Malware detection comes with scanning all from a certain page, so-called external elements.
Such a blacklisted element is flagged here: htxp://sitecheck.sucuri.net/results/http://hgbyju.com/r.php
It is found here: htxp://zulu.zscaler.com/submission/show/564a9640749bde5df8d779163794d149-1335648623
And avast detects it as we can see here: htxp://vscan.urlvoid.com/analysis/23a38b6295d847af0b54e8cb2ff626f8/bmV3cy1hc3A=/
Read more about Nikjju SQL injection on that URL: -http://blog.sucuri.net/2012/04/nikjju-sql-injection-update-now-hgbyju-comr-php.html (link article author= Daniel Cid)
polonus