Malware

Tedy.59784 information

Malware Removal

The Tedy.59784 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Tedy.59784 virus can do?

  • Presents an Authenticode digital signature
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Tedy.59784?


File Info:

name: 22C2E14E00905A4A3CEC.mlw
path: /opt/CAPEv2/storage/binaries/fa0a2dd22b93759ef3eb47dc6e8dd9fde4262a46b54a329ca32ec8f49f7f7171
crc32: DD5485EB
md5: 22c2e14e00905a4a3cec22016d889470
sha1: 667ef83d3048842ead3e51812cf1c3281efa9720
sha256: fa0a2dd22b93759ef3eb47dc6e8dd9fde4262a46b54a329ca32ec8f49f7f7171
sha512: e0e0a89718a567b421b11e618c872f9f98209c6dfeefb24648f5f9237cb8c49b5d3cfba32935890dea95d252c4f28d1464e905e673d4c4cacd4251b269072ae8
ssdeep: 49152:OvP5tmUi6AjW/MUSdGRf3/MA0vb/C+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9cT:Q0jxAZMAO++RYNAKvkTgXuquveY+W2o+
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T14EB55A02A6E48872D16219345DA6F60D6779BC60DA138F8B33543EDCBFF2781AD25336
sha3_384: 1c0001650d071fcd45af00eb0f29a634813e4100f97d3d21c470cdf22ea677894f8ac33ca0a69aca4775ec040fba6831
ep_bytes: 4883ec28e8370300004883c428e92afe
timestamp: 1970-04-14 09:36:10

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft Security Client Policy Configuration Tool
FileVersion: 4.13.17134.1 (WinBuild.160101.0800)
InternalName: ConfigSecurityPolicy.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: ConfigSecurityPolicy.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 4.13.17134.1
Translation: 0x0409 0x04b0

Tedy.59784 also known as:

LionicTrojan.Win32.Tedy.4!c
MicroWorld-eScanGen:Variant.Tedy.59784
FireEyeGen:Variant.Tedy.59784
McAfeeArtemis!22C2E14E0090
CylanceUnsafe
AlibabaVirus:Win32/RpcDcom.cbfb428e
CrowdStrikewin/malicious_confidence_70% (W)
CyrenW64/Agent.DVV.gen!Eldorado
ClamAVWin.Dropper.Vindor-9886634-0
BitDefenderGen:Variant.Tedy.59784
AvastWin64:Malware-gen
Ad-AwareGen:Variant.Tedy.59784
SophosGeneric ML PUA (PUA)
McAfee-GW-EditionBehavesLike.Win64.Generic.vm
EmsisoftGen:Variant.Tedy.59784 (B)
IkarusExploit.Win32.RpcDcom
GDataGen:Variant.Tedy.59784
MAXmalware (ai score=81)
GridinsoftRansom.Win64.Wacatac.sa
APEXMalicious
MicrosoftProgram:Win32/Wacapew.C!ml
CynetMalicious (score: 100)
ALYacGen:Variant.Tedy.59784
FortinetW64/Agent.6B27!tr
AVGWin64:Malware-gen

How to remove Tedy.59784?

Tedy.59784 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment