What is “Virus.Win32.Alman.B”?

The Virus.Win32.Alman.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virus.Win32.Alman.B virus can do?

• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine Virus.Win32.Alman.B?

File Info:
name: B966772CF3F4EE87FE33.mlw
path: /opt/CAPEv2/storage/binaries/66604b7bc145248ac91677d7272585c11d846f3b01d6e2368afaa3bea4e8d92a
crc32: 191968D0
md5: b966772cf3f4ee87fe33dfae58595a30
sha1: d4da67677758822b399fe49aa7620ef8e51dcb11
sha256: 66604b7bc145248ac91677d7272585c11d846f3b01d6e2368afaa3bea4e8d92a
sha512: 422056ad6f44e85252232fa9b7ff3c55a1795d5d34d26b4d1b93844b2f632198416a6d4cf70ccb397389a2dd24a3d7a3f9889f92dae1dc0f9e73f592b0dd7bcc
ssdeep: 3072:qtdeGnBLfOOwP9++OmBf1D+3nmVWTfOUBGrRzoI7h+aS1GD:r8BL2Oc8e1DInmV62UB6Rzo0naGD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C114BF12F947D41AED4287B21C74DA6E79247E3589807F873588BE17EA724C378E432B
sha3_384: a1b0acf00c3be53c295dc6f241e309b23ce031bcdd691724fb5ee9232bff7ffee80cecc85081388064c1abb55120b182
ep_bytes: 83f10083cb0083cb0090908bf6525a83
timestamp: 2013-03-15 05:11:30

Version Info:
Translation: 0x0804 0x04b0
CompanyName: RichTech Game Open Procedure
ProductName: RichTech
FileVersion: 1.00
ProductVersion: 1.00
InternalName: green
OriginalFilename: green.exe

Virus.Win32.Alman.B also known as:

How to remove Virus.Win32.Alman.B?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.