Open Malware warning from Anti-virus software

[randyt]

On _every_ page of the babia site (since a couple of weeks), I get these unauthorized application download attempts reported by Kaspersky. Usually reported two times on each application description page, and a lot of times on the forum index and content.

https://avenuewalkerchange.com/f028d0bdb4232326a9b3a08311dc676c/invoke.js;invoke.js

https://avenuewalkerchange.com/5cacf3c34f9b82a83fdb369e4404c4e3/invoke.js;invoke.js

 

[DCDev]

On _every_ page of the babia site (since a couple of weeks), I get these unauthorized application download attempts reported by Kaspersky. Usually reported two times on each application description page, and a lot of times on the forum index and content.

https://avenuewalkerchange.com/f028d0bdb4232326a9b3a08311dc676c/invoke.js;invoke.js

https://avenuewalkerchange.com/5cacf3c34f9b82a83fdb369e4404c4e3/invoke.js;invoke.js

Hi there, please reference this reply to help understand the message you are getting: https://babia.to/threads/malware-warning-from-anti-virus-software.92847/post-1291744

 

[00sete]

Evento: Download negado
Tipo de usuário: Iniciador
Nome do aplicativo: firefox.exe
Caminho do aplicativo: C:\Program Files\Mozilla Firefox
Componente: Navegação Segura
Resultado da descrição: Bloqueado
Tipo: Probabilidade de download de software não autorizado
Nome: https://avenuewalkerchange.com/f028d0bdb4232326a9b3a08311dc676c/invoke.js
Nível de ameaça: Alto
Tipo de objeto: Página da Web
Nome do objeto: invoke.js
Caminho do objeto.: https://avenuewalkerchange.com/f028d0bdb4232326a9b3a08311dc676c
Motivo: Proteção na Nuvem

 

[Medw1311]

Evento: Download negado
Tipo de usuário: Iniciador
Nome do aplicativo: firefox.exe
Caminho do aplicativo: C:\Program Files\Mozilla Firefox
Componente: Navegação Segura
Resultado da descrição: Bloqueado
Tipo: Probabilidade de download de software não autorizado
Nome: https://avenuewalkerchange.com/f028d0bdb4232326a9b3a08311dc676c/invoke.js
Nível de ameaça: Alto
Tipo de objeto: Página da Web
Nome do objeto: invoke.js
Caminho do objeto.: https://avenuewalkerchange.com/f028d0bdb4232326a9b3a08311dc676c
Motivo: Proteção na Nuvem

Firstly only post in English

Secondly read this...

https://babia.to/threads/malware-warning-from-anti-virus-software.92847/post-1291744

 

[xhanjee]

Whitelisting isn't a solution. It doesn't make sense to whitelist adware or malware. ​

We run a website and display ads, but we never allow these types of networks. In our case, we manually blocked 762 suspicious and harmful ad networks to protect our visitors.
You must also make sure to block harmful ad networks.

New Log from your website:​

Result description: Blocked
Type: Probability of unauthorized software download

Malware Websites:

• https://mindlessslogan.com/
• https://reignprofessionally.com/
• https://savagelylizard.com/
• https://avenuewalkerchange.com/
• https://1d435382c2.a41bd55af8.com/
• https://ravenchewrainbow.com/
• https://outlinesweatraces.com/
• https://criesresentstrangely.com/
• https://hoardglitterjeanne.com/
• https://www.profitablecreativeformat.com/
• https://www.topdisplaynetwork.com/ .........There are a lot more sites here.

Threat level: High​

Object type: Web page​

Object name: invoke.js​

Reason: Cloud Protection​

 

[Bendo]

Adsterra is well known for their malicious advertising, you would be advised to remove their adcode immediately to avoid a dramatic loss in traffic.

 

[Bendo]

The redirect ads are gone now.

If you get any virus/malware warnings about https://avenuewalkerchange.com this can be whitelisted as this is a custom ad server domain we have got from the ad network.

This is extremely dangerous to request visitors to whitelist a URL which has been marked by a security vendor as malicious - This URL would be the reason for redirects.

As a large site owner you should be more cautious when making such requests instead you should REMOVE the ad code from your site and prioritize visitors safety over your money making.