why does avast detect BV:Agent-NV[Trj] here??

[true indian]

when i accessed : hxtp://www.exposedbotnets.com/feeds/comments/default?redirect=false&max-results=200&alt=json-in-script&callback=showTopCommenters

I got warning from web shield about BV:Agent-NV

Yet i am unable to find what is on there that is malicious 

I uploaded the file dropped in temp and here it is:
https://www.virustotal.com/file/80043f344a499625fe0dcf3fdc35967a1a9cac875b22cd7c8f4f2aaf35ad698b/analysis/1342953597/

[Pondus]

the -www.exposedbotnets.com  seem to be some kind of malware blog
so i guess avast is reacting to somethig somone have posted there

[polonus]

Hi true indian,

You should be aware of possible alerts of the avast shields whenever you go to visit a site where there is live malware, links to live malware or part of malcious code (even when it is without a payload and so harmless). That is also the reason why we break links or present code in the form of an image.
Whenever you use online sites to "sniff" html code use a script blocker and open up sandboxed. As a general rule those that aren't that security savvy and not aware of the risks of "live" malcode"  better stay away or use "cold reconnaissance or third party scanning tools". Curiosity killed the "proverbial animal",

polonus

[!Donovan]

Can be used maliciously like this:

Code: [Select]

eval(document.getElementById("content").innerHTML)
See attached.