Win32:MalOb-C [crypt]

[anual]

Hi all did a  boot scan on this laptop today and it came up with two things...both of them with this title Win32:MalOb-C [crypt]
I didn't know what to do....so they are in Virus Chest.
Please can someone tell me should I delete them now ? or what is the plan of action?
THANKS in advance

[cinchez]

U could try posting a HiJackThis Log^^
(www.filehippo.com/download_hijackthis/)^^

-AnimeLover^^

[Maxx_original]

can you post the names (and paths) of the detected samples?

[anual]

c: downloads .....setup-57d5ff9_02012.exe
c: downloads .....setup-83cd30_02012.exe

[Maxx_original]

pretty similar to names used by some fake AV programs.. is everything ok when the files are in the chest?

[anual]

seems ok....I installed malware bytes this afternoon...could it be something to do with that?

[anual]

i installed from here http://www.malwarebytes.org/

[Maxx_original]

it would not be caused by malware bytes... the fake AV programs come to the PC from some fishy websites (some of them were listed on http://cleanthe.net but this web seems to be not updated quite a long time)

[anual]

ok...so I'll just leave them in the chest for a while and check all keeps running smoothly? It's not my computer...Avast has always kept mine clean...hence, I don't know the procedure for these things when they come up  Thanks for your info so far

[Jake51]

I Just scanned with Malwarebytes and the same virus warning came up.  The recommended action is to "Move to chest", but it won'tr allow me to do it.   What do I do???  I also tried to "Repair" it, but that didn't work either.  Can somebody help me?

[Maxx_original]

isn't the file locked by MBAM at the moment?

[YoKenny]

@Jake51

Start your own topic by using NEW TOPIC in this area of the forum as you are topic hijacking and it will become very confusing for both the original poster (OP) whos topic this is and the helpers.

[shantry]

Hello everyone,

Did a scan of my hard drive today and the Win32:MalOb-C [crypt] virus was found wich is named Pav.exe.
I got this virus from Facebook, my inbox had a link to a video from one of my friends, i clicked it because it is a common thing for me to do, but nope was a virus.

Avast couldn't remove it, can only move to the Virus Chest. 

Will the virus cause any problems to my computer while in the chest? 
Can this virus be removed by other means?

Ryan.

[Jtaylor83]

Just what I thought. Facebook is full of malware (esp. the Koobface worm). It's best to stay away from Facebook and all social networking sites at all times.

And no, the malware is neutralized and stays inactive while it's in the virus chest.

[shantry]

Ya I know eh.

Apparently the virus created its own file in my program files (c://program files/personalantivirus), and when you open the file, it has an executable file named pav.exe

I just deleted the folder and it seemed to work.  I never tried it install the pav.exe so I guess it wasn't a problem.

Did a update of Avast, and full system scan and now its all clean.

Will be more wary of what I click on in facebook from now on.