avast unable to remove a virus in boot scan

Viruses and worms
1

ok so i have a pesky virus on my system… can’t get rid of it at all
when avast scans in boot mode this is what i get

15/10/2004 10:42
Scan of D:\

File D:\Documents and Settings\Jim\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-3cd8601-32b6420f.RB0\Gummy.class is infected by JS:Gummy [Trj] - Deleted
File D:\Documents and Settings\Jim\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-3f46430c-132965d7.RB0\Gummy.class is infected by JS:Gummy [Trj] - Deleted
File D:\Documents and Settings\Jim\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-5157872c-6807a6f8.RB0\Gummy.class is infected by JS:Gummy [Trj] - Deleted
File D:\pagefile.sys is infected by Win32:Trojano-092 [Trj] - Deleted
File D:\WINDOWS\system32\ctli.dll Error 3221225506

Number of searched folders: 4309
Number of tested files: 105569
Number of infected files: 4

2

The first 3 look like a false positive to me. Please post a hijackthis log here and let us have a look.

3

thanks for the suggestion, the hijack log was clean. i managed to get rid of the virus by scanning the drive on another computer in boot mode and i managed to get rid of the pagefile (windows recreated it) and the ctli.dll file was undeleteable becuase of the ownership restrictions on it. in the end i used the Xp “take ownership” settings to take control of the file, un-readonly it and delete it.
once i plugged it back into the original system all was well =) YAY =) thanks anyway =)

4

dat,

That was an excellent move using the little known XP “Take” priviledge.

At least your solution is in the forum “search” base for others to find.

Thank you.