How to remove “Tedy.577”?

The Tedy.577 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.577 virus can do?

Presents an Authenticode digital signature
Authenticode signature is invalid
The executable used a known stolen/malicious Authenticode signature
Anomalous binary characteristics

How to determine Tedy.577?


File Info:
name: B9AF6D2F7DB8F4391ADD.mlw
path: /opt/CAPEv2/storage/binaries/3a4c3f5edd3f4dc62176e8331bfd7229bedb01bbda1f05b800eca3cb54dd1c87
crc32: 7D9BFBA6
md5: b9af6d2f7db8f4391addbdb3cc013513
sha1: 6197b4044fedef8c52840db9e96c42c13d2de8ff
sha256: 3a4c3f5edd3f4dc62176e8331bfd7229bedb01bbda1f05b800eca3cb54dd1c87
sha512: 9f0d94b738ca00f827524b396da6db4364269ff9279fd59e04b4dac043b93006c73687e74f33de9c7b620c0151e1648cee4238ddcefe5a791aac794428dbaabf
ssdeep: 24576:LVNM+wQfKhVZ5DULqLIcuzKPgssStPUvgB:Lk+DfofDULfhKPgssSt2gB
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T163752A1277F9A4B9F1F36A709EB892605B76BC705E35C20F6390125E4D71A80AE31B37
sha3_384: a152b9a3e46a82a3e7c40b913b0aef6c2d7983e27258fff05787c3f3b939b81c1e819aeec34e0c44a716c73b83108dc0
ep_bytes: 4883ec28e8670800004883c428e9f6fd
timestamp: 2021-02-19 13:48:51

Version Info:
CompanyName: Python Software Foundation
FileDescription: Python
FileVersion: 3.9.2
InternalName: Python Application
LegalCopyright: Copyright © 2001-2021 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.
OriginalFilename: pythonw.exe
ProductName: Python
ProductVersion: 3.9.2
Translation: 0x0000 0x04b0

Tedy.577 also known as:

Lionic	Trojan.Win32.Tedy.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Tedy.577
FireEye	Gen:Variant.Tedy.577
McAfee	Artemis!B9AF6D2F7DB8
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (W)
Cyren	W64/Agent.DLO.gen!Eldorado
Symantec	Trojan.Gen.MBT
TrendMicro-HouseCall	TROJ_GEN.R03BH0CL521
Paloalto	generic.ml
ClamAV	Win.Malware.Filerepmalware-9859683-0
BitDefender	Gen:Variant.Tedy.577
Avast	Win64:Malware-gen
Ad-Aware	Gen:Variant.Tedy.577
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win64.Generic.th
SentinelOne	Static AI – Malicious PE
Emsisoft	Gen:Variant.Tedy.577 (B)
Ikarus	Virus.Win32.Blackie
MaxSecure	Trojan.Malware.121218.susgen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Tedy.577
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Tedy.577
MAX	malware (ai score=84)
Fortinet	W64/Agent.906B!tr
AVG	Win64:Malware-gen

How to remove Tedy.577?

Tedy.577 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X