Solution
ESET products automatically identify and clean the majority of infected files.
I think my computer is infected with a virus or malware—what should I do?
ESET provides standalone tools to remove particularly resilient threats, including rogue antivirus programs, antispyware programs, and malware.
You can download standalone removal tools from the alphabetical list below:
| Threat Name (A – Z) & Virus Database entry |
Threat Cleaner Download Link |
Related Knowledgebase Content |
|---|---|---|
|
ACAD/Medre |
DOWNLOAD |
--- |
|
Adware.SuperFish |
DOWNLOAD |
--- |
|
AES-NI |
DOWNLOAD Version: 1.0.1.0 Last updated: 2017-06-14 |
Clean an AES-NI or XData infection using the ESET AES-NI decryptor |
|
MEL/Vacphage.A |
DOWNLOAD Version: 1.0.0 Last updated: 2021-04-06 |
|
|
Bedep |
DOWNLOAD Version: 1.0.0.2 Last updated: 2016-05-26 |
How do I remove a Bedep infection? |
|
BlueKeep |
DOWNLOAD Version: 1.0.0 Last updated: 2019-12-03 |
It’s time to disconnect RDP from the internet |
|
Bubnix |
DOWNLOAD |
--- |
|
Codplat.AA |
DOWNLOAD |
--- |
|
Conficker |
DOWNLOAD |
Conficker – How do I protect myself? |
|
Crypt888 |
DOWNLOAD Version: 1.0.0.0 Last updated: 2018-01-08 |
How do I clean a Crypt888 infection using the ESET Crypt888 decrypter? |
|
Crysis |
DOWNLOAD Version: 2.0.4.0 Last updated: 2017-05-19 |
How do I clean a Crysis infection using the ESET Crysis decryptor? |
|
Daonol |
DOWNLOAD |
Fixing multiple problems caused by Win32/Daonol.C infiltration |
|
Dorkbot |
DOWNLOAD |
[KB6304] Remove a Dorkbot infection using the ESET Dorkbot cleaner |
|
ELEX Win32/ELEX |
DOWNLOAD |
How do I remove a Win32/ELEX infection? |
|
Eternal Blue Checker |
Use our Eternal Blue Checker to patch Windows vulnerabilities | |
|
Filecoder.AA |
DOWNLOAD |
Does ESET protect me from Filecoder malware? |
|
Filecoder.AE |
DOWNLOAD Version: 1.1.0.0 Last updated: 2012-04-23 |
Clean a Filecoder.AE infection using the ESET Filecoder.AE cleaner |
|
Filecoder.AR |
DOWNLOAD Version: 1.0.0.1 Last updated: 2013-02-21 |
Clean a Filecoder.AR infection using the Filecoder.AR cleaner |
|
Filecoder.NAC |
DOWNLOAD Version: 1.0.0.1 Last updated: 2012-04-23 |
--- |
|
Filecoder.R |
DOWNLOAD |
Does ESET protect me from Filecoder malware? |
|
GandCrab |
DOWNLOAD Version: 1.0.0.0 Last updated: 2018-10-26 |
Clean a GandCrab infection using the ESET GandCrab decryptor |
|
Goblin |
DOWNLOAD |
How do I remove Win32/Goblin malware? |
|
IRCBot.ANR |
DOWNLOAD Requires manual command line parameter; see related ESET Knowledgebase content → |
How to use the ESET Win32/IRCBot stand-alone cleaner from the Command Prompt window |
|
JS/Bondat |
DOWNLOAD Version: 1.0.0.0 Last updated: 2015-04-30 |
--- |
|
Mabezat |
DOWNLOAD |
How do I remove a Win32/Mabezat infection? |
|
Mebroot |
DOWNLOAD |
--- |
|
Merond.O |
DOWNLOAD Requires manual command line execution |
How to use the ESET Merond.O stand-alone cleaner from the Command Prompt |
|
Necurs.A |
DOWNLOAD |
How do I run the Win32/Necurs cleaner? |
|
Olmarik OlmarikTdl4 Olmasco |
DOWNLOAD |
How do I remove an Olmarik infection? Warning! Risk of data loss. Make sure to create a backup of your personal data before running this tool. Important! After successful use of the cleaning tool restart your computer and run a full computer scan as described in the following instructions: [KB6529] Scan your computer and export scan logs in ESET Endpoint Security or ESET Endpoint Antivirus |
|
Poweliks |
DOWNLOAD |
How do I remove a Poweliks infection? |
|
Quervar.C |
DOWNLOAD |
How do I remove a Quervar infection? |
|
Retefe Win32/Retefe |
DOWNLOAD Version: 1.0.0.0 Last updated: 2016-11-11 |
Tesco Bank not alone in being targeted by Retefe malware |
|
Rovnix.A |
DOWNLOAD |
How do I remove Rovnix (Rovnix.A) trojan? |
|
Retacino |
DOWNLOAD |
How do I clean a Retacino infection using the ESET Retacino decrypter? |
|
Simda |
DOWNLOAD (32-bit) |
--- |
|
Simplocker |
DOWNLOAD Version: 1.3.0.0 Last updated: 2014-07-22 |
What is Android Simplocker and does ESET protect me from it? |
|
Sirefef / ZeroAccess |
DOWNLOAD See Related Knowledgebase content for illustrated instructions → |
How do I remove Sirefef (ZeroAccess) trojan? |
|
Spy.Tuscas |
DOWNLOAD |
|
|
Spy.Zbot.ZR |
DOWNLOAD |
How do I use the ESET ZbotZRcleaner tool to remove a Spy.zbot infection? |
|
SpyEye |
DOWNLOAD |
--- |
|
TeslaCrypt |
DOWNLOAD |
How do I clean a TeslaCrypt infection using the ESET TeslaCrypt decrypter? |
|
Trustezeb.A |
DOWNLOAD Version: 0.9.0.0 Last updated: 2012-05-11 |
Clean a Trustezeb.A or Matsnu infection using the Trustezeb.A cleaner |
| VB.NAX |
DOWNLOAD |
--- |
| VB.OGJ |
DOWNLOAD |
--- |
|
Virlock |
DOWNLOAD |
Win32/Virlock: First Self-Reproducing Ransomware is also a Shape Shifter The Cleaner must be run in the Safe Mode. Variants A, B, D and G are currently supported. |
|
Zimuse |
DOWNLOAD |
--- |
If you still experience abnormal system behavior or believe you are infected with malware after following the instructions above, we recommend that you contact ESET technical support.
Please use the following support tools if instructed to do so by ESET technical support:
| ESET tool | Download Link | Related Knowledgebase Content |
|---|---|---|
| ESET Hidden File System Reader | DOWNLOAD Version: 1.0.3.3 Last updated: 2013-11-13 |
--- |
| ESET Rogue Applications Remover | DOWNLOAD (32-bit) DOWNLOAD (64-bit) Version: 1.0.4.1 |
How do I use the ESET Rogue Application Remover (ERAR)? Important! This tool must be run with administrator rights. |
