hello
http://i.imgur.com/wgzrY1F.png
Avast detects as VBS: Agent-KZ [trj]
I see malicious html attached
http://zulu.zscaler.com/submission/show/66c01832cc325b84f7a38781fc5d89df-1405725418
Thanks for procedures cleaning this vbscript injection, some two months ago, I was with user with this problem, will surely help. 