Tedy.384369 (file analysis)

The Tedy.384369 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.384369 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Tedy.384369?


File Info:
name: 306610B35C5665376056.mlw
path: /opt/CAPEv2/storage/binaries/a5d30e236d370783de9a2428d445aad4e42eda5b7dc30af91264723f7ab07772
crc32: 6F024A97
md5: 306610b35c5665376056ae4f72460108
sha1: 85d73d94c2fae087e0f0da031b2bcff738abb65a
sha256: a5d30e236d370783de9a2428d445aad4e42eda5b7dc30af91264723f7ab07772
sha512: 5e30b38a43a8119d368d5b9d5d925fcd72755da3182175fe3defcfda432a612240c9352c7232bf83ce14016e3085bcc021bb2b3e30c69186524cc7d5fc47648c
ssdeep: 6144:UXBXYuLsnwb4HhR9j+Xb9kfOIsUGkA7bFpwev1rKSTvdYACKLtJwhHvAwhHuXALY:UXV5AnwAIkWUGkZmrKIiACcQ0BB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T171946B2275C8D131D9E321B546ACB23462AEFCB00B7255C7AA9423EEDD347C19E3479B
sha3_384: f76e6d325481b2bde3301f38f80600f10d4e4ef2d3abab85d927a95051e3be94b0a86ac4efa579555fc806c69e2fed72
ep_bytes: e81d160000e974feffffcccccccccc8b
timestamp: 2010-05-10 21:06:08

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft Default Manager
InternalName: DefaultManager
LegalCopyright: © Microsoft Corporation.  All rights reserved.
OriginalFilename: DefMgr.exe
ProductName: Default Manager
FileVersion: 2.2.114.0
ProductVersion: 2.2.114.0
PrivateBuild: Built by MSNSTBLD on RR1BLDB111.
Translation: 0x0409 0x04b0

Tedy.384369 also known as:

MicroWorld-eScan	Gen:Variant.Tedy.384369
FireEye	Gen:Variant.Tedy.384369
Skyhigh	Artemis
McAfee	Artemis!306610B35C56
Arcabit	Trojan.Tedy.D5DD71
BitDefender	Gen:Variant.Tedy.384369
Emsisoft	Gen:Variant.Tedy.384369 (B)
VIPRE	Gen:Variant.Tedy.384369
MAX	malware (ai score=81)
GData	Gen:Variant.Tedy.384369
ALYac	Gen:Variant.Tedy.384369
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09IM23
MaxSecure	Trojan.Malware.219417703.susgen
DeepInstinct	MALICIOUS

How to remove Tedy.384369?

Tedy.384369 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X