Tedy.63967 (B) removal guide

The Tedy.63967 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.63967 (B) virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Presents an Authenticode digital signature
Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Tedy.63967 (B)?


File Info:
name: 35537ECD601973A2E7BE.mlw
path: /opt/CAPEv2/storage/binaries/fe201b9be0b7effc5a9c3e3d8727cfa919574941cb05be2419ed90147dc26aaf
crc32: 2D049D8D
md5: 35537ecd601973a2e7be1057f6d6c670
sha1: fb95f8133c1a110b17ca3814cb3fefe6f107b159
sha256: fe201b9be0b7effc5a9c3e3d8727cfa919574941cb05be2419ed90147dc26aaf
sha512: 6794431c0aa2278dce2baafe26bd5a73d527acebfc9f1e82914fb5968c8892bba42b0278619194a0f4c2ecf658b80e56502868fe3c8441b4f88fe57b475b85c8
ssdeep: 24576:tmXVa5H8bKWWh4f1tLeyWcRq4at1flT/88OTp:tH51WWhipXqpnTnON
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T170656C13B7E44061E0B2667449B69336E671BC051B34CACF4268BA2D5F33BF1A939736
sha3_384: 7e6915cc87551901b305add637990f92170c557533ebd3b9c4d55264c926398ce6b7a52a82d61b717bf89dfe52821c82
ep_bytes: e863060000e978feffffcccccccccccc
timestamp: 2021-02-24 21:27:00

Version Info:
CompanyName: Adobe Systems Incorporated
FileDescription: AcroTextExtractor
FileVersion: 21.1.20142.424128
LegalCopyright: Copyright 1984-2021 Adobe Systems Incorporated and its licensors. All rights reserved.
OriginalFilename: AcroTextExtractor.exe
ProductName: Adobe Acrobat text extractor for non-PDF files
ProductVersion: 21.1.20142.424128
Translation: 0x0409 0x04b0

Tedy.63967 (B) also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Tedy.63967
FireEye	Generic.mg.35537ecd601973a2
McAfee	Artemis!35537ECD6019
Cylance	Unsafe
BitDefender	Gen:Variant.Tedy.63967
CrowdStrike	win/malicious_confidence_70% (W)
Cyren	W32/Fugrafa.AB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Autorun.th
Emsisoft	Gen:Variant.Tedy.63967 (B)
Ikarus	Trojan.Agent
Jiangmin	Packed.Krap.gvuw
MaxSecure	Trojan.Malware.121218.susgen
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Trojan.PSE.136NMWS
ALYac	Gen:Variant.Tedy.63967
MAX	malware (ai score=84)
VBA32	Worm.VB
Malwarebytes	Malware.AI.3387674342
Yandex	Trojan.Agent!vGmSoUnC6tc
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Fugrafa.A069!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen

How to remove Tedy.63967 (B)?

Tedy.63967 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X