New scan:

Malware Scanner report for worksmart.bh

Malicious/Suspicious/Total urls checked
1/0/17
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://worksmart.bh/
HTTP/1.1 200 OK
Date: Sun, 05 Oct 2014 05:23:36 GMT
Accept-Ranges: bytes
ETag: "2b60bbde29c1cf1:0"
Server: Microsoft-IIS/7.0
Content-Length: 513
Content-Type: text/html
Last-Modified: Tue, 26 Aug 2014 12:32:59 GMT
X-Powered-By: ASP.NET
clean
http://worksmart.bh/home
HTTP/1.1 301 Moved Permanently
Date: Sun, 05 Oct 2014 05:23:36 GMT
Location: http://worksmart.bh/home/
Server: Microsoft-IIS/7.0
Content-Length: 148
Content-Type: text/html; charset=UTF-8
X-Powered-By: ASP.NET
clean
http://worksmart.bh/home/
200 OK
Content-Length: 58761
Content-Type: text/html
clean
http://worksmart.bh/home/wp-includes/js/jquery/jquery.js?ver=1.11.0
200 OK
Content-Length: 96402
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
200 OK
Content-Length: 7200
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-content/plugins/fancytabs/fancytabs.js?ver=3.9.2
200 OK
Content-Length: 785
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.1.18
200 OK
Content-Length: 3485
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.1.18
200 OK
Content-Length: 6419
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.1.18
200 OK
Content-Length: 25171
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
200 OK
Content-Length: 7583
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

;(function($) {
function defined(a) {
return typeof a !== 'undefined';
}
function extend(child, parent, prototype) {
var F = function() {};
F.prototype = parent.prototype;
child.prototype = new F();
child.prototype.constructor = child;
parent.prototype.constructor = parent;
child._super = parent.prototype;
if (prototype) {
$.extend(child.prototype, prototype);
}
}
var SUBST = [
['', ''],
... 3601 bytes are skipped ...
,
element: function() {
return this.__isFullScreen ? this._fullScreenElement : null;
}
});$.fullscreen = IS_NATIVELY_SUPPORTED
? new FullScreenNative()
: new FullScreenFallback();
$.fn.fullscreen = function(options) {
var elem = this[0];
options = $.extend({
toggleClass: null,
}, options);
options.styles = {
};

if (elem) {
$.fullscreen.open(elem, options);
}
return this;
};
})(jQuery);

Antivirus reports:

Emsisoft
Trojan.Generic.1389340 (B)

http://worksmart.bh/home/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.1.18
200 OK
Content-Length: 6662
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=3.9.2
200 OK
Content-Length: 1852
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.10.4
200 OK
Content-Length: 4289
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-includes/js/jquery/ui/jquery.ui.widget.min.js?ver=1.10.4
200 OK
Content-Length: 6521
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-includes/js/jquery/ui/jquery.ui.accordion.min.js?ver=1.10.4
200 OK
Content-Length: 8366
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-content/plugins/ultimate-tables/js/jquery.dataTables.js?ver=1.0
200 OK
Content-Length: 300558
Content-Type: application/x-javascript
clean
http://worksmart.bh/home/wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=3.9.2
200 OK
Content-Length: 2102
Content-Type: application/x-javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: worksmart.bh

Result:
HTTP/1.1 200 OK
Date: Sun, 05 Oct 2014 05:23:36 GMT
Accept-Ranges: bytes
ETag: "2b60bbde29c1cf1:0"
Server: Microsoft-IIS/7.0
Content-Length: 513
Content-Type: text/html
Last-Modified: Tue, 26 Aug 2014 12:32:59 GMT
X-Powered-By: ASP.NET

...513 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: worksmart.bh
Referer: http://www.google.com/search?q=worksmart.bh

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=worksmart.bh

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://worksmart.bh/

Result: worksmart.bh is not infected or malware details are not published yet.