What to do with this threat?

Avast Free Antivirus / Premium Security
1

Here is a screenshot of whats going on.

http://i30.photobucket.com/albums/c327/caisha_/Untitled-2.png

When I tried to move it to the vault it says action denied and it also gives me an error for any other action that I try to do. Do I just need to delete it?

Thanks!

2

Schedule a boot-time scan (if you don’t have a 64bit OS) and that should get round the access denied as before windows starts, it shouldn’t be in use. Once the alert happens in the boot-time scan send it to the chest.

However, before you do that, what is the full path and file name, check the report file for the scan you did and copy and paste the details of the alert.

Do you know what this file is for (faerie solitaire oberon-wt.exe) ?

3

No I have no idea what this file is for.

4

http://i30.photobucket.com/albums/c327/caisha_/2-1.png

Theres the path name.

5

Game (Faerie Solatire) from Oberon media
http://corp.oberon-media.com/

6

Maybe is a False Positive. Send this file to virus total…

7

How do I do that?

8

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

  • avast5 - Create a folder called Suspect in the [b]C:[/b] drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect* That will stop the File System Shield scanning any file you put in that folder. Now enter the chest again and Extract the file to the Suspect folder and upload it to VT.
9

I got the same detection in the same file as the OP.

here is the virus total result
http://www.virustotal.com/analisis/33e4b29e1b6bef0aa914ee88b8dc4f92d508fa6cc619dab668d51d91d030ac6c-1273781637

It’s on an an almost out of the box HP laptop.
I did install some dodgy stuff a few hours before running the scan. >:(

So is this a false positive?