I just upgraded to Bitcoin-QT 0.13.0 on Windows 7 64 bit.
Before anyone asks, yes I verified the download signature against the SHA256SUMS.asc file, whose signature correctly matched that of Wladimir J. van der Laan's PGP key (that I downloaded long ago, before the recent threat announcement).

When I tried to run it for the first time, Avast did a deep scan and quarantined the binary.
Is anyone else having this issue or found a solution?
Could a file that passed signature verification still have an infection?!

As referenced in thread... https://bitcointalk.org/index.php?topic=324918.0 But I'm a NOOB, so I can only post here.  Grrrrr.

On 2013-12-31 11:45 UTC, I did a ~20 BTC withdrawal.  The transaction ID they gave me is nowhere on the blockchain, and the amount has not been credited to my wallet.  BUT the amount instantly debited from my Mt.Gox account.

Support has not responded to my inquir at all.

I am worried, and frustrated with Mt.Gox.  Think I will never use them again.

Anyone else have any experiences like this recently?  And did it work out OK?