I ran YARArules via some software I dont remember the name of on extracted JavaScripts from quarantined files and got some hits. But the only AV I use is clamav+sanesecurity so probably any other AVengine would have given better numbers.
But after Oliviers tests I understand that perhaps it is time to actually pay for an AV or just block all .js files.
