I downloaded an excel spread sheet named wire.xls from homepower.com and after I was editing it for maybe 5 minutes avast found Win32:Delf-RT [Trj] and would not move it to the chest because the virus was in memory. So I rebooted and it did its thing and we put the files in the chest. But I see no where in no part of avast where the bug came from in the first place. I have used that spread sheet many times and never happeded again.
Any ideas? The guys at Home Power have checked the file with no luck of finding the bug. A couple other have tested it as well and have not found anything? Yet I have it in my chest. Humm?
A similar version is activated by manually opening an attachment (mail)-d-variant.
Opens a backdoor on your computer (component is detected as a hacktool: see32.dll in C\Windows\system(32)\see32.dll.
It copies itself initially as C\Windows\System(32)spools.exe.
Changes the code of your host file, but the main payload is the
keylogger activity. Changes the registry-see description in the link. (system = Win98 ME/system32= XP)
Thank you many times. I now undersand. I is not in the spread sheet and no one can find it because it never was there. And was installed on my computer by going to chat rooms. It must have just showed up at the time I was editing the sheet.