About “Tedy.43956” infection

The Tedy.43956 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.43956 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Tedy.43956?


File Info:
name: 9AAF474BB4AA8B977F09.mlw
path: /opt/CAPEv2/storage/binaries/fc785b9a218b66f6ffb12a61a9360c884645bbdb843a2fd6c871b616f7817c04
crc32: ADCD3C47
md5: 9aaf474bb4aa8b977f095e23d761635e
sha1: d6cc0145daf4d0ceb39f8cda2e5063368a4e2400
sha256: fc785b9a218b66f6ffb12a61a9360c884645bbdb843a2fd6c871b616f7817c04
sha512: 10884423ff64a4afba125a3a6ece7ffd7da69ead51d2693877f5df83b600ee704000686235f852e9bd1181fddd76452ae6fbdbf13b625a0111c957d4e689abee
ssdeep: 6144:V+8DV+8DV+8DV+8DV+8DV+8DV+8DZpc3T8T6VH76l:kUkUkUkUkUkUkUMjC6V2l
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T141A46D9B9A7240FCC153813501FEAB3A777BBC221265733F17A0C7652F60B64AD2AD25
sha3_384: f92689fd64103d12895963f76f6473361d6941d61a4cd243dddf9387fce769506bca20609ecfebaa64d7d2130121aa2c
ep_bytes: 4883ec28488d0df56b0000e820660000
timestamp: 2028-09-17 09:20:52

Version Info:
0: [No Data]

Tedy.43956 also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Worm.Vindor-9886047-0
McAfee	RDN/Generic.dx
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.B
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Virus:Win32/Fakefire.9ae3fd76
Cyren	W64/Autorun.EU.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Tedy.43956
MicroWorld-eScan	Gen:Variant.Tedy.43956
Avast	Win32:VB-FBX
Ad-Aware	Gen:Variant.Tedy.43956
Emsisoft	Gen:Variant.Tedy.43956 (B)
McAfee-GW-Edition	BehavesLike.Win64.RAHack.gm
FireEye	Gen:Variant.Tedy.43956
Sophos	ML/PE-A
GData	Gen:Variant.Tedy.43956
Gridinsoft	Ransom.Win64.Wacatac.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Gen:Variant.Tedy.43956
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.3696146603
TrendMicro-HouseCall	TROJ_GEN.R002H06L821
Ikarus	Virus.Win32.Fakefire
Fortinet	W32/PossibleThreat
AVG	Win32:VB-FBX

How to remove Tedy.43956?

Tedy.43956 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X