[Discuss] REL Mass CORI .exe
Nathan Meyers
nmeyers at javalinux.net
Mon Nov 7 16:23:08 EST 2011
Eric Chadbourne wrote:
> I was running clamscan and hit a .exe that's a reported trojan.agobot. dug
> around and found that it came from cori. Apparently they answer electronic
> cori requests with an email link to an executable file.
Sounds like the sort of thing that happens when a Web server is
misconfigured to deliver a CGI executable instead of running it (except
for the part about containing a Trojan).
Nathan
More information about the Discuss
mailing list