The code from the realphx.com appears to put av.exe in C:\ which has a "COMPANY" value of www.digitalmatter.net. When going to www.digitalmatter.net you are informed that the site has no affiliation with www.realphx.com and that if you are infected you should be disinfected momentarily. So.. if you happen to be infected with the realphx.com crap just goto http://digitalmatter.net/fix.hta?.jpg and open it. It appears to work. -- Michael A. Nunes /p at pcmike dot net http://pcmike.net/
