Malware

Tedy.70941 removal

Malware Removal

The Tedy.70941 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Tedy.70941 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Created a process from a suspicious location
  • CAPE detected the PyInstaller malware family

How to determine Tedy.70941?


File Info:

name: C71C1AAB9CC16C89B991.mlw
path: /opt/CAPEv2/storage/binaries/d62fff17eae52fd500b6b1481637f9fd4a1655ffb2dab6dee2a3a5c291550e88
crc32: CD378FA5
md5: c71c1aab9cc16c89b9914c40a697cd39
sha1: e02c0c7ec96acd4e7e4ea1624fe56d626e478d2d
sha256: d62fff17eae52fd500b6b1481637f9fd4a1655ffb2dab6dee2a3a5c291550e88
sha512: e03f64536dbe3f003c4fa379195e26dcadaaf334eb18e7dc3427fad74df3698e36c58b0dcc554e0b0778bab014c7c8c2b6ee769c797a631f96b67a74741a688e
ssdeep: 196608:IgRkDhWGGYK5Rw2PHfOJVymGw8r9ZQp1535QF5ySDU59Sehgsa67k:hkVoYKnw2fSL8rU15+UXSehgzSk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D59633F4EE83A138D423193445C1DAB129BA3D502F504986D7D8BEA3BA76DC4733B91B
sha3_384: e881e8f2d08b082aec1d55c352cdd9ea05c1c16b5823c72e8d7fb941cf241c665509799554dba8e8b491bf37c991699d
ep_bytes: e864040000e988feffff3b0d68e64300
timestamp: 2021-06-11 09:16:47

Version Info:

0: [No Data]

Tedy.70941 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Tedy.70941
CyrenW64/Tedy.B.gen!Eldorado
ESET-NOD32Python/PSW.Agent.SG
APEXMalicious
ClamAVWin.Dropper.Dorifel-9910700-0
KasperskyUDS:Trojan-Spy.Win32.Agent
BitDefenderGen:Variant.Tedy.70941
EmsisoftGen:Variant.Tedy.70941 (B)
McAfee-GW-EditionBehavesLike.Win32.Generic.rc
FireEyeGeneric.mg.c71c1aab9cc16c89
SophosGeneric ML PUA (PUA)
AviraTR/PSW.Agent.qsrbo
Antiy-AVLTrojan/Generic.ASMalwS.3506C16
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
GDataWin32.Trojan-Stealer.Cordimik.W452BH
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.R425384
ALYacGen:Variant.Tedy.70941
MAXmalware (ai score=86)
MalwarebytesMalware.AI.151620040
SentinelOneStatic AI – Suspicious SFX
FortinetPython/Disco.BC67!tr.pws
AVGWin32:Malware-gen
Cybereasonmalicious.ec96ac
AvastWin32:Malware-gen

How to remove Tedy.70941?

Tedy.70941 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment