Hi dutchie,
You have to take this up with avast team as to what javascript code they flag for your site.
We get several clean site reports here: http://maldb.com/www.embroidershoppe.com/#
http://zulu.zscaler.com/submission/show/6e6eb0888a2c9be75535a75c19116b1b-1386022370
So some scanners may not see it.
When I do a Asafaweb Scan I at long last get a clue what avast is flagging, ---- \Scan[1]htm it detects JS;ScriptIP-inf[Trj]
and it puts that into the chest. Read about this malware here: http://www.im-infected.com/trojan/jsscriptip-inf-trj.html
I also get errors trying to scan the site at Wepawet URL scan.
Still get the two general server security warnings here: https://asafaweb.com/Scan?Url=www.embroidershoppe.com
Excessive header information spread to the world and potential attackers, and site vulnerable to clickjacking,
avast! had to fix an earlier issue with a JS:ScriptIP-inf[Trj] detection,
read here: http://forum.avast.com/index.php?topic=108495.msg858730#msg858730
There it seemed to have been associated with the ISP widget…
polonus