Issue You suspect that your computer is infected (slow or abnormal behavior) ESET technical support has requested a Computer scan log Solution I. Scan your computer in ESET Endpoint Security or ESET Endpoint Antivirus II. Save the log and send it to Technical Support I. Scan your computer in ESET Endpoint Security or ESET Endpoint […]
Articles Tagged: ESET
[KB3339] How do I remove an Olmarik infection? (ESET)
Issue ESET detects the threat Win32/Olmarik or one of its variants (Olmarik.TDL4, Olmasco, etc.) Details There are several variants of Olmarik malware. ESET has developed a stand-alone removal tool that can be run on any infected system to ensure that Olmarik is removed completely. Solution Download the ESET Olmarik removal tool and save it to your Desktop. […]
[KB3137] How do I run the Win32/Necurs cleaner? (ESET)
Issue Unable to install ESET products ESET is not functioning or is giving error messages Error communicating with EKRN Analysis of application protocols (POP3, HTTP) will not function Your ESET product detects the threat Win32/TrojanDownloader.Necurs.A Details The Win32/Necurs infection is designed to deny read access to malicious files and is able to run at the kernel […]
[KB2613] How to use the ESET Merond.O stand-alone cleaner from the Command Prompt window
Issue Your ESET product has detected the threat Win32/Merond.O Solution ESET has provided this Merond.O stand-alone tool to remove this particularly resilient threat. The Merond.O malware infects files and to clean these files, you must run the removal tool on the infected computer. NOTE: This tool must be run from the command line and if you […]
[KB3165] How do I remove a Win32/Mabezat infection? (ESET)
Issue Your ESET product has detected the threat Win32/Mabezat.A Solution Click the link below to download the ESETMabezatAdecrypter tool. Save the file to your desktop. Download ESETMabezatADecrypter.exe Click Start → All Programs → Accessories. Right-click Command Prompt and choose Run as administrator from the context menu. Windows 8 users: Press the Windows key + Q to open an app search and type cmd into the Search field. Right-click the cmd application when […]
[KB2903] How to use the ESET Win32/IRCBot stand-alone cleaner from the Command Prompt window
Solution ESET has provided this Win32/IRCBot stand-alone tool to remove this particularly resilient threat. NOTE: This tool must be run from the command line and if you are running Windows Vista / 7 / 10 or Windows Server 2008, you will need to run the command prompt with elevated permissions. Right-click the following link and then click Save Target […]
[KB3157] How do I remove Win32/Goblin malware? (ESET)
Issue Your ESET product detects the threat Win32/Goblin, Win32/Goblin.C.Gen or Win32/Goblin.e.gen. Solution Click the link below to download the ESETGoblinCleaner tool. Save the file to your Desktop: ESETGoblinCleaner.exe Click Start → All Programs → Accessories → Command Prompt. Windows 8 users: Press Windows key + F to search, click Apps, enter Command Prompt into the search bar and then click Command Prompt. Type the command cd %userprofile%Desktop (do not replace “userprofile” with your username–type the command exactly as shown) […]
[KB7049] Clean a GandCrab infection using the ESET GandCrab decryptor
Issue Your ESET product detected a Win32/Filecoder.GandCrab infection Decrypt specific variants of your files using the ESETGandCrabDecryptor.exe tool (Currently only 979 released keys for Syrian victims are supported) Your personal files have become encrypted Your files have been renamed with one of the following extensions: .GDCB, .CRAB, .KRAB, or .RANDOM_CHARACTERS You receive the following messages your computer’s desktop background, […]
[KB7081] Clean a Filecoder.AR infection using the Filecoder.AR cleaner (ESET)
Issue Your personal files were encrypted Your ESET product detected the Win32/Filecoder.AR infection Decrypt your files using the ESETFilecoderARcleaner.exe tool Details Your personal files were encrypted without a notification in your computer or in a .txt, .html or .png file File extensions are not being renamed as they are in other ransomware variant infections Solution Not for use on USB […]
[KB7079] Clean a Filecoder.AE infection using the ESET Filecoder.AE cleaner
Issue Your ESET product detected a Win32/Filecoder.AE infection Decrypt specific variants of your files using the decoder.exe tool Your personal files have become encrypted Users are told they have to send information or a certain amount of money via Onpay.ru payment service You receive the following message on your computer: Solution Important! In order to run the decoder, you […]