Associated Malware Groups
The filename is associated with the malware group:
File Behavior
ERY.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Found on infected systems and resists interrogation by security products
- Uses rootkit techniques to conceal its presence, interrogation or removal
- This process creates other processes on disk
- Executes Processes stored in Temporary Folders
- Executes a Process
- This Process Deletes Other Processes From Disk
- Adds a Registry Key (RUN) to auto start Programs on system start up
ERY.EXE has been the subject of the following behavior:
- Created as a process on disk
- Registered as a Dynamic Link Library File
- Deleted as a process from disk
- Executed as a Process
Country Of Origin
The filename ERY.EXE was first seen on Nov 21 2007 in the following geographical regions of the Webroot community:
- Europe on Nov 21 2007
- Netherlands on Nov 21 2007
- The United States on Nov 4 2008
- The United Kingdom on Nov 4 2008
- South Africa on Apr 8 2011
- Colombia on Jan 21 2012
File Name Aliases
ERY.EXE can also use the following file names:
- PUSK2[1].EXE
- UYM.EXE
- WLP.EXE
- FAW.EXE
- DVV.EXE
- SUJ.EXE
- IHC.EXE
- KIN.EXE
- FIW.EXE
- ERECOVERY_V2.5.4012.EXE
- PUSK2.EXE
- ERECOVERYINSTALL_V2.1.3000.EXE
- 24 ERECOVERY_V2.5.4012.EXE
- 0.6727535623849009.EXE
- 87343038
- 0.19864144392889505.EXE
- 64928922.EXE
Filesizes
The following file size has been seen:
- 344,064 bytes
- 17,100,336 bytes
- 361,984 bytes
- 10,541,162 bytes
File Type
The filename ERY.EXE refers to many versions of an executable program.
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.