(updated) Cleaned site after Avast alert, a new review, please ? :)

Viruses and worms
1

Hello !

On the website that I host, avast suddenly gives a “js:includer-BAO[Trj]” alarm.

This is a NSFW website, so I don’t make it an immediately clickable hyperlink,

http://www.gallery-dump.com

And yet, Virustotal only has a problem with WOT, see
https://www.virustotal.com/en/url/5410944f1448a5b45253929dd78c7dc96db7e36c031196857a5e206153e5d3c0/analysis/1396080710/

And WOT itself only reports (quite naturally) that the site is not suited for children :
https://www.mywot.com/en/scorecard/gallery-dump.com

Please, could you review the site again ?
And, if there is something, give me more details, so that I may investigate ? Thank you very much ! :slight_smile:

2

Oh, I think I found the origin of the issue, the only advertisement that can change without the admin’s validation, as it’s dynamic.
Loaded in : http://www.gallery-dump.com/exo.txt

I forcibly disabled it, now.

May I please ask for a new review of the website, to clean its slate ? :slight_smile:

3

VirusTotal
https://www.virustotal.com/en/file/85797025b7a26551e9f1bc84ef0018164626c5ad37c86b34be0e7cbafaf9d913/analysis/1396082197/

4

I had re-enabled the exo.txt file for double-testing -_-

Try again please ?

5

seems you found the critter :wink:
https://www.virustotal.com/en/file/a91e715a9b2d00da1f3a4a05d2ff000e088ad4e56ce5a1f675d6beae5966e609/analysis/1396082549/

6

Thanks :slight_smile:

If the info may be of interest to other webmasters facing that issue, that is the exoclick ad network. That exo.txt file is their popunder code.

7

so that means the culprit is exoclicks popunder?

8

oliverfr
how did you solve the problem with your site? Your page does not appear more alert avast

9

@madruga avast has a problem with exoclick popunders but not on exoclick banner ads.
and they are blocking all juicyads banner too it seems they’re detecting some gzip something with their ads.

10

So i have to wait for the webmasters to fix their sites with Js:includer-BAO [Trj] until i can revisit them?

11

or… try surfing some other sites… not only porn :wink:

12

When did the avast forums turn into sci-fi forums ? Are we talking about impossible worlds now ? :smiley:

I simply removed the include() call to that code from the site. Rather than hard-embedding it into the pages, I use include( file.txt ), it’s simpler to handle.

Weiiird O_o