这是网页结束时的代码，红色部分以前没有，是木马吧？


<map name="Map">
  <area shape="rect" coords="275,2,321,22" href="/?list-527.html" target="_blank">
</map>
<map name="Map2">
  <area shape="rect" coords="274,3,322,21" href="/?list-528.html" target="_blank">
</map>
<!-- <script src="/guanggaotupian/duilian3.js" language="JavaScript"></script> -->
</body>
</html>

<script src="/ks_inc/ajax.js"></script>

<script language="javascript" type="text/javascript">
document.write("<div style=\"position: absolute; top: -999px;left: -999px;\">")
</script>
<a href="http://www.sanyazufang.com" title="三亚" name="三亚">三亚</a>
<a href="http://www.sanyajiudian.net" title="三亚酒店" name="三亚酒店">三亚酒店</a>
<a href="http://www.tiantianbt.com" title="bt下载" name="bt下载">bt</a>
<a href="http://www.sanyajiudianyuding.com" title="三亚酒店预订" name="三亚酒店">三亚酒店预订</a>
<a href="http://www.fantizi.cc" title="繁体字" name="繁体字">繁体字</a>
<script language="javascript" type="text/javascript">document.write("<\/div>")</script>

一句话

呵呵

被挂黑链。。

原来是INDEX。ASP文件被更改，

看来有木马呀，怎么找呀，

文件被更改为：

<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<%option explicit%>
<!--#include file="Conn.asp"-->
<!--#include file="KS_Cls/Kesion.Label.CommonCls.asp"-->
<!--#include file="KS_Cls/Kesion.StaticCls.asp"-->
<%
'****************************************************
' Software name:Kesion CMS 5.5
' Email: service@kesion.com . QQ:111394,9537636
' Web: http://www.kesion.com http://www.kesion.cn
' Copyright (C) Kesion Network All Rights Reserved.
'****************************************************
Dim KSCls
Set KSCls = New SiteIndex
KSCls.Kesion()
Set KSCls = Nothing

Class SiteIndex
        Private KS, KSR
  Private Sub Class_Initialize()
   If (Not Response.IsClientConnected)Then
   Response.Clear
   Response.End
   End If
    Set KS=New PublicCls
    Set KSR = New Refresh
  End Sub
        Private Sub Class_Terminate()
   Call CloseConn()
   Set KS=Nothing
  End Sub
  Public Sub Kesion()
     Dim QueryStrings:QueryStrings=Request.ServerVariables("QUERY_STRING")
     If QueryStrings<>"" And Ubound(Split(QueryStrings,"-"))>=1 Then
       Call StaticCls.Run()
     Else
     Dim Template,FsoIndex:FsoIndex=KS.Setting(5)
     IF Split(FsoIndex,".")(1)<>"asp" Then
      Response.Redirect KS.Setting(5):Exit Sub
     Else
        Template = KSR.LoadTemplate(KS.Setting(110))
        FCls.RefreshType = "INDEX" '设置刷新类型，以便取得当前位置导航等
        FCls.RefreshFolderID = "0" '设置当前刷新目录ID 为"0" 以取得通用标签
        Template=KSR.KSLabelReplaceAll(Template)
    End IF
    Response.Write Template 
    End If
    Set StaticCls=Nothing
  End Sub
End Class
%>
<script language="javascript" type="text/javascript">
document.write("<div style=\"position: absolute; top: -999px;left: -999px;\">")
</script>
<a href="http://www.sanyazufang.com" title="三亚" name="三亚">三亚</a>
<a href="http://www.sanyajiudian.net" title="三亚酒店" name="三亚酒店">三亚酒店</a>
<a href="http://www.tiantianbt.com" title="bt下载" name="bt下载">bt</a>
<a href="http://www.sanyajiudianyuding.com" title="三亚酒店预订" name="三亚酒店">三亚酒店预订</a>
<a href="http://www.fantizi.cc" title="繁体字" name="繁体字">繁体字</a>
<script language="javascript" type="text/javascript">document.write("<\/div>")</script>