win32\alman AND win32\small-MIJ [trj]

Viruses and worms
1

I have avast! 4.8 pro installed on 20 computers. Avast! is detecting win32\alman and win32\small-MIJ [trj] on just about all of them.

Any clue how to get rid of these?

Thanks in advance,
Chad

2

What is yr network?
Is this an intranet? If so, what are yr connections?
Should this be in a different thread? Perhaps under avast! 4 Server Edition or avast! 4 WHS?
We need as much information as possible.

We need to know what the files are in case this is a False Positive matter. But you appear to have a net worm.

win32\alman
http://www.f-secure.com/v-descs/virus_w32_alman_a.shtml

note that you must take down yr network until problem is fixed.

can you run your AV or other utilities offline from a central server and have all end points for yr 20 computers covered?

Someone more expert at this situation will be along shortly once you provide more information (save me from guessing question and answer)

here is another instance of this kind of infection
http://forum.kaspersky.com/lofiversion/index.php/t64357.html

3

Alman can be cured with v5, v4 unfortunately can’t repair the binaries…

4

There you have it buvoir. I guess it is that time to upgrade yr system.

Also, this is an old virus that should never be on yr system if you regular update your programs, apps, etc…yr security, yr network.

5

Ok, thanks for the answers.

I cannot upgrade to internet securities 5 because you can only get 10 licenses according to this website.

The plan is to disconnect all the workstations until I can clean each one separately.

I found a single purpose virus remover for alman. Anyone heard of these or know they will work

rmalman.exe, rmalman.nt

6

I know nothing about those 2 files but perhaps someone else knows something.

7

Prevx file info
http://www.prevx.com/filenames/X2179809973041513733-X1/RMALMAN.EXE.html