Hidden iFrame at www dot virscan dot org

Viruses and worms
1

We use virustotal here or the jotti av scanner, but when I visit virscan I will get an alert for a hidden iFrame. See the attached picture of the alert.
Why is it there,

polonus

2

Hey Pol :slight_smile:

From looking at the script, it is the target for the upload script…

Take a look at the code, see what you think of it.

Scott

3

Hi spg SCOTT,

It is just a greasemonkey script alert for hidden iFrames in Google Chrome, and that could be completely OK. allthough the use of iFrames is getting a bit out-dated.
Whenever I get alerted with this before landing onto a page, Polonus sort of puts up one ear, a bit like the Goofy figure, and he will give it an extra check. So nothing to do with suspicious iFrames etc, just curiosity, see the DrWeb url check below:

Checking: htxp://pagead2.googlesyndication.com/pagead/show_ads.js
File size: 12.87 KB
File MD5: 2ace78947dca9023882242217f7dc3fe

htxp://pagead2.googlesyndication.com/pagead/show_ads.js - Ok

Checking: htxp://www.virscan.org/
Engine version: 5.0.2.3300
Total virus-finding records: 1914738
File size: 37.44 KB
File MD5: c7c39a484cc5e543023266b51b40ecda

hxtp://www.virscan.org/ - archive HTML

htxp://www.virscan.org//javascript.0 - Ok
htxp://www.virscan.org//Script.1 - Ok
htxp://www.virscan.org//Script.2 - Ok
htxp://www.virscan.org//Script.3 - Ok
hxtp://www.virscan.org/ - Ok

polonus