Я так понимаю формируется он тут:
<script type="text/javascript">
//<![CDATA[
Sys.Application.add_init(function() {
$create(AjaxControlToolkit.NoBotBehavior, {"ChallengeScript":"var e = document.getElementById(\u0027ctl00_cp_NoBotID_pcnb\u0027); e.offsetWidth + e.offsetHeight;","ClientStateFieldID":"ctl00_cp_NoBotID_NoBotID_NoBotExtender_ClientState","id":"ctl00_cp_NoBotID_NoBotID_NoBotExtender"}, null, null, $get("ctl00_cp_NoBotID_NoBotID_NoBotLabel"));
});
Sys.Application.initialize();
//]]>
</script>