[Discuss] REL Mass CORI .exe

Nathan Meyers nmeyers at javalinux.net
Mon Nov 7 16:23:08 EST 2011


Eric Chadbourne wrote:
> I was running clamscan and hit a .exe that's a reported trojan.agobot.  dug
> around and found that it came from cori.  Apparently they answer electronic
> cori requests with an email link to an executable file.

Sounds like the sort of thing that happens when a Web server is
misconfigured to deliver a CGI executable instead of running it (except
for the part about containing a Trojan).

Nathan



More information about the Discuss mailing list