Trojan.TedyFC.S28419698 (file analysis)

The Trojan.TedyFC.S28419698 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.TedyFC.S28419698 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Trojan.TedyFC.S28419698?


File Info:
name: A138F98775D1004A9B70.mlw
path: /opt/CAPEv2/storage/binaries/78aed462680c3055f6bf985efb31f6935019a3818b8f1da3f01658ff259b41ea
crc32: 3FFDC408
md5: a138f98775d1004a9b70ff02ff62b03f
sha1: a2356de3eb561a2f11f81ec0212ca0247c54844f
sha256: 78aed462680c3055f6bf985efb31f6935019a3818b8f1da3f01658ff259b41ea
sha512: 9240fd1f9e81412306b36c736f1783fd2e83c0ff48a9eaf1946eafc2b3c451bb741e2741301a35fd8e34bc86b31bf76a8dc0693893bc90cf38f1cc2f62211298
ssdeep: 1536:GVokWfq7ACjFkjGGCk2i/QRQnTId2lIgJGrkb80zGwCmQERcRK335u25EGtUlLig:EGVC2W2lFUrkb80dmoxfm
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E7D3B66777FD3414F7BB7AB56EF7B0219A3BB8885632E12E2644502F04B4E04A631772
sha3_384: cb9c39abf4617340089d157e8617b9e5e8a5ee0d2dee2c6e2344e0542d1a9e549d61ca266f007f2674d42334d0d9722e
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-05-09 20:56:36

Version Info:
Translation: 0x0000 0x04b0
CompanyName: Inclusion System
FileDescription:  
FileVersion: 4.21.0.0329
InternalName: Everest.WindowsServices.YearEndTaxService.exe
LegalCopyright: Copyright (c) Inclusion System, 2019
OriginalFilename: Everest.WindowsServices.YearEndTaxService.exe
ProductName: Everest
ProductVersion: 4.21.0.0329
Assembly Version: 4.21.0.329

Trojan.TedyFC.S28419698 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
CAT-QuickHeal	Trojan.TedyFC.S28419698
Skyhigh	GenericRXQR-IU!A138F98775D1
McAfee	GenericRXQR-IU!A138F98775D1
Cylance	unsafe
Symantec	Trojan.Gen.MBT
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Malwarex-9958024-0
Avast	Win32:MalwareX-gen [Trj]
Sophos	Mal/Generic-R
Antiy-AVL	Trojan/Win32.SGeneric
Xcitium	Malware@#1pkpntgis47ot
Microsoft	Trojan:Win32/Wacatac.B!ml
ViRobot	Trojan.Win.Z.Agent.131072.IJC
Google	Detected
AhnLab-V3	Trojan/Win.IU.C4970089
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	TROJ_GEN.R002H0CA924
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.184220516.susgen
Fortinet	PossibleThreat
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan.TedyFC.S28419698?

Trojan.TedyFC.S28419698 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X