About “Tedy.123800” infection

The Tedy.123800 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.123800 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Tedy.123800?


File Info:
name: 843980D74D20CF63AE71.mlw
path: /opt/CAPEv2/storage/binaries/6a288bc0e7155f21309b7eead69dd7a11980811dc322292cb2f8e41b5b119461
crc32: A1D6953F
md5: 843980d74d20cf63ae71caf08e8725ec
sha1: 7208bc9d8360e1f818d1ee4ef13926eb7dec7f6d
sha256: 6a288bc0e7155f21309b7eead69dd7a11980811dc322292cb2f8e41b5b119461
sha512: 6c0d4e1638dae01328edc30298d79f0e0531968f9958e7abc0a422ee09cf84535ad87b4747fa64b8a42df3a6d0ea233b96396d5c3010b28e9cd1a41255935ea9
ssdeep: 384:LwWSHoPnWTouyu2JITRl7nxsscMCe3X73Bt:cWzPWToudr6NMCe3TB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F6A36D915A65996BC0351334684697BB06B0793000BAC312F7DC578FFFDE5758F28B85
sha3_384: 4f8cde7c9a4df81348d4205bbd84e044baebcb57dbbd0f6de1606bd7286b44ea61c1a47786a88c8843ad11fbc2cb8b53
ep_bytes: 60be009046008dbe0080f9ff5783cdff
timestamp: 2021-05-04 19:03:09

Version Info:
0: [No Data]

Tedy.123800 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Variant.Tedy.123800
FireEye	Generic.mg.843980d74d20cf63
ALYac	Gen:Variant.Tedy.123800
Cylance	Unsafe
VIPRE	Gen:Variant.Tedy.123800
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.d8360e
Cyren	W32/Backdoor.J.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
APEX	Malicious
BitDefender	Gen:Variant.Tedy.123800
Avast	Win32:CoinminerX-gen [Trj]
Ad-Aware	Gen:Variant.Tedy.123800
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	RDN/Real Protect-LS
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Tedy.123800 (B)
Ikarus	Trojan-Dropper.Agent
GData	Gen:Variant.Tedy.123800
Google	Detected
Avira	TR/Crypt.ULPM.Gen
Arcabit	Trojan.Tedy.D1E398
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.RealProtect-LS.R506479
Acronis	suspicious
McAfee	RDN/Real Protect-LS
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.1448282112
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.179058126.susgen
Fortinet	W32/ULPM.16C0!tr
BitDefenderTheta	Gen:NN.ZexaF.34698.gmW@au@Robc
AVG	Win32:CoinminerX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Tedy.123800?

Tedy.123800 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X