Trojan found in the free html editing program from this site:
http://www.evrsoft.com/1stpage2.shtml
Norton picked it before installation complete..