Ok, avast doesn’t alert on it now :wink:

A detailed write up here: http://blog.unmaskparasites.com/2011/03/24/blackhole-defs_colors-and-createcss-injections/