Are these cgi script infections? Is the back door just unfiltered cgi forms? So no matter how many times it is removed, they just reenter their code on a cgi form and start reinfecting again. Michael Andrews, ASC Minnesota

According to feedback from my people this infection is more far reaching then it was originally. All the pages on one particular county are infected as reported by that CC and it was only the index page before. There has got to be a computer out there that is infecting when they FTP, how can we stop that or it won't matter where we move. Someone needs to play detective here. Find out the common denominator of the infections and you will find the source. As a side note to Mike's post, all I know about other infections was when I was on Ancestry, the Adobe update window popped up and then my computer froze. I don't know if RW was affected or not but where I was at on Ancestry sure was. Karen MTGenWeb -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Tuesday, October 20, 2009 5:11 PM To: [email protected] Subject: Re: [STATE-COORD] REINFECTION Are these cgi script infections? Is the back door just unfiltered cgi forms? So no matter how many times it is removed, they just reenter their code on a cgi form and start reinfecting again. Michael Andrews, ASC Minnesota ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message