I have Win32:MalOb-EK(Cryp) in my PC

Viruses and worms
1

Thank goodness a friend told me about avast! I have been cursed with this virus for 6 months, avast puts it safely in the virus chest but what happens when the chest is full ? Is there a way of deleting the daily growth of this virus with one click rather than deleting each individually ?

2
Is there a way of deleting the daily growth of this virus with one click rather than deleting each individually ?
daily growth ??? you mean you find malware in your computer every day ?

and there is no rush do delete…what if the file is a false Positive ?
so let the file say in chest for week or two before you do

Thank goodness a friend told me about avast!
did he also tell you about malwarebytes http://www.malwarebytes.org/
3

i could also add to try a boot scan and from there send anything avast finds to the chest.

http://www.schmahl.net/avastbootscan.php instructions on how to make a boot scan in avast. intructions for the new avast 6 is in a link in the text at the beginning.

good luck

4

Yes that is correct,it seems this virus cannot ever be removed but as its a virus it grows every hour within the computer. Yeaterday I deleted over a 100 of Win32MalOb-EK(crypt)in the chest and that is why I ask again "Is there a method for deleting this virus with one delete and not a 100 " Also “What happens if the virus was ignored for a month and the chest was totally filled with this virus ?” There would be an overflow, so what would happen? I can’t get rid of this virus, the only answer is to wipe out the hard disk and download Windows 7 again. I don’t care for that idea.

Mel

5

you seem to have a severe virus problem and need help from Essexboy

Follow this guide from our expert malware remover Essexboy
http://forum.avast.com/index.php?topic=53253.0
( post the logs here in this topic and not in the guide )

To avoid using multiple post with copy and paste you have to attach the log`s
Lower left corner: Additional Options > Attach ( Malwarebytes log / OTS log ) save OTS log as ANSI

Essexboy will look at the logs and help you when he arrive here later today…

6

Malob may also be a kind of spyware(first samples from the carperb family were detected as malob by avast) so if you had entered any credit card information into the online service, now it’s time to pay extra attention to any charges or strange activity.

7

To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.

Download OTS to your Desktop

[*]Close ALL OTHER PROGRAMS.
[*]Double-click on OTS.exe to start the program.
[*]Check the box that says Scan All Users
[*]Check the box that says 64 bit
[*]Under Additional Scans check the following:

Reg - Disabled MS Config Items
Reg - Drivers32
Reg - NetSvcs
Reg - SafeBoot Minimal
Reg - Shell Spawning
Evnt - EventViewer Logs (Last 10 Errors)
File - Lop Check

[*]Under the Custom Scan box paste this in


%USERPROFILE%..|smtmp;true;true;true /FP
%SYSTEMDRIVE%*.exe
/md5start
volsnap.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
%systemroot%*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
CREATERESTOREPOINT

[*]Now click the Run Scan button on the toolbar.
[*]Let it run unhindered until it finishes.
[*]When the scan is complete Notepad will open with the report file loaded in it.
[*]Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Please attach the log in your next post.

8

OK, Thankyou Essex Boy and others who replied. As for Malwarebytes, I have used it and the result was that every time avast! found 4 more virus’s following a scan than Malwarebytes so I decided to continue with avast and deleted Malwarebytes. Following your advice I have now set up regular boot scans together with the full avast scans.

My computer contains no information of relevance to anyone so I have no concerns about personal details. As a matter of interest the MalOb virus works to a timetable, this may a surprise and it attaches itself to every file and is then removed by avast to the chest

mscorsvwmgr.exe C windows.NET… 13.57
SaUpdatemgr.exe Prog files(x86) Ask.com 13.05
UpdateTaskmgr exe Prog files(x86) ask.com 13.05

The other day while it was scanning about 30 were pulled out by avast all timed at 9.30 !

Ok I’ll do some more scanning and see what I find
Mel