Strange Email Messages

[Blackcat]

I have received a dozen of this messages in my outlook:

 

-----------------------------------------------------

Sender: 45u1P3VLoI@blackcat.bloggy.biz

 

Title: http://www.blackcat.bloggy.biz/cgi-sys/formmail.pl (80.196.176.170:80) bcc: blasterattacko@aol.comRcpAT7 3Z 1x IbBD fHM0dkCof jf9NJq2c 7qsA37 s kKHiNEOZ0iTMM NF fPPJ 7xT9c lX m W9I h9oSkry e2uÿFFFFCCabcdefghijklmnopqrstuvqxyz.

 

Message: body: Rcp

AT7 3Z 1x IbBD fHM0dkCof jf9NJq2c

7qsA37 s k

KHiNEOZ0iTMM NF fPPJ 7xT9c lX

m W9I h9oSkry e2uÿFFFFCCabcdefghijklmnopqrstuvqxyz

-----------------------------------------------------

 

Is this a kind of spam? Virus? Any idea? I do not have any formmail on my site for this address, and i did not use it for any operation in the web...

[MikeJ]

Actually you do have a formmail clone installed:

 

http://www.blackcat.bloggy.biz/cgi-sys/formmail.pl

FormMail-Clone

 

This is FormMail-clone, a clone of FormMail.cgi. It is a clean room version for legal purposes (a less restrictive liscense), but should behave the exact same way as Matt Wright's Original, but contain none of his code.

 

If you aren't using it, you should remove it.

[Blackcat]

Thanks Mike but... l never installed anything, and, most of all, l do not know how to remove it!!!

 

I couldn't find that file in my file manager, nor any indication in my CPanel.

[MikeJ]

Ahh...sorry, I didn't notice the "cgi-sys". That's a system alias. Submit a support ticket to have a tech investigate that server for abuse and possibly remove that script from the system.

[Blackcat]

Ok, thanks!!!

[TCH-Rick]

I have disabled the script on the server. If you try and access it now it will return a 500 Error.

[Blackcat]

I have disabled the script on the server. If you try and access it now it will return a 500 Error.

Ooppsss, so disregard my ticket, thank you Rick!!! Thumbs Up