Btw: the spectrum of malware covered by Win32:MalOb consists of fake antiviruses, fake codecs, spam engines etc.
What to imagine behind Win32:MalOb [Cryp] https://blog.avast.com/2009/07/29/what-to-imagine-behind-win32malob-cryp/
How do I remove all parts of it ? Avast only moves the A0117879.DLL to the virus chest
have you run a quick scan with Malwarebytes for a second opinion ?