What is “Tedy.18992”?

The Tedy.18992 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.18992 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Tedy.18992?


File Info:
name: 728A7A0B412D8F59263B.mlw
path: /opt/CAPEv2/storage/binaries/5410b9671ab0df0290360697c136a1219dc04c7e4b6a04d9dfe4f8bc4a34000d
crc32: 29FAF7D0
md5: 728a7a0b412d8f59263be224deddddda
sha1: ab475ed172640237e7804e227c3be5ac16cbb893
sha256: 5410b9671ab0df0290360697c136a1219dc04c7e4b6a04d9dfe4f8bc4a34000d
sha512: 2c783f547a5c7530c40390b778987bad60561b352b3c6f9fa1a1a7037e60d6fe4318951c71d114dea72360412d7b6ad3d6deacbde98aeed653f1d42391e9e669
ssdeep: 12288:uWpUha2wW/b4MphfV5KV5izrqFkbFsmWpUha2wW/b4MphfV5KV5izrqFkbd:uW0/MMp5IifqFuFsmW0/MMp5IifqFud
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DED48E02B3E150B5D96781305AB9A732A93AFC331531E72F9758E9651E70FC0AF29723
sha3_384: 67d99080360bbdc4108e0649713af8d03bb99c9c39c09f76f5a027942cc53c176a90f103e59169a69eaa399a0338535d
ep_bytes: e8131d0000e97bfeffff3b0dd0b24100
timestamp: 2015-12-17 03:29:19

Version Info:
0: [No Data]

Tedy.18992 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.728a7a0b412d8f59
McAfee	GenericRXAA-AA!728A7A0B412D
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 005626da1 )
K7AntiVirus	Trojan ( 005626da1 )
Cyren	W32/Blackie.L.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
ClamAV	Win.Malware.Genpack-9877676-0
BitDefender	Gen:Variant.Tedy.18992
MicroWorld-eScan	Gen:Variant.Tedy.18992
Avast	Win32:VB-FBX
Emsisoft	Gen:Variant.Tedy.18992 (B)
DrWeb	Win32.HLLW.Autoruner.547
McAfee-GW-Edition	BehavesLike.Win32.Generic.jh
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Tedy.18992
ALYac	Gen:Variant.Tedy.18992
MAX	malware (ai score=80)
VBA32	Trojan.Sdum
Malwarebytes	Malware.AI.3696146603
TrendMicro-HouseCall	TROJ_GEN.R03BH0CB122
Rising	Worm.VB!1.DA41 (RDMK:cmRtazqv4a0bSNz4xJkHUkpv/6Dk)
Ikarus	Trojan.Dropper
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Blackie.C953!tr
AVG	Win32:VB-FBX

How to remove Tedy.18992?

Tedy.18992 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X