Tedy.114273 malicious file

The Tedy.114273 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.114273 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary file triggered YARA rule

How to determine Tedy.114273?


File Info:
name: 2B3DA72988E23FD78FA3.mlw
path: /opt/CAPEv2/storage/binaries/abb4e8fa9d9404d3bcc1e1a612ebaae457dd6b39b14f015938caa15f11f65449
crc32: 866B1523
md5: 2b3da72988e23fd78fa3e04e5f866ef2
sha1: ec4a298c441296eb477b398f7c264643bbe19588
sha256: abb4e8fa9d9404d3bcc1e1a612ebaae457dd6b39b14f015938caa15f11f65449
sha512: e9a3ceb67451374251ffb1549296ecf66febf27337747d815deea41010e7c10684de948fe0de1a129d92c40f659e8ad9614e97e34bba508495ade2d705769a03
ssdeep: 192:X1McFpCBQXK+XVNeEhjcMasQl40+RypOr:XOcFpCuX534MaVlD+4w
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17812E63963F8C736C8BB5B3A2CB341D093B0B2217922CF1F59C5519F5AA33108992B63
sha3_384: ef0b420e17b2acb4b13fd96eb2ede675eda1fba6702cb0280b2fa5d8931021ff2b6eecd47e2a8efc0d093194bc9ac497
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-05-25 07:58:24

Version Info:
Translation: 0x0000 0x04b0
FileDescription: RozbehTheRobber
FileVersion: 1.0.8179.43152
InternalName: RozbehTheRobber.exe
LegalCopyright: Copyright 2022
OriginalFilename: RozbehTheRobber.exe
ProductName: RozbehTheRobber
ProductVersion: 1.0.8179.43152
Assembly Version: 1.0.8179.43152

Tedy.114273 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Stealer.12!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Tedy.114273
FireEye	Gen:Variant.Tedy.114273
Skyhigh	RDN/Generic PWS.y
McAfee	RDN/Generic PWS.y
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Infostealer.Msil.Agent.V7qs
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	Trojan:MSIL/MalwareX.9c4c7f30
K7GW	Password-Stealer ( 00592db81 )
K7AntiVirus	Password-Stealer ( 00592db81 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/PSW.Agent.SSV
TrendMicro-HouseCall	TROJ_GEN.R002C0PAA24
BitDefender	Gen:Variant.Tedy.114273
Avast	Win32:MalwareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.13bfa4ce
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/PSW.Agent.xkuny
VIPRE	Gen:Variant.Tedy.114273
TrendMicro	TROJ_GEN.R002C0PAA24
Emsisoft	Gen:Variant.Tedy.114273 (B)
ALYac	Gen:Variant.Tedy.114273
Avira	TR/PSW.Agent.xkuny
Antiy-AVL	Trojan[PSW]/MSIL.Agent
Arcabit	Trojan.Tedy.D1BE61
ViRobot	Trojan.Win.Z.Tedy.9216.BH
GData	Gen:Variant.Tedy.114273
AhnLab-V3	Trojan/Win.Generic.C5199852
Google	Detected
MAX	malware (ai score=89)
Cylance	unsafe
Panda	Trj/Agent.AY
Rising	Stealer.Agent!8.C2 (CLOUD)
Ikarus	Trojan.MSIL.PSW
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.988e23
DeepInstinct	MALICIOUS

How to remove Tedy.114273?

Tedy.114273 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X