(updated) Cleaned site after Avast alert, a new review, please ? :)

[oliverfr]

Hello !

On the website that I host, avast suddenly gives a "js:includer-BAO[Trj]" alarm.

This is a NSFW website, so I don't make it an immediately clickable hyperlink,

Code: [Select]

http://www.gallery-dump.com
And yet, Virustotal only has a problem with WOT, see
https://www.virustotal.com/en/url/5410944f1448a5b45253929dd78c7dc96db7e36c031196857a5e206153e5d3c0/analysis/1396080710/

And WOT itself only reports (quite naturally) that the site is not suited for children :
https://www.mywot.com/en/scorecard/gallery-dump.com

Please, could you review the site again ?
And, if there is something, give me more details, so that I may investigate ? Thank you very much !

[oliverfr]

Oh, I think I found the origin of the issue, the only advertisement that can change without the admin's validation, as it's dynamic.
Loaded in : http://www.gallery-dump.com/exo.txt

I forcibly disabled it, now.

May I please ask for a new review of the website, to clean its slate ?

[Pondus]

VirusTotal
https://www.virustotal.com/en/file/85797025b7a26551e9f1bc84ef0018164626c5ad37c86b34be0e7cbafaf9d913/analysis/1396082197/

[oliverfr]

I had re-enabled the exo.txt file for double-testing -_-

Try again please ?

[Pondus]

seems you found the critter   
https://www.virustotal.com/en/file/a91e715a9b2d00da1f3a4a05d2ff000e088ad4e56ce5a1f675d6beae5966e609/analysis/1396082549/

[oliverfr]

Thanks

If the info may be of interest to other webmasters facing that issue, that is the exoclick ad network. That exo.txt file is their popunder code.

[l0rdmark]

so that means the culprit is exoclicks popunder?

[Madruga]

oliverfr
how did you solve the problem with your site? Your page does not appear more alert avast

[l0rdmark]

@madruga avast has a problem with exoclick popunders but not on exoclick banner ads.
and they are blocking all juicyads banner too it seems they're detecting some gzip something with their ads.

[Yawty]

So i have to wait for the webmasters to fix their sites with Js:includer-BAO [Trj] until i can revisit them?

[Pondus]

So i have to wait for the webmasters to fix their sites with Js:includer-BAO [Trj] until i can revisit them?

or... try surfing some other sites.... not only porn   

[oliverfr]

or... try surfing some other sites.... not only porn   

When did the avast forums turn into sci-fi forums ? Are we talking about impossible worlds now ?

oliverfr
how did you solve the problem with your site? Your page does not appear more alert avast

I simply removed the include() call to that code from the site. Rather than hard-embedding it into the pages, I use include( file.txt ), it's simpler to handle.

@madruga avast has a problem with exoclick popunders but not on exoclick banner ads.
and they are blocking all juicyads banner too it seems they're detecting some gzip something with their ads.

Weiiird O_o