Tedy.286673 information

The Tedy.286673 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.286673 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Tedy.286673?


File Info:
name: 577E415230985751A791.mlw
path: /opt/CAPEv2/storage/binaries/7fd021d44f52559cb9d028daa389459853a4e611c83e23b75df975b4aec656d9
crc32: 1CF32A3C
md5: 577e415230985751a7918599441ffca8
sha1: 071c53099decea6d9117e4ee519470140c68c7e9
sha256: 7fd021d44f52559cb9d028daa389459853a4e611c83e23b75df975b4aec656d9
sha512: a0595e6f37a38fe7252ba5f085f0e2d6b514b16bcb8ec1f64929c5aefe44ae9fa19f2b1f4b078d15598b819eae6a05f61f12f31505032c1fdd9ec09cf5b07338
ssdeep: 49152:reh4n6eo5H+E/uSo6JFiRRNtiSYo2wvgzc/eYJKifjG5frvQyT3zf4:rZ6+f6ji7fjc
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T1F0464C2B72A4C12DC16EC23EC1AB8F90E933B4B51B33C6EB125047651F56AC49E7E761
sha3_384: ee5923443be5844f19e74a461700143783ea1ec0dfc6e0e3cd15e85d8250e9351a5703dc6e4a4df06678738d07cec799
ep_bytes: 554883ec20488bec90488d0d80000000
timestamp: 2023-02-27 10:45:27

Version Info:
CompanyName: Advanced Messaging Systems LLC
FileDescription: rdpex
FileVersion: 2.0.0.5
InternalName: rdpex.exe
LegalCopyright: Copyright © 2000 - 2022 Advanced Messaging Systems LLC
LegalTrademarks: Copyright © 2000 - 2022 Advanced Messaging Systems LLC
OriginalFilename: rdpex.exe
ProgramID: com.embarcadero.PEG_Example
ProductName: rdpex
ProductVersion: 2.0.0.5
Comments: Memory manager for Intel® 64 architecture.
Translation: 0x0409 0x04e4

Tedy.286673 also known as:

Lionic	Trojan.Win32.Agent.Y!c
MicroWorld-eScan	Gen:Variant.Tedy.286673
FireEye	Gen:Variant.Tedy.286673
ALYac	Gen:Variant.Tedy.286673
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.V6ev
Alibaba	Trojan:Win32/Generic.c780242d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.BYNRWYP
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agent.xaulrn
BitDefender	Gen:Variant.Tedy.286673
Avast	Win64:Malware-gen
Emsisoft	Gen:Variant.Tedy.286673 (B)
VIPRE	Gen:Variant.Tedy.286673
McAfee-GW-Edition	BehavesLike.Win64.BadFile.tm
GData	Gen:Variant.Tedy.286673
Avira	TR/Agent.yycxt
Arcabit	Trojan.Tedy.D45FD1
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!577E41523098
MAX	malware (ai score=88)
TrendMicro-HouseCall	TROJ_GEN.R002H09C123
Rising	Spyware.Delf!8.12D (TFE:4:qCTtb9SGHbD)
Fortinet	W32/PossibleThreat
AVG	Win64:Malware-gen
Panda	Trj/Chgt.AD

How to remove Tedy.286673?

Tedy.286673 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X