Help Needed with Java:Downloader-CQ [Trj]

Hi 1st post here so il try to explain the best i can.

I scanned my laptop with avast free edition and it did not find any problems so i thought id do a bootime scan to be on the safeside. I did the scan and it found a virus Java:Downloader-CQ [Trj] in the java cache. So i try to put it into the chest but it woul not let me move it over so i restarted laptop still no luck. so i decided propbably not the best idea to unistall avast so i did and i started the 20 day trile wich come with the free version. I did another boot time scan and the same virus came up by now it in a different file location it is in C:\Windows\Temp_avast_\unp106487983.tmp however this time i was able to move it the chest.

Now i dont know what to do delete\repair\ and im worried about what its done or doing to my laptop. has it infect avast itself?

Any ideas on what i should do?
Thanks in advance Gtank

It might be as simple as cleaning the java cache directory, see
hxxp://java.com/en/download/help/cache_virus.xml
" From the Start button, select Control Panel.
In the Control Panel, open the Java Control Panel.
Click on Settings button under Temporary Internet Files.
Click Delete Files button at the Temporary Files Settings window.
Click on OK button at confirmation dialog.
"
O wait, it’s already in the viruschest. Unless you extract it from the chest, it won’t do harm any more. You need to undertake no action.

Regards,

Hi thanks for your reply.

I have cleared the cache. Another thing that is abit wierd is that when i follow the file path Windows\Temp_Avast_ there is a file called Webshlock it is a txt file. i had a look on this forum to see if anyone else has come across the file and apparantly it is a virus but im not 100% sure what it is.

Any help would be greatly apprieciated.

GTank

Please attach your logs.
http://forum.avast.com/index.php?topic=53253.0

Hi here are the scan logs.

Thanks for your help.

Gtank

do you have AVG installed…or is it just a bunch of leftover files in there?

I have AVG Linkscanner thats the only avg thing i use.

well you have lots of AVG2012.exe files in there. :wink:

anyway Essexboy will remove them

Webshlock is an Avast webshield file - so not a problem

C:\Windows\Temp_avast_\unp106487983.tmp is a temporary file used by Avast for unpacking data

Lets clear the Java/Flash/IE temp folders

Are you experiencing any problems ?

Clear Cache/Temp Files
Download TFC by OldTimer to your desktop

[*] Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
[*]It will close all programs when run, so make sure you have saved all your work before you begin.
[*]Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
[*]Once it’s finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

Everything seems to be running fine havn’t noticed anything dodgy.

I have followed your next step.

Let me know if all is well tomorrow and I will remove OTL cleanly

ok thanks just a quick question what should i do with the virus my bootime scan found should i just leave it in the virus chest?

Thanks

Yes it will do no harm there

Hi i have done a boot time scan and a normal scan also a mbam and spyware and they all found nothing.

Is the system behaving normally ?

Yes everything seems to be running normally.

Run OTL and hit the clean up button to remove it, as for aswMBR just delete from the desktop

Have done that.

Thanks for the help appreciate it.