Avast Webshield just one of the few av to detect this...

See: https://www.virustotal.com/file/451c0b39255a6b5ed33287a8b8295a278a4ec1413a827864283b913662050a17/analysis/
This not found here: http://zulu.zscaler.com/submission/show/ca087794d17f06c9b5362866b7bfc552-1357937309
or: http://urlquery.net/report.php?id=683564
But avast Web Shield detects object at htxp://armada.ru/ as JS:Icluder-A[Trj] in chrome.exe

polonus

well, scanning the html now give this

https://www.virustotal.com/file/8ba06933328ec7ec38094f96e1d36e6f9c8d5d8c1d10e9c47c11d96a5f037a33/analysis/1357939284/

Hi Pondus,

Thanks for checking on the VT detection, as that never got over 8/46 with recent detections of the same malcode,

polonus