can't get rid of Win32:Qdownl[Trj]

I’ve been working on a couple of days to get rid of this trojan. :cry:
I have been using avast for a little under a year and it has caught around 5 viruses that I have successfully moved to the chest. This time though, I get the siren that i’ve been infected and when I try to move it to the chest, I get the following message:
“The process cannot access the file because it is being used by another process.”
So I scheduled a boot time scan, and selected the action “move all.”
After this, as soon as I went online with firefox, the siren went on again, so I repeated a boottime scan again, and this time I selected “delete all”. After the scan, I ran avast scan again with windows running. I ran adaware, spybot, kill2me, cwshredder and hsremove.
However the problem is still there.
The malware name is Win32:Qdownl[Trj]
Malware type: Trojan Horse

It states that the it is in “…Local Settings\Temporary Internet Files\Content IE5\QOVT6129\ibis-100[1].0000”
I tried to search for the folder QOVT6129 - but was unsuccessful.

If anyone has any advise I’d very much appreciate it…will check forum in a couple of hrs.

Thank you,
Jeevenze

"The process cannot access the file because it is being used by another process."
Windows protects files/processes in use (nice windows) the boot scan should have resolved the problem as nothing would have been in use.

Clear your IE browser cache (temporary internet files).
A little cleaning program to get rid of temp files, etc. may be of your to you - ClearProg, I like this one, there are others such as ccleaner.

This is most probably Adware-WebSearch:
http://www.virusbtn.com/perlbin/vgrep/vgrep.cgi?terms=Win32%3AQdownl&product=1

if problem is not solved by clearing out the Temp.Int.Files (including OFFLINE-files), please post a hijackthis-Log for diagnosis; see link “VirusRemoval” below in my sig for link

did you UPDATE Ad-Aware & SPYBOT before scanning with them ?

you might also try a thorough+archive scan with avast in SAFEMODE (F8-Boot)

:wink:

I have cleared the temp files.
I have not yet run avast in safe mode, I will do that and see if that solves the prob.

Jeevenze

Running avast in safe mode appears to have taken care of the trojan.

Jeevenze