Tedy.60204 (B) removal tips

The Tedy.60204 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.60204 (B) virus can do?

Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Tedy.60204 (B)?


File Info:
name: 59708884EDE9F3A14973.mlw
path: /opt/CAPEv2/storage/binaries/6b0bdff36858eed81c65db09c0209391b0b1a635f8161d67518fa8b5d70f8b66
crc32: 545D81C3
md5: 59708884ede9f3a149733e5409a03186
sha1: 41eebfa1d8d981d0b60d9a04a76215aba10ac94d
sha256: 6b0bdff36858eed81c65db09c0209391b0b1a635f8161d67518fa8b5d70f8b66
sha512: 81b65cafd3f6c46f2a2d2c6b53f473eb1508d62df6b73ec45fd38c985714a7fe68effdbb668c211ed17fd3a36478330409cab4a1991bb341c245ce250eb497cb
ssdeep: 6144:Y66F7WVoUB8d1E6dqi4py5pkX/fQXAVu1a/fWYjF59w:BW7QV8Ey1pIhEa/fZ5Dw
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T129844B63F58544B0C522617016AE9732EA35F81E09614A5F2BBCDF742E38EB0373DA79
sha3_384: 85fcc17abf76417299324d943d74abe0bdb0877e6626792d99a24c79799cd54926d4416c8e918791b84d75abad475ed7
ep_bytes: e8cf020000e974feffff558bec8b4508
timestamp: 2020-12-09 13:07:54

Version Info:
CompanyName: Oracle Corporation
FileDescription: Java(TM) Platform SE binary
FileVersion: 8.0.2810.9
Full Version: 1.8.0_281-b09
InternalName: policytool
LegalCopyright: Copyright © 2020
OriginalFilename: policytool.exe
ProductName: Java(TM) Platform SE 8
ProductVersion: 8.0.2810.9
Translation: 0x0000 0x04b0

Tedy.60204 (B) also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.59708884ede9f3a1
McAfee	Artemis!59708884EDE9
Cyren	W32/Agent.DNK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Worm.Vindor-9886047-0
BitDefender	Gen:Variant.Tedy.60204
MicroWorld-eScan	Gen:Variant.Tedy.60204
Avast	Win32:VB-FBX
Emsisoft	Gen:Variant.Tedy.60204 (B)
DrWeb	Win32.HLLW.Autoruner.547
McAfee-GW-Edition	BehavesLike.Win32.CoinMiner.fh
Sophos	Generic ML PUA (PUA)
Ikarus	Olext.Win32
GData	Win32.Trojan.PSE.1964X0Z
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.3696146603
Yandex	Trojan.Agent!G5KtBqHhfG4
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/AutoRun.C939!tr
AVG	Win32:VB-FBX
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Tedy.60204 (B)?

Tedy.60204 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X