I just found the same virus using AVG. It came from an HMTL
editor called 1st Page by evrsoft.com. It was in a java script
called "6 buttons" that came with the program. I have been trying to go to their web site off and on for the last couple of weeks, but it's just not there any more. I know that it's an Australian company. There is a tech forum for the program at: