csdn往用户硬盘下木马?

[dfczj]

csdn怎么往用户硬盘乱写东西.类似这样的文件在userData目录下有几十个.还有一个记录这些文件的index.dat,是不是木马来的,搞不懂.
C:\Documents and Settings\new\UserData\QTI3I7WV\Csdn_Blog_ShowmeDataDeal[1].xml
<ROOTSTUB code="Using("System.Web.Forms.MzForm");

var a = [];
a.push('<div id="blog_csdn_Showme" class="ittoolbox_csdnl" onmouseover="(window.event || event).cancelBubble=true;" style="display:none">');
a.push(' <h6><span id="smAuthor">\u66fe\u767b\u9ad8</span>\u7684\u4e2a\u4eba\u4fe1\u606f</h6>');
a.push(' <table border="0" cellpadding="0" cellspacing="0">');
a.push(' <tr>');
a.push(' <th>');
a.push(' <img id="smPic" alt="" class="person" src="http://www.programmer.com.cn/images/ittoolbox_csdn_pic3.gif" /><br />');
a.push(' <a id="smLinktoMyhome" href="#">\u4f5c\u8005\u9996\u9875</a>');
a.push(' </th>');
a.push(' <td>');
a.push(' <ul id="smContentList"></ul>');
a.push(' <div class="submitArea">');
a.push(' <input type="button" class="btnSubmit" value="\u52a0\u4e3a\u597d\u53cb" id="smAddFriend" />');
a.push(' <input type="button" class="btnSubmit" value="\u53d1\u6d88\u606f" id="smSendMessage" />');
a.push(' </div>');
a.push(' </td>');
a.push(' </tr>');
a.push(' </table>');
a.push('</div>');
document.write(a.join(""));
System.loadCssFile("/images/showme/showme.css");



function ShowmeDataDeal(Content)
{
var r = (new Function("return " + Content))();
this.smUserName = r.UserName;
this.smAuthor = r.Author;
this.smContentList = r.ContentList;
}
ShowmeDataDeal.prototype.render = function()
{
var me=this;
document.getElementById("smAuthor").innerHTML = this.smAuthor;
document.getElementById("smPic").src = "http://profile.csdn.net/"+this.smUserName+"/picture/1.jpg";
document.getElementById("smContentList").innerHTML = this.smContentList;
document.getElementById("smLinktoMyhome").href = "http://blog.csdn.net/" + this.smUserName;
document.getElementById("smAddFriend").onclick = function(){addFriend(me.smUserName)};
document.getElementById("smSendMessage").onclick = function(){sendMsg(me.smUserName)};

}
function getcookie(name)
{
var arr = document.cookie.match(new RegExp("(^| )"+name+"=([^;]*)(;|$)"));
if(arr != null) return unescape(arr[2]); return null;
}

//20070608 meizz
function addFriend(name)
{
var myname = getcookie("activeUserName");
if (myname)
{
var script = document.createElement("SCRIPT");
script.type = "text/script";
script.src = "http://webim.csdn.net/Web_References/Provide_Services/CSDN/UserAndFriend.aspx?Action=AddFriend&UserName"+
myname +"&FriendName="+ name;
document.getElementsByTagName("HEAD")[0].appendChild(script);
alert("\u60a8\u5df2\u7ecf\u5411 "+ name +" \u53d1\u51fa\u4e86\u597d\u53cb\u7533\u8bf7\uff0c\u8bf7\u8010\u5fc3\u7b49\u5f85\uff01\n\u597d\u53cb\u5ba1\u6838\u901a\u8fc7\u540e\uff0c\u60a8\u53ef\u4ee5\u5728\u603b\u63a7\u5236\u53f0\u7684[\u6d88\u606f]\u9879\u91cc\u5411\u597d\u53cb\u53d1\u7ad9\u5185\u77ed\u6d88\u606f\uff01");
}
}
function sendMsg(username)
{
MzForm.open("http://webim.csdn.net/Message.aspx?Incept="+ username, {contentType:"page",width:"510px",height:"480px",title:"\u804a\u5929\u7a97\u53e3"})
}

var position;
function BlogShowme(e, UserName)
{
(window.event || e).cancelBubble=true;
e = window.event || e;
var img = e.target || e.srcElement;
var position = MzElement.realOffset(img);
var dll = $("blog_csdn_Showme");

var d_right=position.x+e.offsetWidth;
if(d_right + 50 > MzElement.body().clientWidth)
{
MzElement.addClassName("blog_csdn_Showme", "arrow_right");
dll.style.top = (position.y - 10) +"px";
dll.style.left=position.x-317+"px";
}
else
{
MzElement.removeClassName("blog_csdn_Showme", "arrow_right");
dll.style.top = (position.y - 10) +"px";
dll.style.left= (position.x + 40) +"px";
}

var rurl="http://blog.csdn.net/BlogShowme.ashx?UserName=" + UserName;
sendRequest(dll, rurl);
}

//*************************ajax*******************************

function sendRequest(obj, reqUrl)
{
var xmlHttpReq;
if (window.XMLHttpRequest)
{
xmlHttpReq= new XMLHttpRequest();
}
else if (window.ActiveXObject)
{
xmlHttpReq = new ActiveXObject("Microsoft.XMLHTTP");
}
xmlHttpReq.onreadystatechange = processRequest;

xmlHttpReq.open("GET", reqUrl,true);
xmlHttpReq.send(null);
MzElement.show(obj);
function processRequest()
{
if(xmlHttpReq.readyState==4)
{
if(xmlHttpReq.status==200)
{
//document.getElementById('ttop').style.display='none';
//document.getElementById('tbot').style.display='';

var ShowmeDataDeal_Instance = new ShowmeDataDeal(xmlHttpReq.responseText);
ShowmeDataDeal_Instance.render();
}
}
else if(xmlHttpReq.readyState==1)
{
//document.getElementById('ttop').style.display='';
//document.getElementById('tbot').style.display='none';
}
}
}
document.attachEvent("onmouseover", function(){MzElement.hide("blog_csdn_Showme");});" version="20070606"/>

[dfczj]

d

[knowledge_Is_Life]

关注 接分