Trojan-PSW.Win32.Tepfer.pef malicious file

The Trojan-PSW.Win32.Tepfer.pef is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-PSW.Win32.Tepfer.pef virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Trojan-PSW.Win32.Tepfer.pef?


File Info:
name: 1349CF4AA5FC0C90BFE5.mlw
path: /opt/CAPEv2/storage/binaries/a061f2e8a60af457a7cb34c64454869c40f499a98420320bd6d90b159c85c181
crc32: CACFF7E2
md5: 1349cf4aa5fc0c90bfe58b3369b0a5fe
sha1: 750139d35b829cf1aeb6af5327a3962256afb9dc
sha256: a061f2e8a60af457a7cb34c64454869c40f499a98420320bd6d90b159c85c181
sha512: 32b74c9ee8a7012c421b22a0e69a235f06fd7108ea4578ec400a88a6ad7d66a2961e821eb44a17620e30e0cbc7b3527d851e07cebc96674e3fb15bba71642388
ssdeep: 6144:1OLPKc6O8+EKIxCKY+wJPogZBwIZg4u0tVQenUI2u1E1AOX1rYpp31V0eP9V34i:UPp6bWloIwZ90TQen+x1xuhV0uJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F40528067F83C0B2D05A21388D91C39966BBF4F17EB25697BBC90F0F1C721E52EA5169
sha3_384: 40a65d8fb26e631b7747680dc31c0e76e4a9506ce26d72a2af21d1608f87275b106b9a6884f463b176b75eca67ba973d
ep_bytes: 60be006057008dbe00b0e8ffc787048c
timestamp: 2013-11-30 09:19:59

Version Info:
0: [No Data]

Trojan-PSW.Win32.Tepfer.pef also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Zusy.433628
ClamAV	Win.Malware.Fareit-9956814-0
FireEye	Generic.mg.1349cf4aa5fc0c90
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Zusy.433628
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.aa5fc0
Cyren	W32/Tepfer.AP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-PSW.Win32.Tepfer.pef
BitDefender	Gen:Variant.Zusy.433628
Avast	Sf:ShellCode-AV [Trj]
Emsisoft	Gen:Variant.Zusy.433628 (B)
F-Secure	Heuristic.HEUR/AGEN.1315113
Zillya	Trojan.Tepfer.Win32.95349
McAfee-GW-Edition	BehavesLike.Win32.Generic.bm
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Kelihos
GData	Gen:Variant.Zusy.433628
Avira	HEUR/AGEN.1315113
MAX	malware (ai score=86)
Antiy-AVL	Trojan[PSW]/Win32.Tepfer
Arcabit	Trojan.Zusy.D69DDC
ZoneAlarm	HEUR:Trojan-PSW.Win32.Tepfer.pef
Microsoft	Backdoor:Win32/Kelihos
Google	Detected
AhnLab-V3	Backdoor/Win32.Kelihos.R12744
BitDefenderTheta	Gen:NN.ZexaF.36318.XmW@a4TeAAh
Cylance	unsafe
APEX	Malicious
Rising	Stealer.Agent!1.A343 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.190037732.susgen
Fortinet	W32/Agent.C048!tr
AVG	Sf:ShellCode-AV [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Trojan-PSW.Win32.Tepfer.pef?

Trojan-PSW.Win32.Tepfer.pef removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X