Tedy.4691 malicious file

The Tedy.4691 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.4691 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Tedy.4691?


File Info:
name: 492CBC476DF8EFAA2F5B.mlw
path: /opt/CAPEv2/storage/binaries/2fefddb3d28b5890769b389648fabeb46a8b29cf892ed0cad9133954ea31ee76
crc32: 798BBF7A
md5: 492cbc476df8efaa2f5b2b08aedc65e7
sha1: fc907062a39bcdb173878b71893a05573f93165e
sha256: 2fefddb3d28b5890769b389648fabeb46a8b29cf892ed0cad9133954ea31ee76
sha512: 994ec52323f659f646ec9511cb5cc18df520434e64e8eedc1ccf06db66cdb5a47f6e01be7caf7aee5ed06e2a2a6dcea74a4b2f547ddcd32da5f6be8401b681bf
ssdeep: 768:FKH2tnZ1XCChfqaV6Y+LaGCWH1vNv4oO:F4unZ15fqaV6daGCWH7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18B53CB42B3E88659F2F63B38597747601B76BC92ED35C35E1A50B98E2C70F509E24B32
sha3_384: ba2dd9dee930c2e579d8ff17eec1db0ee5b479ae5beb9f109f01687c4f5f86a3a5a19f82f0bcf0ef51d861a20e5af025
ep_bytes: 683000010068d0214000e8adffffff50
timestamp: 2021-02-04 07:46:22

Version Info:
CompanyName: New Boundary Technologies, Inc.
FileDescription: PrismXL Package
FileVersion: 18.0.0.134
InternalName: PrismXL Package
LegalCopyright: © 2020 New Boundary Technologies
OriginalFilename: PACKAGE.EXE
ProductName: New Boundary Software Family
ProductVersion: 18.0.0.134
SpecialBuild: 1
Translation: 0x040c 0x04b0

Tedy.4691 also known as:

Lionic	Trojan.Win32.Tedy.4!c
MicroWorld-eScan	Gen:Variant.Tedy.4691
FireEye	Gen:Variant.Tedy.4691
ALYac	Gen:Variant.Tedy.4691
Cylance	Unsafe
Alibaba	TrojanDropper:Win32/InstallRex.1237e0ca
Symantec	ML.Attribute.HighConfidence
Zoner	Probably Heur.ExeHeaderP
TrendMicro-HouseCall	TROJ_GEN.R03BH09KL21
ClamAV	Win.Adware.00528d-6840349-0
BitDefender	Gen:Variant.Tedy.4691
Avast	FileRepMalware
Ad-Aware	Gen:Variant.Tedy.4691
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Virut.kt
Emsisoft	Gen:Variant.Tedy.4691 (B)
Ikarus	AdWare.InstallRex
GData	Gen:Variant.Tedy.4691
Avira	TR/Dropper.Gen
Gridinsoft	Ransom.Win32.Wacatac.sa
ViRobot	Adware.Tedy.63488
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
Acronis	suspicious
McAfee	Artemis!492CBC476DF8
VBA32	Adware.StartSurf
APEX	Malicious
Rising	Trojan.Generic@ML.90 (RDML:6ySHYZN0og/LGGK4D1zklQ)
MAX	malware (ai score=88)
Fortinet	Riskware/Application
AVG	FileRepMalware
MaxSecure	Trojan.Malware.300983.susgen

How to remove Tedy.4691?

Tedy.4691 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X