ERADON.EXE is Worm Rebhip
The file ERADON.EXE is a computer worm.
The worm ERADON.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other computers.
You must fix the ERADON.EXE problem as soon as possible!
Delete the file ERADON.EXE from all infected computers in your network.
Set up your network firewall against ERADON.EXE intervention.
Malware Analysis of ERADON.EXE
Full path on a computer: %SysDir%\install\Eradon.exe
Detected by UnHackMe:
ERADON.EXE
Default location: %SysDir%\install\Eradon.exe
Removal Results: Success
Number of reboot: 1
ERADON.EXE is known as:
Worm.Rebhip
ERADON.EXE hash:
- MD5: 36a10a7b69172de8d03e74154714a4f8
The file tries to connect to the dangerous web site.
How to quickly detect ERADON.EXE presence?
Registry:
Files:
Registry:- HKLM\Software\Microsoft\Active Setup\Installed Components\{6PT34ALA-4SFX-07T2-256X-S0XN156RF5K8}\StubPath: “%SysDir%\install\Eradon.exe Restart”
- HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\Policies: “%SysDir%\install\Eradon.exe”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\HKLM: “%SysDir%\install\Eradon.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: “%SysDir%\install\Eradon.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\HKCU: “%SysDir%\install\Eradon.exe”
Files:- %Temp%\51859.tmp
- %Temp%\Administrator7
- %Temp%\Administrator8
- %SysDir%\install\Eradon.exe
Recommended: UnHackMe anti-rootkit and anti-malware
Premium software: RegRun Security Suite (Good choice for removal and protection)
