Strange, because AFAIk Norton does not use any heuristics and RAV gives exact the Name(Win32/NewMalware.gen) you mentioned. But anyway i was right with my Swen suggestion and Yes Avast detects it with VPS 309-1 .