Trojan

Should I remove “Trojan:MSIL/Tedy.NC!MTB”?

Malware Removal

The Trojan:MSIL/Tedy.NC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/Tedy.NC!MTB virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine Trojan:MSIL/Tedy.NC!MTB?



File Info:

name: 2407358E9839DBD2A9A5.mlw
path: /opt/CAPEv2/storage/binaries/7a10289273f530f32f979d7a7ceed4daf4e5e0952331a1126b06ec14ddf74d6f
crc32: 9A5A5F4E
md5: 2407358e9839dbd2a9a541ba205f666d
sha1: 43254539b6de5c623187bcf83733e070c119dca6
sha256: 7a10289273f530f32f979d7a7ceed4daf4e5e0952331a1126b06ec14ddf74d6f
sha512: c550243d8b1698c66b86e58174654bb41917ec18d8e265eac9b574977b3ad71bca3ea14a816803093e3f12d9925352272e1a40a475ffa745505cac86cb17536f
ssdeep: 384:menQXacRmWZhYF+7U/OClpB+x6wvtSz1tPQojMsWol:TnQXxi/O++ViZMsWol
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1A1620929A3F28376CD5C0B3A1553A71117708E449A53AB6F4FEC747F6CB37884B226A0
sha3_384: 990304adfb7543ad2a52688cbcd0cff5e4f29d490834d7b28787de655789e81eb5b1d2cc90b666a9f4b4c287c7994151
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-07-18 12:19:09


Version Info:

Translation: 0x0000 0x04b0
FileDescription: Rbh
FileVersion: 1.0.0.0
InternalName: Rbh.dll
LegalCopyright: Copyright ©  2019
OriginalFilename: Rbh.dll
ProductName: Rbh
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan:MSIL/Tedy.NC!MTB also known as:

LionicTrojan.Win32.Generic.miOe
Elasticmalicious (moderate confidence)
MicroWorld-eScanGen:Variant.MSILHeracles.133986
FireEyeGen:Variant.MSILHeracles.133986
SkyhighRDN/Generic BackDoor
McAfeeRDN/Generic BackDoor
Cylanceunsafe
ZillyaTrojan.Bladabindi.Win32.128940
SangforBackdoor.Msil.Bladabindi.Vn6f
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Bladabindi.ac833f8f
K7GWTrojan ( 005595811 )
K7AntiVirusTrojan ( 005595811 )
ArcabitTrojan.MSILHeracles.D20B62
SymantecBackdoor.Ratenjay
ESET-NOD32a variant of MSIL/Bladabindi.LO
CynetMalicious (score: 99)
BitDefenderGen:Variant.MSILHeracles.133986
AvastWin32:TrojanX-gen [Trj]
TencentMalware.Win32.Gencirc.13b7f211
EmsisoftGen:Variant.MSILHeracles.133986 (B)
F-SecureHeuristic.HEUR/AGEN.1300123
DrWebBackDoor.BladabindiNET.17
VIPREGen:Variant.MSILHeracles.133986
TrendMicroTROJ_GEN.R06BC0PLF23
SophosMal/Generic-S
WebrootW32.Trojan.Gen
VaristW32/MSIL_Bladabindi.GX.ge!Eldorado
AviraHEUR/AGEN.1300123
Antiy-AVLTrojan/MSIL.Bladabindi
Kingsoftmalware.kb.c.931
MicrosoftTrojan:MSIL/Tedy.NC!MTB
ViRobotTrojan.Win32.Z.Bladabindi.15360
GDataGen:Variant.MSILHeracles.133986
GoogleDetected
AhnLab-V3Malware/Win32.RL_Generic.C4363580
VBA32Backdoor.BladabindiNET
ALYacGen:Variant.MSILHeracles.133986
MAXmalware (ai score=85)
MalwarebytesMalware.AI.2513433249
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R06BC0PLF23
YandexTrojan.Igent.bVFW49.62
IkarusBackdoor.MSIL.Bladabindi
MaxSecureTrojan.Malware.116342597.susgen
FortinetMSIL/Bladabindi.LO!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Trojan:MSIL/Tedy.NC!MTB?

Trojan:MSIL/Tedy.NC!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment