relative called on thursday 03/04 with concerns of possible infection, i advised to run a scan in safemode, in the meantime i recieved an email from him on sat 03/06 with only a link to this site,
http://udalow.gmxhome.de/tOdIwVSOLI.htm,
i have not opened the link, called to him this morning...