Ouchie.
Sorry, I didn't see your post sooner. I had a virus alert but now Norton Symantics says there is no such virus so I'm running all my scans! I wrote down MHTMLRefir.Exploit but I may have put the L in out of habit because of html??