May 10, 2012  

--- Win32/Trustezeb.A
VB.NAX

DOWNLOAD
version: 1.0.0.4
Last Updated:
November 27, 2012

 --- ---
VB.OGJ

DOWNLOAD
version: 1.1.0.0
Last Updated:
April 10, 2013

 --- ---
Zimuse

DOWNLOAD
version: 1.1.0.0
Last Updated:
April 10, 2013

--- Win32/Zimuse.A
Win32/Zimuse.B

 

Please use the following support tools if instructed to do so by ESET Customer Care:


Download Link

Related Knowledgebase Content Threat Description
(Virus Database)
ESET Hidden File System Reader

DOWNLOAD

version: 1.0.3.1
Last Updated:
April 30, 2013

 ----  ----

 

NOTE:

As new threats evolve, information and links will be added to this article.

Please click the image below for a quick video tutorial for the Win32/Olmarik removal tool:

VIDEO: How to use the ESET Olmarik removal tool

Back to top

 

---

Rate this article:
1 2 3 4 5
Please comment on your rating...
We cannot respond to feedback from this form. Requests for assistance should be submitted through your normal support channel.
5 - Definitely
4 - Mostly
3 - Somewhat
2 - Not Really
1 - Not At All