AVG keeps blocking a connection to ap.lijit.com or ce.lijit.com because "it was infected with URL:Botnet". I have not intentionally gone to that domain name, but I get this message quite frequently when visiting a bunch of my usual trusted websites. It apparently is some adware that has injected itself into other sites, if my googling informs me correctly. I'm glad AVG is protecting me from it, but it's getting annoying to have this popup coming up so frequently. I don't even know what sites are causing this to come up, since it pops up randomly so frequently.
Is this a known/common threat? Has anyone else seen it? Should I be trying to notify the websites in question that they are infected with it? I don't go exploring dangerous areas of the web or clicking on links to unknown sites. It's just coming up in the course of my normal business/research use of the web. Checking the news, travel arrangements, etc.
Hi again Midhun,
Here's another screenshot from when it happened with Edge, just to show you that it is not browser specific.
I also tried disabling all my add-ons in Firefox, and it still happens. I have the latest version of both Firefox and Edge. Thanks!
I have been getting this same error multiple times daily for a couple of days now. I have done every scan, uninstalled everything going back a couple of weeks, cleared cache and cookies, uninstalled and reinstalled Chrome, tried two other anti-virus programs, and still can't seem to eliminate this problem.
38fa51d8a436/2022-07-31T00:46:25.750Z
Hello Rosie,
Thank you for getting back to us and let us know the status. If you need any further help with us, feel free to contact us at anytime. We are available at 24/7.
Hi again Midhun,
Here's another screenshot from when it happened with Edge, just to show you that it is not browser specific.
I also tried disabling all my add-ons in Firefox, and it still happens. I have the latest version of both Firefox and Edge. Thanks!
Hello Rosie,
We apologize for the inconvenince this has caused you.
Firstly, please click on "See details" on the threat message & share us another screenshot.
Secondly, does this issue occur when you're using a particular web browser or in other browsers as well?
Thirdly, please make sure that the virus definitions of your AVG Internet Security program are up to date & check if the issue persists.
Keep us updated.
I am having the same problem.
Hello Rosie,
Thank you for submit the website for analysis. Our development team will get back to you as soon as possible.
Until then you can add the website to the AVG Exceptions.
AVG >> Menu >> Settings >> General >> Exceptions
Hello Rosie,
We apologize for the inconvenince this has caused you.
Firstly, please click on "See details" on the threat message & share us another screenshot.
Secondly, does this issue occur when you're using a particular web browser or in other browsers as well?
Thirdly, please make sure that the virus definitions of your AVG Internet Security program are up to date & check if the issue persists.
Keep us updated.
Hello Rosie,
Thank you for getting back to us and let us know the status. If you need any further help with us, feel free to contact us at anytime. We are available at 24/7.
Thank you for writing us back, Rosie.
It seems that the detection is correct and AVG is currently looking into this issue.
We will escalate this case to our higher team to a get a fix, for doing that we need to collect AVG logs from your PC.
We will send an email stating the logs collecting steps, please refer it and revert us back.
Thank you and keep us updated.
Thank you Veeramani.
I don't want to add these websites to the AVG Exceptions, because Lijit might indeed be malware and I am glad AVG is blocking it for now. If your development team's investigation shows that Lijit is malware and there are widespread infections on various legit websites, I want these website owners to be notified that their sites are infected.
Thanks Rosie. I would think AVG is the one to help us- aren't they supposed to prevent this type of thing? Is it going to come down to removing AVG? Would that help- and if so, do you have another virus protection program you might recommend? You are clearly smarter than I am about all this!
Sreenu,
What do you mean by "reset" my browsers? I have closed and restarted them multiple times, and this still happens. I have made sure they are both the latest versions. And I have tried this with all the add-ons disabled.
And the problem happens on many URLs. Should I make multiple submissions the false positives site, or include them all on one submission?
There are potentially thousands and thousands of these. For example, deep URLs such many specific word definitions on Merriam Webster all seem to have the problem, but their main site doesn't. I can't report every single instance since it would take me weeks. Is reporting one example URL from each domain where I've seen this problem sufficient? (Another dictionary that has the problem is Reverso, for example.)
It seems to be something that is widespread all over the internet, as I've got six sites in my list so far of where this is coming up, and I'm not the only one reporting this particular problem with potentially illegitimate attempts to connect to *.lijit.com from other sites, so I don't want to assume these are false positives. Maybe a new threat really IS spreading like wildfire, and these sites should be notified that they've gotten infected. Should I do that, or will you take care of doing that once I submit them?
Thank you for writing us back, Rosie.
We understand your concern.
We have informed about this to our higher team and they are working on the fix and will get back to you via email at the earliest.
We request your patience and understanding.
Thank you.
Thank you Lathika,
I have followed the instructions and submitted my logs. File ID: V58AY.
I will await further instructions.
I am having the same problem- constantly pops up with this .lijit.com thing. I also want to know how to "reset" my browsers- I don't know what that means. Perhaps it's going to down to uninstalling AVG? Don't want to do that but I can't get work done with this consstant irritation popping up. HELP!!!
Thank you for sharing the screenshots, Rosie.
Have you tried to reset your Firefox and Microsoft Edge browsers once and then check if it helps?
In order to analyze the website, we request you to submit the URL for analysis through this website. https://www.avg.com/false-positive-file-form
If it is confirmed as safe, it will be whitelisted and the virus definitions database will be released through update.
You will also get the status updated via email.
Thank you and keep us updated.
Apparently Lijit is an ad serving domain owned by Sovrn Holdings, Inc. So any ads that are being served to me from the websites I'm having problems with, if they use Lijit to serve the ads, it's going to trigger this AVG threat alert. So the problem isn't with the websites I'm going to, since they don't control what ads I'm seeing. It's with Lijit.com. It is either malware itself, or infected with malware not of its own making, or a false positive.
Hello Cheryl,
Please accept our sincere apologies for the inconvenience this has caused you.
We request you to write back to us in your own/new post, so that we can locate your account & provide appropriate assistance via email.
Thank you for understanding in advance!
