Should I remove “Tedy.59903”?

The Tedy.59903 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.59903 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Tedy.59903?


File Info:
name: 0EBB65A363677B81602E.mlw
path: /opt/CAPEv2/storage/binaries/aa479d8dcbcc50adb1e7fe0a95fa3e6100ce3b0615641736b97c769c0fe1bc6d
crc32: 55A449D4
md5: 0ebb65a363677b81602ef34dc52252ce
sha1: cc5c84e590d5142a7923a038044c3d145d085e96
sha256: aa479d8dcbcc50adb1e7fe0a95fa3e6100ce3b0615641736b97c769c0fe1bc6d
sha512: e580488ab14e4e3d9ed8a830b24c04bcc3b2a837a34ead2456fb189e16869b30f49f9411137b525359502c547f466c12cf52a82a5bdd05a374eb6bb1403fb9f7
ssdeep: 6144:ud1E6dqi4py5K4QvTyaJFvlP1jgTZPmRFJs0ug1MOcKfi:gEy12Vjm0s0udOs
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T104548E1272A090F5D493507489FA9632977ABC72033447CF27A4F7A91F727D16E3A722
sha3_384: d9cd98d5e8c2438b339e5badcc0c99cd1ebd5abff95e07b08c0a2aba6a809415dd5d8796f581f7efb9f05c2a25453ff6
ep_bytes: cd21b8014ccd21546869732070726f67
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Tedy.59903 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Tedy.59903
McAfee	RDN/Generic.dx
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.363677
Cyren	W64/Autorun.EN.gen!Eldorado
ClamAV	Win.Malware.Dqan-9885907-0
BitDefender	Gen:Variant.Tedy.59903
Avast	Win64:Evo-gen [Susp]
Ad-Aware	Gen:Variant.Tedy.59903
Sophos	ML/PE-A
DrWeb	Win32.HLLW.Autoruner.547
McAfee-GW-Edition	RDN/Generic.dx
FireEye	Gen:Variant.Tedy.59903
Emsisoft	Gen:Variant.Tedy.59903 (B)
GData	Gen:Variant.Tedy.59903
Jiangmin	Packed.Krap.gvxw
Antiy-AVL	Trojan/Generic.ASMalwS.34DC449
Arcabit	Trojan.Tedy.DE9FF
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R454343
BitDefenderTheta	AI:Packer.DFF53E5D1C
ALYac	Gen:Variant.Tedy.59903
MAX	malware (ai score=82)
Malwarebytes	Malware.AI.3696146603
Rising	Worm.VB!1.DA41 (CLASSIC)
Ikarus	Olext.Win32
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Agent.2581!tr
AVG	Win64:Evo-gen [Susp]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Tedy.59903?

Tedy.59903 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X