Categories: Malware

W32/Alman-C malicious file

The W32/Alman-C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What W32/Alman-C virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Executable file is packed/obfuscated with ASPack
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine W32/Alman-C?


File Info:
name: AB4370C64D5DAB942021.mlwpath: /opt/CAPEv2/storage/binaries/a1ea895c89710befb8a4817e11ae797f141ae48eb3776ea66319b6de098a63bbcrc32: B0B9E265md5: ab4370c64d5dab942021afe26f0d8a6fsha1: 735341c99cccd0e064d9ed1d111f08c723b5f099sha256: a1ea895c89710befb8a4817e11ae797f141ae48eb3776ea66319b6de098a63bbsha512: d725ed8e4641beab11b63005e6fc3f2098f4b8c4613cf89829ed470381c0c8878b1c874ee7af238c99b6c5696b029d2dee93a42b94d763dcde2ef06eabf27298ssdeep: 12288:8paRg2WL8Lk/ZfGpNuHQ2eeNKKZuJM8VADPaG7:eR2WL8LkhfJLMsuJMHPaG7type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T101D4E062271C0AC1DDFF15FCA8AF8DE188409D55E646159B32DEBAC358F3100ABAB753sha3_384: 525757ba728e64fab33cf764d99d9a0fd3e0869256613263b96b8eabb0ba921eb6c4c76cedf7e0b8f84829d529fcf511ep_bytes: 90908bc083f200525a83f00083c10083timestamp: 2004-12-17 22:02:32
Version Info:
CompanyName: TianTao CorporationFileDescription: Replacer Windows XP SP1 SP2 FilesFileVersion: 1.1.30.5InternalName: Replacer.exeLegalCopyright: (C) TianTao Corporation. All rights reserved.LegalTrademarks: T&T(Tiantao)(R)OriginalFilename: Replacer.exeProductName: Replacer Windows XP SP1 SP2 FilesProductVersion: 5.1.2600.2180Comments: 安静的替换系统文件 适用于Windows XP SP1 SP2Translation: 0x0804 0x03a8

W32/Alman-C also known as:

Bkav	W32.AcLuC.PE
Lionic	Virus.Win32.Alman.l0v8
DrWeb	Win32.Alman.1
MicroWorld-eScan	Win32.Almanahe.D
FireEye	Generic.mg.ab4370c64d5dab94
CAT-QuickHeal	W32.Almanahe.B
Skyhigh	BehavesLike.Win32.ObfuscatedPoly.jc
McAfee	W32/Almanahe.f.c
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Win32.Almanahe.D
Sangfor	Trojan.Win32.Alman.at
K7AntiVirus	Virus ( 00001b6e1 )
Alibaba	Virus:Win32/Alman.a1ae0da2
K7GW	Virus ( 00001b6e1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Win32.Almanahe.D
BitDefenderTheta	AI:FileInfector.3231077510
VirIT	Win32.Alman.B
Symantec	W32.Almanahe.B!inf
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Alman.NAB
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Alman-6
Kaspersky	Virus.Win32.Alman.b
BitDefender	Win32.Almanahe.D
NANO-Antivirus	Virus.Win32.Alman.xyevp
Avast	Win32:Alman [Inf]
Tencent	Virus.Win32.Magister.a
Emsisoft	Win32.Almanahe.D (B)
F-Secure	Malware.W32/Alman.BB
Baidu	Win32.Virus.Alman.a
Zillya	Virus.Alman.Win32.2
TrendMicro	PE_CORELINK.C-1
Sophos	W32/Alman-C
Ikarus	Virus.Win32.Virut
Jiangmin	Win32/Almana.c
Varist	W32/Alman.C
Avira	W32/Alman.BB
MAX	malware (ai score=100)
Antiy-AVL	Virus/Win32.Alman.b
Kingsoft	Worm.DLan.b.79872
Xcitium	Virus.Win32.Alman.A@18f6pd
Microsoft	Virus:Win32/Almanahe.B
ViRobot	Win32.Alman.B
ZoneAlarm	Virus.Win32.Alman.b
GData	Win32.Almanahe.D
Google	Detected
AhnLab-V3	Win32/Alman.C
VBA32	Virus.Win32.Alman.B
ALYac	Win32.Almanahe.D
TACHYON	Virus/W32.Alman.B
Cylance	unsafe
Panda	W32/Almanahe.C
TrendMicro-HouseCall	PE_CORELINK.C-1
Rising	Worm.Magistr.g (CLASSIC)
Yandex	Trojan.GenAsa!qX//7kzGGp4
MaxSecure	Virus.Alman.B
Fortinet	W32/Alman.B
AVG	Win32:Alman [Inf]
Cybereason	malicious.99cccd
DeepInstinct	MALICIOUS