What is “Tedy.26330”?

The Tedy.26330 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.26330 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the AsyncRat malware family
Anomalous binary characteristics

How to determine Tedy.26330?


File Info:
name: C5D9121AFE0D0E4567D9.mlw
path: /opt/CAPEv2/storage/binaries/88e8ed267091231a47d0b3d17a2cb6dd28ec64d159e2c9509d27b4a93177ee67
crc32: 2903EB1D
md5: c5d9121afe0d0e4567d9828909d84981
sha1: ba37c199af9b51d39c89f9b00068bcff75b73ef1
sha256: 88e8ed267091231a47d0b3d17a2cb6dd28ec64d159e2c9509d27b4a93177ee67
sha512: b8c33e3753334b68bdb662e23423677fad05a9f0d1a7865317e1eb1e71e36d46f1dc7e126339df8fdfd6feec422878f368ab6f0e4cd0602543daa9b401cecc87
ssdeep: 12288:tZr6I/7A5qJYGAGyHvCFZgUXWpHhfTtPpqlIAGWm4TywOCDtbYB6iLbgJIQRd51T:fj0EJYspWpHhMd7yqhgMoQEQV8ZW9T5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CC456B185C995D27F537E8339ACFE315C62A13A6640A9FAB2B47C33D098184F4B47C9E
sha3_384: 37a135ca3cb02670d500293ee99f8b500281609770f546b1aa7f776d74b59518b474b7684cc9ccda0218e3a694fe8b8e
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-05-10 05:24:51

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: Stub.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Stub.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Tedy.26330 also known as:

Lionic	Trojan.MSIL.Crysan.m!c
Elastic	malicious (high confidence)
ClamAV	Win.Packed.Samas-7998113-0
McAfee	GenericRXLD-DD!C5D9121AFE0D
Malwarebytes	Backdoor.AsyncRAT.MSIL.Generic
Zillya	Trojan.Agent.Win32.1429269
Sangfor	Backdoor.MSIL.Crysan.gen
CrowdStrike	win/malicious_confidence_80% (D)
BitDefender	Gen:Variant.Tedy.26330
K7GW	Trojan ( 005592e51 )
K7AntiVirus	Trojan ( 005592e51 )
Cyren	W32/MSIL_Agent.BTI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.CFQ
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
Alibaba	Backdoor:MSIL/Crysan.38ba211e
NANO-Antivirus	Trojan.Win32.Crysan.hxctvb
MicroWorld-eScan	Gen:Variant.Tedy.26330
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.11afe9a4
Ad-Aware	Gen:Variant.Tedy.26330
Emsisoft	Gen:Variant.Tedy.26330 (B)
DrWeb	Trojan.Siggen9.56514
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXLD-DD!C5D9121AFE0D
FireEye	Generic.mg.c5d9121afe0d0e45
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Agent
GData	Gen:Variant.Tedy.26330
Avira	TR/Dropper.Gen
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.308232E
Arcabit	Trojan.Tedy.D66DA
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win32.RL_Generic.R358277
VBA32	TScope.Trojan.MSIL
ALYac	Gen:Variant.Tedy.26330
Cylance	Unsafe
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	PossibleThreat
BitDefenderTheta	Gen:NN.ZemsilF.34294.iz1@aeSObNf
AVG	Win32:Malware-gen
Cybereason	malicious.afe0d0
Panda	Trj/CI.A
MaxSecure	Trojan.Malware.74418669.susgen

How to remove Tedy.26330?

Tedy.26330 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X