Tedy.44017 information

The Tedy.44017 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.44017 virus can do?

Presents an Authenticode digital signature
Dynamic (imported) function loading detected
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Tedy.44017?


File Info:
name: 93BF75A25C8FF95E4307.mlw
path: /opt/CAPEv2/storage/binaries/c65418cb3ecdf1db088a6011338000822a2e5c9efd0f97aa9938f3724410d7d6
crc32: E66533CB
md5: 93bf75a25c8ff95e430764d631e60c23
sha1: de0e1a12392215d6c11e4cdeb4364d610487f689
sha256: c65418cb3ecdf1db088a6011338000822a2e5c9efd0f97aa9938f3724410d7d6
sha512: ba70686eb42678d7d2bf297a4518445c9e40dbd0b4ff2791343730caf003b7c5458490894f32f8880846b5cd2589a5672998a48f3d64d5749ddf6888a9323abf
ssdeep: 6144:v6OoF1FWMcavoodaqhV4/M++iP64ir+tZRqR3Ckq:iOCcHAaqy/lC0Y3C3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14E942F136DC8FB18B4915D3382CF6E291B922DD69B3295462B59FEF412A02016D3BF7C
sha3_384: e72ac8accffab385bdaab1ffe79782716cbabb1ba5a72a4d8a635330b9d2779a9a1cadb0f3e6fd08fbe45df744d1acb0
ep_bytes: ff250020400000000000000000000000
timestamp: 2057-11-13 03:13:32

Version Info:
Translation: 0x0000 0x04b0
Comments: czfaXqx
CompanyName: nPBzzJAdA
FileDescription: czfaXqx
FileVersion: 1.38.80.71
InternalName: rGIpEFE.exe
LegalCopyright: Copyright ©  2021 nPBzzJAdA
LegalTrademarks: 
OriginalFilename: rGIpEFE.exe
ProductName: czfaXqx
ProductVersion: 1.38.80.71
Assembly Version: 1.38.80.71

Tedy.44017 also known as:

MicroWorld-eScan	Gen:Variant.Tedy.44017
FireEye	Generic.mg.93bf75a25c8ff95e
ALYac	Gen:Variant.Tedy.44017
K7AntiVirus	Trojan ( 00589cf01 )
K7GW	Trojan ( 00589cf01 )
BitDefenderTheta	Gen:NN.ZemsilF.34294.zm2@aydHqQc
Cyren	W32/MSIL_Kryptik.GEE.gen!Eldorado
ESET-NOD32	a variant of MSIL/Kryptik.ADLB
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	Gen:Variant.Tedy.44017
Avast	Win32:PWSX-gen [Trj]
Ad-Aware	Gen:Variant.Tedy.44017
Emsisoft	Gen:Variant.Tedy.44017 (B)
SentinelOne	Static AI – Malicious PE
GData	MSIL.Trojan.BSE.12B6GLS
Avira	TR/AD.Inject.wtwqb
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
McAfee	GenericRXQV-QV!93BF75A25C8F
Malwarebytes	Trojan.Crypt.MSIL
APEX	Malicious
Fortinet	W32/GenKryptik.FNMI!tr
AVG	Win32:PWSX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Tedy.44017?

Tedy.44017 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X