[Snort-sigs] Does anyone have a Virus Signature for the "mnsvc.exe"downloadable trojan yet?
JCoyne at ...523...
Wed Apr 17 11:21:06 EDT 2002
sulfnbk.exe is going to be there regardless, It's part of the OS
> -----Original Message-----
> From: snort-sigs-admin at lists.sourceforge.net
> [mailto:snort-sigs-admin at lists.sourceforge.net]On Behalf Of Hugo van der
> Sent: Wednesday, April 17, 2002 12:56 PM
> To: snort-sigs mailinglist
> Subject: Re: [Snort-sigs] Does anyone have a Virus Signature for the
> "mnsvc.exe"downloadable trojan yet?
> On Wed, 17 Apr 2002 e.security at ...495... wrote:
> > We detected the presence of a file called "mnsvc.exe" as a downloadable
> > trojan this week. So far, Symantec has not published anything for this,
> > nor have any of the other Antivirus sites.
> > I am unsure of how this virus spreads, but please comment if
> you have seen
> > similar.
> I would suggest you check if sulfnbk.exe is present as well.
> Then checkout: http://hoaxinfo.com/sulfnbk.htm
> Please verify it is what you said. In case of doubt send it to
> the various
> addresses that are there to round up suspects. (Like: support at ...525...)
> All email send to me is bound to the rules described on my homepage.
> hvdkooij at ...481... http://hvdkooij.xs4all.nl/
> Don't meddle in the affairs of sysadmins,
> for they are subtle and quick to anger.
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
More information about the Snort-sigs