Long code I don't recognize; possible malware?
Hello everyone :-). I am new to Webdeveloper.com. So, forgive me for starting out with a question.
I looked at the source code of a website to see if it used a CMS platform with which I was familiar. While I was doing so, I came across some strange code I've never seen before. I wanted to run it past others who are more experienced than me to see if it could possibly be malware. I wanted to notify them in case it was. Here is a shortened version of the code:
<input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET" value="" />
<input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT" value="" />
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKLTI3ODUyNTU4Nw8WAh4TVmFsaWRhdGVSZXF1ZXN0TW9kZQIBFgJmD2QWBAIBD2QWDAIDD2QWAmYPFgIeBFRleHQFNFdpb GxvdyBQYXJrIEluZGVwZW5kZW50IFNlbmlvciBMaXZpbmcgQ29tbXVuaXR5IHwgSU5kAgQPFgIeB2NvbnRlbnQFTUV2YW5zdmlsb GUgSW5kaWFuYSBJbmRlcGVuZGVudCBTZW5pb3IgTGl2aW5nLCBXaWxsb3cgUGFyaywgSG9saWRheSBSZXRpcmVtZW50ZAIFDxYCH wIFoQFXaWxsb3cgUGFyayBvZmZlcnMgYWxsLWluY2x1c2l2ZSBpbmRlcGVuZGVudCBzZW5pb3IgbGl2aW5nIGluIEV2YW5zdmlsb GUsIElOLiBWaWV3IHBob3RvcyBhbmQgZmxvb3IgcGxhbnMsIGRpc2NvdmVyIGFtZW5pdGllcywgZmluZCBkaXJlY3Rpb25zLCBvc iBnZXQgaW4gdG91Y2guIGQCBg8WAh4HVmlzaWJsZWhkAgcPFgQeBGhyZWYFHC9vdXItY29tbXVuaXRpZXMvd2lsbG93LXBhcmsfA 2hkAgoPFQIiLi4vSExEWVdFQjIvc2NyaXB0cy9saWIvcmVzcG9uZC5qcxsuLi9ITERZV0VCMi9zY3JpcHRzL2luaXQuanNkAgMPZ BYGZg8VAgxVQS0zNDI4ODY4LTEQaG9saWRheXRvdWNoLmNvbWQCARBkZBYQZg8VARRoYXMtY29tbXVuaXR5LXNlYXJjaGQCAQ9kF gJmD2QWAgIFDw9kFgIeCmRhdGEtanNnZXQFK2h0dHA6Ly93d3cuaG9saWRheXRvdWNoLmNvbS9vdXItY29tbXVuaXRpZXNkAgMPZ BYCAgEPZBYMAgEPDxYCHgtOYXZpZ2F0ZVVybAU7aHR0cDovL3d3dy5ob2
The entire code can be viewed at holidaytouch.com/our-communities/willow-park. Since I viewed the site, I want to make sure I am not at risk as well.
Yes it look like a malware get it removed soon or your site fully become victim of this code.
Sadly, that does NOT look like malware to me -- it looks like what happens when you use Visual Studio to make an ASP based webform; which is why generally speaking you shouldn't use Visual Studio to make ANYTHING for websites -- at least not without micro-managing everything it does and NEVER allowing it to make HTML. All the telltales of an ASP page built with a WYSIWYG are present, from the lack of graceful degradation, to the massive hash keys for nothing, to the entire page being wrapped in a single form.
Just more proof that the people making the tools for building ASP based websites don't know enough HTML to be... well... making tools for building websites.
You're correct deathshadow.
Microsoft ASP.NET 4.0.30319
HeadJS (50% sure)
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
Tags for this Thread