Categories: Malware

Tedy.249151 removal tips

The Tedy.249151 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Tedy.249151 virus can do?

Behavioural detection: Executable code extraction – unpacking
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Checks the version of Bios, possibly for anti-virtualization
Detects VirtualBox through the presence of a registry key
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Tedy.249151?


File Info:
name: 24C4BA239CD5CE0038CF.mlwpath: /opt/CAPEv2/storage/binaries/a0ae7efadf6c73ac5555ceaa1affadbf40397f6860c515d106c6be06a7b91f4dcrc32: 69A9D1A8md5: 24c4ba239cd5ce0038cf7a79474909ccsha1: 76a13966c8d96e2120d4993f6e203a9913f029b1sha256: a0ae7efadf6c73ac5555ceaa1affadbf40397f6860c515d106c6be06a7b91f4dsha512: b44d047d732b0ec372e838a6334c36687fe6c32cdcbf0ac39052d4143d1bf818b407c47bc64658fb3433357d56eaa6a4876a90333044921470bf69d53c916831ssdeep: 98304:SpVhEQ2Q03l1qQfc+SUtCFnTx8YsjzndHQ1zqOSmaYe8+KeuzN9sM:Sp3EpQ011qQfc+SUtCgSqOQ/8+KeuzNDtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T168567EB1B60691EFD89F8F749047DE579AAC47A409318C03E859F87DEE23C4261EBE14sha3_384: b9c1b7d7b6bf96d50237bbc20bd272b4e461178f9be1d1481c94368a82967685d8da6df91b5f28c462982565729dae2dep_bytes: eb080f6a5d0000000000e90020000054timestamp: 2022-11-30 04:37:59
Version Info:
0: [No Data]

Tedy.249151 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
FireEye	Generic.mg.24c4ba239cd5ce00
McAfee	Artemis!24C4BA239CD5
Cylance	unsafe
Zillya	Trojan.Themida.Win32.88287
Sangfor	Trojan.Win32.Packed.V5hi
K7AntiVirus	Trojan ( 0057168e1 )
Alibaba	Packed:Win32/Themida.1ff2a51c
K7GW	Trojan ( 0057168e1 )
Cyren	W32/ABRisk.DRTQ-1908
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.Themida.HPL
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:Rootkit.Win64.Agent.bhc
BitDefender	Gen:Variant.Tedy.249151
MicroWorld-eScan	Gen:Variant.Tedy.249151
Avast	Win32:MalwareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.117d9101
Sophos	Mal/Generic-S
DrWeb	Trojan.BtcMine.1580
VIPRE	Gen:Variant.Tedy.249151
TrendMicro	TROJ_GEN.R002C0PLE22
McAfee-GW-Edition	GenericRXUV-CQ!24C4BA239CD5
Emsisoft	Gen:Variant.Tedy.249151 (B)
Ikarus	Trojan.Win32.Themida
GData	Gen:Variant.Tedy.249151
Antiy-AVL	Trojan[Packed]/Win32.Themida
Arcabit	Trojan.Tedy.D3CD3F
ViRobot	Trojan.Win.Z.Themida.6130196
ZoneAlarm	VHO:Rootkit.Win64.Convagent.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Dlder.R536220
MAX	malware (ai score=84)
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/Chgt.AA
Zoner	Probably Heur.ExeHeaderL
TrendMicro-HouseCall	TROJ_GEN.R002C0PLE22
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.74733560.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)