1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Would this type of thing be a trojan ?

Discussion in 'Security and Privacy' started by terrafutan, 2003/05/30.

Thread Status:
Not open for further replies.
  1. 2003/05/30
    terrafutan

    terrafutan Inactive Thread Starter

    Joined:
    2002/12/30
    Messages:
    28
    Likes Received:
    0
    Hi all

    I have recently started receiving strange email messages.
    I ran a virus check which came back clean, but I still get the messages.

    Half of them are returned mail because of unknown users, which is strange because I don't send mail using that address.

    The other ahlf have some info about formmail in them. I have a copy of one below. I don't have an email address none@terrafutan.net, however terrafutan.net is one of my domains.

    From: <none@terrafutan.net>
    To: <none@terrafutan.net>
    Sent: Thursday, May 29, 2003 4:57 AM
    Subject: Ignoreto:
    Spankyparade@o2.plBEGINABCDFORMMAILterrafutan.net/cgi-sys/formmail.plTSTSend
    MailTSTENDABCD.

    > body: ignore
    >
    > lastfield: lastvalue

    Is someone using my domain for bad ****e or what exactly is going on. Anybody have any ideas on this ?

    TIA
     
  2. 2003/05/30
    brett

    brett Inactive Alumni

    Joined:
    2002/01/11
    Messages:
    2,058
    Likes Received:
    0

  3. to hide this advert.

  4. 2003/05/30
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    and

    Do you have formmail running on a Web site? If so, make sure ASAP you have the latest version, it's know to be exploitable in many ways.

    Also, RENAME the script to something else them formmail.pl, there are automated scripts looking for that file to exploit it...
     
  5. 2003/06/01
    terrafutan

    terrafutan Inactive Thread Starter

    Joined:
    2002/12/30
    Messages:
    28
    Likes Received:
    0
    Thanks for the replies.

    Brett - I downloaded the Klez fix from Symantec and followed the instructions. It wasn't found on my PC.

    Admin - Could you give me a bit more info about this. I have a full domain, but am only using the html part of it at this stage to put up a website. I'm not 'using' formmail, mainly cause I have no idea what it is.

    Could you maybe give a short expolanation on replacing or renaming it. It would be much appreciated.

    Thanks all.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.