[Snort-sigs] Does anyone have a Virus Signature for the "mnsvc.exe"downloadable trojan yet?

Jim Coyne JCoyne at ...523...
Wed Apr 17 11:21:06 EDT 2002


sulfnbk.exe is going to be there regardless, It's part of the OS

> -----Original Message-----
> From: snort-sigs-admin at lists.sourceforge.net
> [mailto:snort-sigs-admin at lists.sourceforge.net]On Behalf Of Hugo van der
> Kooij
> Sent: Wednesday, April 17, 2002 12:56 PM
> To: snort-sigs mailinglist
> Subject: Re: [Snort-sigs] Does anyone have a Virus Signature for the
> "mnsvc.exe"downloadable trojan yet?
>
>
> On Wed, 17 Apr 2002 e.security at ...495... wrote:
>
> > We detected the presence of a file called "mnsvc.exe" as a downloadable
> > trojan this week.  So far, Symantec has not published anything for this,
> > nor have any of the other Antivirus sites.
> >
> > I am unsure of how this virus spreads, but please comment if
> you have seen
> > similar.
>
> I would suggest you check if sulfnbk.exe is present as well.
>
> Then checkout: http://hoaxinfo.com/sulfnbk.htm
>
> Please verify it is what you said. In case of doubt send it to
> the various
> addresses that are there to round up suspects. (Like: support at ...525...)
>
> Hugo.
>
> --
> All email send to me is bound to the rules described on my homepage.
>     hvdkooij at ...481...		http://hvdkooij.xs4all.nl/
> 	    Don't meddle in the affairs of sysadmins,
> 	    for they are subtle and quick to anger.
>
>
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>





More information about the Snort-sigs mailing list