Malware

W32/Alman-C removal instruction

Malware Removal

The W32/Alman-C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What W32/Alman-C virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid

How to determine W32/Alman-C?



File Info:

name: AB677A9A462C2FD6C7E7.mlw
path: /opt/CAPEv2/storage/binaries/d13f82474411a75ecaec4c8a3fedd77d441504d6408d69d01a3073d85f21a274
crc32: 9B983B7A
md5: ab677a9a462c2fd6c7e76e2ea701ff50
sha1: 082ae557beccd4d12a1d60dd07d66860b377372b
sha256: d13f82474411a75ecaec4c8a3fedd77d441504d6408d69d01a3073d85f21a274
sha512: 7b6a9f4f5ee81f8d5cb8563621bf0b95d6449559b727e7361c21ae800d4367abc441aa029a093358c2ceab7f25fd06b17a1df331c98a1db5b5ece0f2b881df1b
ssdeep: 6144:JkoPUoK3o8vkJm5z2pa0OOEEM4wqLy0HBGxjGXBoPBTn3iypKBTIFV89agdKt0zL:JXKl+Eue0+jGXBWhnQOPEO0PaGl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E325B093BF43244AD6D94E300CFF53176326A3619A1393A73A04AD65CBF22D36DC66C9
sha3_384: ad1d1549d20354c5ac6f6817534f47b4c3186c49f933ed9baeff5d71a9e100a39549b2d2486db8ad8600e5ce31230d21
ep_bytes: 90515983f30083f3009083eb00525a53
timestamp: 2009-03-04 10:17:30


Version Info:

Comments: abc.zxip.com
CompanyName: abc.zxip.com
FileDescription: 双扣游戏客户端
FileVersion: 8, 0, 8, 8
InternalName: ShuangKou.exe
LegalCopyright: abc.zxip.com保留所有权利。
OriginalFilename: ShuangKou.exe
ProductName: 双扣游戏客户端
ProductVersion: 8, 0, 8, 8
Translation: 0x0804 0x03a8

W32/Alman-C also known as:

BkavW32.AcLuC.PE
LionicVirus.Win32.Alman.n!c
MicroWorld-eScanWin32.Almanahe.D
FireEyeGeneric.mg.ab677a9a462c2fd6
CAT-QuickHealW32.Almanahe.B
SkyhighW32/Almanahe.f.c
McAfeeW32/Almanahe.f.c
MalwarebytesGeneric.Malware.AI.DDS
ZillyaVirus.Alman.Win32.2
SangforVirus.Win32.Alman.Vucs
K7AntiVirusVirus ( 00001b6e1 )
AlibabaVirus:Win32/Alman.d83a6247
K7GWVirus ( 00001b6e1 )
Cybereasonmalicious.a462c2
BaiduWin32.Virus.Alman.a
VirITWin32.Alman.B
SymantecW32.Almanahe.B!inf
Elasticmalicious (high confidence)
ESET-NOD32Win32/Alman.NAB
APEXMalicious
TrendMicro-HouseCallPE_CORELINK.C-1
AvastWin32:Alman [Inf]
ClamAVWin.Trojan.Alman-5
KasperskyVirus.Win32.Alman.b
BitDefenderWin32.Almanahe.D
NANO-AntivirusVirus.Win32.Alman.xyevp
TencentVirus.Win32.Magister.a
EmsisoftWin32.Almanahe.D (B)
GoogleDetected
F-SecureMalware.W32/Alman.BB
DrWebWin32.Alman.1
VIPREWin32.Almanahe.D
TrendMicroPE_CORELINK.C-1
SophosW32/Alman-C
IkarusVirus.Alman
JiangminWin32/Almana.c
VaristW32/Alman.C
AviraW32/Alman.BB
MAXmalware (ai score=100)
Antiy-AVLVirus/Win32.Alman.b
KingsoftWorm.DLan.b.79872
MicrosoftVirus:Win32/Almanahe.B
XcitiumVirus.Win32.Alman.A@18f6pd
ArcabitWin32.Almanahe.D
ViRobotWin32.Alman.B
ZoneAlarmVirus.Win32.Alman.b
GDataWin32.Almanahe.D
AhnLab-V3Win32/Alman.C
BitDefenderThetaAI:FileInfector.3231077510
ALYacWin32.Almanahe.D
TACHYONVirus/W32.Alman.B
VBA32Virus.Win32.Alman.B
Cylanceunsafe
PandaW32/Almanahe.C
RisingWorm.Magistr.g (CLASSIC)
YandexWin32.Alman.B
MaxSecureVirus.Alman.B
FortinetW32/Alman.B
AVGWin32:Alman [Inf]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (W)
alibabacloudVirus:Win/Alman.NAB

How to remove W32/Alman-C?

W32/Alman-C removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment