@DavidR
The first time I ran a scan on startup, and when it showed me that ntuser.dat file was infected, i deleted it. BIG MISTAKE!
Then, like a miracle, I don't know exactly how, I restored the ntuser.dat file by a system restore, I don't know the english name, I restarted and told windows to restore previous version or similar.
Then I tried to rescan on startup and repair the file, with no result.
I tried also to scan the file with normal avast scan in windows and avast said the file is infected but it can't be repaired (because I know it's used by the system).
Now, I would like to take this file and scan it with
http://www.virustotal.com/, but I can't copy this file. I tried also in safe boot, but nothing.
How can I copy this ntuser.dat file in a different location to scan it?
Thanks,
Mario