P.S.:
avast should detect
Win32:Mugly [Wrm]
since Dec 2nd → earlier than Trendmicro

→ What VPS-Version do you have ?
→ or, if it’s a new mugly-variant which UPTODATE avast doesn’t detect even in SafeMode/thorough/Archives or Boot-time Scan:
please send it in (see above)

:wink: