Avast 4.8 Home misses Trojan.Win32.Monder.roz

Viruses and worms
1

I downloaded a rar set from usenet. It is supposed to contain a media file. However, when I unrar it, there is another, password protected rar set inside, along with a file named “RARPassGen.EXE”, and a README file that tells you to run the executable for the password to the rar file. This made me suspicious, so I scanned it with Avast, and it said there were no infected files. However, Kaspersky’s online scanner says it is infected with “Trojan.Win32.Monder.roz”.

This happened once before, and when I ran the RARPassGen.EXE, Avast on-access scanner prevented most, but not all, of the trojan files from installing. Apparently, no system files were infected, but I had to use a rescue cd from http://dnl-eu10.kaspersky-labs.com/devbuilds/kav_rescue_2008.iso to get rid of them all.

Avast version 4.8.1229, database 081008-0

2

Send the sample in a password protected zip/rar folder to virus@avast.com with undetected malware in subject and the password in the email body.

3

Thanks for reporting.
Can you send the rar file to virus (at) avast (dot) com for analysis?
Maybe you could send a link to this thread also.

Welcome to forums.

Oopss… Jtaylor83 was faster 8)