Categories: Malware

How to remove “Tedy.5081”?

The Tedy.5081 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Tedy.5081 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Anomalous file deletion behavior detected (10+)
Dynamic (imported) function loading detected
Enumerates running processes
Reads data out of its own binary image
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Clears Windows events or logs
Uses suspicious command line tools or Windows utilities

How to determine Tedy.5081?


File Info:
name: CDAB704107EF7904F94F.mlwpath: /opt/CAPEv2/storage/binaries/73a021b25959d54dcf74f63ed86cb51de9f359cc164b319bf179e51ad0cf2d65crc32: 52BE1253md5: cdab704107ef7904f94f88b43a1954absha1: f6932b194cc73e552ef0d8cefcea6d5986116ed5sha256: 73a021b25959d54dcf74f63ed86cb51de9f359cc164b319bf179e51ad0cf2d65sha512: 7df3a97ca0c07df14fe3fbee086d6d247cbcce742a7ca61f48b3d295bded365bc8427726c113f1cba8deb88dd25bfbe9a1b70c2ad9e7f15bf0e80474b1c77a24ssdeep: 1536:7MpxVUC9B3yGoERbEy/Qlc7uWY0xtTXvql:7uxVUg3yGDRb8lc7uWVxtTXvitype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T126639D0437A0C067E5B306711E7AD7BB5BF9EE261464970B23D07F4F7932692990E3A2sha3_384: a0476a405c6efa79e2190b865de1d4396dff548db41b074c6307bad32bd8235c86b1af5cb70166b029d161fd6b8f64beep_bytes: 81ecd40200005356576a205f33db6801timestamp: 2021-07-24 22:19:26
Version Info:
FileDescription: Air Explorer PortableFileVersion: 4.0LegalCopyright: © 2021 ИгорьProductName: Air ExplorerTranslation: 0x0419 0x04e3

Tedy.5081 also known as:

Cynet	Malicious (score: 99)
FireEye	Gen:Variant.Tedy.5081
CAT-QuickHeal	Trojan.Skillis
McAfee	Artemis!CDAB704107EF
Alibaba	Trojan:Win32/Skillis.f963042f
Kaspersky	HEUR:Trojan.Win32.Skillis.gen
BitDefender	Gen:Variant.Tedy.5081
MicroWorld-eScan	Gen:Variant.Tedy.5081
Avast	NSIS:TrojanX-gen [Trj]
Ad-Aware	Gen:Variant.Tedy.5081
Emsisoft	Gen:Variant.Tedy.5081 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.km
GData	Gen:Variant.Tedy.5081
Avira	TR/Redcap.mihah
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
ALYac	Gen:Variant.Tedy.5081
MAX	malware (ai score=89)
TrendMicro-HouseCall	TROJ_GEN.R002H09L221
AVG	NSIS:TrojanX-gen [Trj]
Panda	Trj/CI.A