How to remove “Tedy.60620 (B)”?

The Tedy.60620 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.60620 (B) virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Tedy.60620 (B)?


File Info:
name: 26B9DA6AA1CCDE639964.mlw
path: /opt/CAPEv2/storage/binaries/22d83d7fe702f4228dd5162d2bccd57693f2e7b3ec9b18bf29ad09ac25c17460
crc32: 783EF7BD
md5: 26b9da6aa1ccde6399642262bdf78cec
sha1: 37350ab1b3b8d70648d4c0d41f1a7cd5eb5651dd
sha256: 22d83d7fe702f4228dd5162d2bccd57693f2e7b3ec9b18bf29ad09ac25c17460
sha512: d1a866f9e2ad5d43ea536c8c5be109bdc0dae77b2e09a5baaf903cad5d7603d8e5b6c15775b5ad632e66a7d46c46918ef84beaab778cac593d9d0588e8f872e0
ssdeep: 49152:H6kenWOv9M4LfU3ITeq/hKPgssSt2gBBQCKMN7pXRKNnp3:HXy9Neq/hv7Stt9Nng
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T17EE54A12A7F58465F1B72A709DB5A2305A367D611E36C54FB298331E4D33AC0AE39B33
sha3_384: fbddf9bf4401f9b9ef029b6b3a635379ddd6cfd14dfa28b77809ac3173143118ec3916e7681464827610400f293b8ea9
ep_bytes: 4883ec28e87b0500004883c428e97afe
timestamp: 2020-12-09 14:24:12

Version Info:
CompanyName: Oracle Corporation
FileDescription: Java(TM) Web Start Launcher
FileVersion: 11.281.2.09
Full Version: 11.281.2.09
InternalName: Java(TM) Web Start Launcher
LegalCopyright: Copyright © 2020
OriginalFilename: javaws.exe
ProductName: Java(TM) Platform SE 8 U281
ProductVersion: 8.0.2810.9
Translation: 0x0000 0x04b0

Tedy.60620 (B) also known as:

MicroWorld-eScan	Gen:Variant.Tedy.60620
FireEye	Gen:Variant.Tedy.60620
ALYac	Gen:Variant.Tedy.60620
Cyren	W64/Mikey.BS.gen!Eldorado
TrendMicro-HouseCall	TROJ_GEN.R03BH0CL721
ClamAV	Win.Dropper.Ausiv-9876732-0
BitDefender	Gen:Variant.Tedy.60620
Avast	Win64:Malware-gen
Ad-Aware	Gen:Variant.Tedy.60620
Emsisoft	Gen:Variant.Tedy.60620 (B)
McAfee-GW-Edition	Artemis
Ikarus	Trojan.Agent
Jiangmin	Packed.Krap.gvxj
MaxSecure	Trojan.Malware.121218.susgen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Tedy.60620
Cynet	Malicious (score: 100)
McAfee	Artemis!26B9DA6AA1CC
MAX	malware (ai score=80)
APEX	Malicious
SentinelOne	Static AI – Suspicious PE
Fortinet	W64/Mikey.1298!tr
AVG	Win64:Malware-gen
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Tedy.60620 (B)?

Tedy.60620 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X