Awhile back I did some download raids on a few WordPress theme sites.  I was surprised to find some of them registered with a JavaScript downloader in AVG.  Be warned.