Should I remove “Tedy.431311”?

The Tedy.431311 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.431311 virus can do?

Authenticode signature is invalid
Binary file triggered YARA rule

How to determine Tedy.431311?


File Info:
name: E89F10770A3F6FB80B3D.mlw
path: /opt/CAPEv2/storage/binaries/b0107061b284490440e13605a1b5f8e4e48f2ac9070190d01ba312e85109cb9d
crc32: DDFBFBB9
md5: e89f10770a3f6fb80b3d68c53bcdb14b
sha1: dbf6640205985d642eb57b243ec19608578d7291
sha256: b0107061b284490440e13605a1b5f8e4e48f2ac9070190d01ba312e85109cb9d
sha512: aad98c4146294d607848105a212d7ab03849935f87987c79ab1f16dc5b30f45c54640a0235ddfd23f48b40d3895a4a7f9296a6d2299e5146daeae02720eeeeb9
ssdeep: 6144:QHsG4AAPPtP9ysW+qKoYE4karKhkkkYv64oAOEpqR9Sf:Qs5PtP9sWoYE4kgKA+pqu
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D6847C01B6E6C072E1BB16B02C39AF61497DBD600BA4C5DF63941A6F0D31ED16E31F6A
sha3_384: a3d20269cf8ee57ee09e148157f03baa950a43b5d06ba7c0a3e8122b65d8dbab1b7f777c745e88ddf1093b9affcabb0f
ep_bytes: 558bec837d0c017505e801090000ff75
timestamp: 2023-08-31 12:21:27

Version Info:
0: [No Data]

Tedy.431311 also known as:

Lionic	Trojan.Win32.Cobalt.a!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Tedy.431311
FireEye	Gen:Variant.Tedy.431311
Skyhigh	BehavesLike.Win32.BadFile.fh
ALYac	Gen:Variant.Tedy.431311
Cylance	unsafe
Sangfor	Downloader.Win32.Cobalt.Va5l
Alibaba	TrojanDownloader:Win32/Cobalt.8a2e1b7e
BitDefenderTheta	Gen:NN.ZedlaF.36802.xu4@aWXoBfki
Symantec	ML.Attribute.HighConfidence
Kaspersky	Trojan-Downloader.Win32.Cobalt.aic
BitDefender	Gen:Variant.Tedy.431311
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/AD.Swrort.njjvz
VIPRE	Gen:Variant.Tedy.431311
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Tedy.431311 (B)
Avira	TR/AD.Swrort.njjvz
Antiy-AVL	Trojan[Downloader]/Win32.Cobalt
Arcabit	Trojan.Tedy.D694CF
ZoneAlarm	Trojan-Downloader.Win32.Cobalt.aic
GData	Gen:Variant.Tedy.431311
Cynet	Malicious (score: 100)
McAfee	Artemis!E89F10770A3F
MAX	malware (ai score=83)
Panda	Trj/Chgt.AC
Rising	Trojan.Generic@AI.90 (RDML:963RM6tUZRwImvfXGuugjw)
SentinelOne	Static AI – Suspicious PE
DeepInstinct	MALICIOUS

How to remove Tedy.431311?

Tedy.431311 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X