Creating a new account on a hacking site and uploading an office doc is pretty suspect dude

(VirusTotal came back with nothing, so I just threw it into Google docs [hopefully no XSS], but open at your own risk...)

Gray Hat Python is going to be overkill and over your head if you're new to Python. Start with O'Reilly's Learning Python.

The OWASP guide is another great resource: http://www.owasp.org/index.php/Category:OWASP_Testing_Project

The Web App Hackers Handbook is a fairly comprehensive read. I'd go through that before diving into so many other similar books. For example, the Hacking Exposed: Web Apps book is rather out-dated.

You also get two practice exams when you sign up for a challenge, so you can use those to determine your weak areas and then research those.

I wouldn't worry about it much. Cursors are supposed to move on their own. And those connections to APNIC, figment of your imagination.

Come on... How could you not trust a domain name like cn28321hdsfe.za