Tedy.345200 removal

The Tedy.345200 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.345200 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Tedy.345200?


File Info:
name: 9E1B0BCC5F1790F550CC.mlw
path: /opt/CAPEv2/storage/binaries/752e4d2a32027a553b9f9f5e71b3cc9f13277d638d64f0926777786fd93f244f
crc32: 0E61CBD5
md5: 9e1b0bcc5f1790f550cc8ae3d7462432
sha1: 0b81f3d53d143a5dfa928701dc35b22bdfafc88a
sha256: 752e4d2a32027a553b9f9f5e71b3cc9f13277d638d64f0926777786fd93f244f
sha512: 592d469434d137b84ea623178c2b7ff08a1d3e78b2c42a679e5ef154895a5e820e1c269a40be5922fa7dcbb8408995f94d292177c5a398bf55fd6ce6028ed730
ssdeep: 384:TzytiSTx7FYi//7XZ+dkLonc1yS0LaFKWmLqLaj6dPTLdCfWm:Tc5FD6cgyy2a+d7LdCR
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T18B521C1A97E45273E8AA0B315C93D60107B1C1940E77CF1F4DD89115EFAB2B886127BB
sha3_384: 46cc209e38ab59a33ad9f41c49c4a6b4779559657dba77e088e87b69d469625a602b8360508fce1312d2b6fe77e1c778
ep_bytes: ff250020001000000000000000000000
timestamp: 2092-05-17 10:56:07

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: Microsoft
FileDescription: WindowsFormsApp12
FileVersion: 1.0.0.0
InternalName: WindowsFormsApp12.dll
LegalCopyright: Copyright © Microsoft 2024
LegalTrademarks: 
OriginalFilename: WindowsFormsApp12.dll
ProductName: WindowsFormsApp12
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Tedy.345200 also known as:

MicroWorld-eScan	Gen:Variant.Tedy.345200
Arcabit	Trojan.Tedy.D54470
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Injector.ABW
ClamAV	Win.Dropper.Genericrxgi-6998250-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Tedy.345200
Avast	Win32:InjectorX-gen [Trj]
Emsisoft	Gen:Variant.Tedy.345200 (B)
F-Secure	Trojan.TR/AVI.Inj.vjznk
DrWeb	Trojan.InjectNET.14
VIPRE	Gen:Variant.Tedy.345200
FireEye	Generic.mg.9e1b0bcc5f1790f5
SentinelOne	Static AI – Suspicious PE
MAX	malware (ai score=83)
Google	Detected
Avira	TR/AVI.Inj.vjznk
Varist	W32/MSIL_Troj.C.gen!Eldorado
Microsoft	VirTool:MSIL/Injector.gen!A
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Tedy.345200
AhnLab-V3	Trojan/Win.Generic.C5616236
ALYac	Gen:Variant.Tedy.345200
Panda	Trj/GdSda.A
Ikarus	Trojan.MSIL.Injector
Fortinet	MSIL/ABW!tr
AVG	Win32:InjectorX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Tedy.345200?

Tedy.345200 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X