Hi,

what do Onlinescanners say to the file, e.g. JOTTI ?
→ for link: see “VirusRemoval” below in my sig
PAUSE avast shield while scanning the file online.

If JOTTIS confirms infection:
try moving it to chest with avast in SafeMode (F8-Boot)
(never delete anything if you don’t know what it is…)

and/or post a hijackthis-Log here: http://tomcoyote.org/hjt

:wink: