Again avast Webshield detection appopriate...again protected!

Via a look up for an IP address, I stunbled upon this detection: http://urlquery.net/report.php?id=217279
Checking the code of that url via Redleg’s file viewer produced an avast Webshield alert for VBS:Agent-MD[Trj]
Again this is proving how important a line of defense is formed by the avast shields,

polonus

well…you know me, i have to test ;D

VirusTotal
https://www.virustotal.com/file/4be249e729080a8ff73096fdfe5fd21ba874d110c065d4026543cdfe62a41883/analysis/1353703020/

Hi Pondus,

Right you are, then also test this serp hijacking redirection. Avast Weshield detects this as JS:ScriptPE-inf[Trj]
But I wonder if it is still active here: http://urlquery.net/report.php?id=217389
Earlier I had this where it was logged: http://zulu.zscaler.com/submission/show/b391723d0849bb0c62ad1e51bb315928-1342082413
I get address is unreachable…as avast blocks that IP : htXp://37.157.255.52

polonus

The zulu link is dead… according to down for everyone and the html from the urlquery link is clean