Worm:Win32/Morto.A

My Windows XP SP3 computer got infected with this worm, my avast 7 free is instaled and up to date:

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Worm%3AWin32%2FMorto.A

I do use RDP on a daily basis. First sign of infection i got when avast started showin ton of pop-ups, one after another…blocking svchost.exe, and the pathname was from C:/WINDOWS/Offline Web Pages/cache.txt. I restarted the computer, pop-ups stopped coming up, in virus chest is sens32.dll - main engine of a virus, located in C:/Windows/system32.

But, here is the weird thing, when i go into C:/Windows/system32, the sens32.dll is there, and when i do a scan of system32 folder, avast doesent detect a threat in that folder, so i don’t know how avast 7 virus chest works, does it contain that file in system32 folder or what?

If not, why doesen’t it detect sens32.dll as a threat? it did the first time…

follow the guide and attach (not copy and paste) logs from malwarebytes / OTL / aswMBR
http://forum.avast.com/index.php?topic=53253.0

when done a malware remover will be notified…

Monitoring… :slight_smile: