Well if it is something like W32.Semisoft.59904, shouldn’t Avast have detected and cleaned it? (unless he didn’t scan the hard drive yet–or the virus is now deleted, but the damage is done)?