Virus peril shifts from email to websites