You forgot to mention another good signature "Javascript_NOOP_Sled". It
used to provide decent detection about a year ago, now it's useless
against obfuscated code.
However, all these ISS Javascript script signatures have a very high
False Positive rate. Since you work for IBM perhaps you can get ...

[ more ]