What is “Tedy.61167”?

The Tedy.61167 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Tedy.61167 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Tedy.61167?


File Info:
name: 453268A69D143AF3BF26.mlw
path: /opt/CAPEv2/storage/binaries/2240c581b0abd89e92b6ff14ceab82a5b4029c391b3fe4e16a7c7f15666faaff
crc32: 20862F40
md5: 453268a69d143af3bf26941564b12b23
sha1: 9be537db16599ff1c4edf883615b3d39ba925daf
sha256: 2240c581b0abd89e92b6ff14ceab82a5b4029c391b3fe4e16a7c7f15666faaff
sha512: 029d749d02b706906637416ad760b7306f3f94f7daa541e57165d1de65a85e71baf443007d2173592e7cdd3d06c0d99a84faa024eb1ce8dd9c47c0a8cb22d085
ssdeep: 24576:1Lcz54GXHJRnJYdHLcpLcz54GXHJRnJYd:1gzHpagpgzHp
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1EA15AE027AC088B7D29342304ABBFBB56579FD711A61D70F2398EE1E2D353817629727
sha3_384: b0f0465576e2267aa08a2998485d04ab9cba98b7606e29420893684f934a0a842b227a0bef29871cc4fdfb16d713dda6
ep_bytes: 4883ec28488d0d150a0000e8e0030000
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Tedy.61167 also known as:

Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
MicroWorld-eScan	Gen:Variant.Tedy.61167
FireEye	Generic.mg.453268a69d143af3
McAfee	Artemis!453268A69D14
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Arcabit	Trojan.Tedy.DEEEF
Cyren	W64/Blackie.AQ.gen!Eldorado
TrendMicro-HouseCall	TROJ_GEN.R03BC0WL921
Cynet	Malicious (score: 100)
Kaspersky	UDS:Worm.Win32.AutoRun.vx
BitDefender	Gen:Variant.Tedy.61167
Avast	Win32:VB-FBX
Ad-Aware	Gen:Variant.Tedy.61167
Sophos	Generic ML PUA (PUA)
Baidu	Win32.Trojan.VB.t
TrendMicro	TROJ_GEN.R03BC0WL921
McAfee-GW-Edition	BehavesLike.Win64.Generic.dh
Emsisoft	Gen:Variant.Tedy.61167 (B)
Ikarus	Trojan.Autoruner
MaxSecure	Trojan.Malware.121218.susgen
Antiy-AVL	Trojan/Generic.ASMalwS.347F43A
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Tedy.61167
AhnLab-V3	Malware/Win.Generic.R456763
ALYac	Gen:Variant.Tedy.61167
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.2797890020
Rising	Worm.VB!1.DA3E (CLASSIC)
SentinelOne	Static AI – Suspicious PE
Fortinet	W64/Blackie.AQ!tr
AVG	Win32:VB-FBX
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Tedy.61167?

Tedy.61167 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X