How to use the ESET Win32/IRCBot stand-alone cleaner from the Command Prompt window


ESET has provided this Win32/IRCBot stand-alone tool to remove this particularly resilient threat.


This tool must be run from the command line and if you are running Windows Vista / 7 / 10 or Windows Server 2008, you will need to run the command prompt with elevated permissions.

  1. Right-click the following link and then click Save Target As (or Save Link As) and then choose your Desktop in the dialog window. Click Save.

    Download ESET IRCBotANR Cleaner
  2. Windows XP users: Click Start All ProgramsAccessories → and then click Command Prompt.

    Windows Vista/7/Server 2008 users: Click Start and type Command Prompt. Press Ctrl + Shift + Enter on your keyboard.
  1. The command usage of the cleaner is as follows:

    ESETIRCBotANRCleaner.exe –clean

    Follow the instructions below as an example of how to run the tool when saved to the Desktop on a Windows XP machine:
    1. Type CD Desktop and then press Enter.
    2. Type or paste the following command (To paste into the Command Prompt, you must right-click and select ‘Paste’ from the context menu as Ctrl + V will not work):

      ESETIRCBotANRCleaner.exe –clean
    3. Press Enter.

Figure 1-1

  1. Restart your computer.

If you are still unable to resolve your issue, please email ESET Technical Support.

Need Personalized Assistance in North America?

If you're not already an ESET customer, ESET Support Services are available to clean, optimize and secure your system. Call 866-944-3738 or click to schedule an appointment with ESET Support Services today!

Additional resources