[KB2613] How to use the ESET Merond.O stand-alone cleaner from the Command Prompt window

Issue

Solution

ESET has provided this Merond.O stand-alone tool to remove this particularly resilient threat. The Merond.O malware infects files and to clean these files, you must run the removal tool on the infected computer.

NOTE:

This tool must be run from the command line and if you are running Windows Vista / 7 / 8 / 10 or Server 2008, you will need to run the command prompt with elevated permissions.

  1. Save the tool to your desktop by clicking Save after clicking the following link:

    Download ESET Merond.O Cleaner
     
  2. Click Start .
     
  3. Type Command Prompt in the Start Search field.
     
  4. Right-click the Command Prompt menu item and from the context menu, select Run as administrator.

    -Windows XP users: Click Start All ProgramsAccessories Command Prompt

Figure 1-1

  1. The command usage of the cleaner is as follows:

    ESETMerondOCleaner.exe

    Follow the instructions below as an example of how to run the tool when saved to the C: drive:
    1. Type cd Desktop.
       
    2. Type or paste the following command (To paste into the Command Prompt, you must right-click and select ‘Paste’ from the context menu as Ctrl + V will not work):

      ESETMerondOCleaner.exe C:
       
    3. Press Enter and you will see Processing . . . followed by the infected files the tool has cleaned, or the files it has errors opening. This may take several minutes.
       
    4. Once the tool has completed, a backup file will be created for each infected file in the directory they are located and the file names will be appended with the extension  .org. If cleaned files work fine, delete the backup files *.org containing the Win32/Merond.O worm or they will be detected the next time you run a scan.

Figure 1-2  

Need further assistance? Contact ESET Technical Support.

Need Assistance in North America?

If you are a North American ESET customer and need assistance, view product documentation or visit helpus.eset.com to chat with a live technician.