McAfee AVERT Stinger
Stinger is a stand-alone utility used to detect and remove specific viruses.
It is not a substitute for full anti-virus protection, but rather a tool
to assist administrators and users when dealing with an infected system.
Stinger utilizes next generation scan engine technology, including process
scanning, digitally signed DAT files, and scan performance optimizations.
How do I use Stinger?
- Download
stng260.exe v2.6 [1,122,311 bytes] (02/25/2007)
NOTE: The file has been renamed to circumvent anti-stinger tactics used by Sober@MM!M681- Download ePOStg256.Zip EPO deployable version (for EPO administrators), EPO 3.6 is not currently supported. Instructions for EPO 2.5X and EPO 3.X are available.
This version of Stinger includes detection for all known variants, as of November 22, 2005:BackDoor-AQJ BackDoor-ALI BackDoor-CEB BackDoor-JZ Bat/Mumu.worm Downloader-DN.a Exploit-DcomRpc Exploit-LSASS Exploit-MS04-011 HideWindow IPCScan IRC/Flood.ap.dr IRC/Flood.bi.dr IRC/Flood.cd NTServiceLoader ProcKill PWS-Narod PWS-Sincom.dll W32/Anig.worm W32/Bagle@MM W32/Blaster.worm (Lovsan) W32/Bropia.worm W32/Bugbear@MM W32/Deborm.worm.gen W32/Doomjuice.worm W32/Dumaru W32/Elkern.cav W32/Fizzer.gen@MM W32/FunLove W32/IRCbot.worm W32/Klez W32/Korgo.worm W32/Lirva W32/Lovgate W32/Mimail W32/MoFei.worm W32/Mumu.b.worm W32/MyDoom W32/Nachi.worm W32/Netsky W32/Nimda W32/Pate W32/Polybot W32/Sasser.worm W32/Sdbot.worm.gen W32/SirCam@MM W32/Sober W32/Sobig W32/SQLSlammer.worm W32/Swen@MM W32/Yaha@MM W32/Zafi W32/Zindos.worm W32/Zotob.worm - When prompted, choose to save the file to a convenient location on
your hard disk (such as your Desktop folder).
- When the download is complete, navigate to the folder that contains
the downloaded Stinger file, and run it. WindowsME/XP
users read
this first.
- The Stinger interface will be displayed.
- If necessary, click the Add or Browse button to add additional drives/directories to scan. By default the C: drive will be scanned.
- Click the Scan Now button to begin scanning the specified drives/directories.
- By default Stinger will repair all infected files found.
Frequently Asked Questions
- What is the List Viruses button used for?
- A list of the viruses that stinger is configured to detect is displayed when pressing the List Viruses button. This virus list does not contain the results from running a scan.
- How do I save the scan results to a log file?
- Click the File menu and select Save report to file
- I know I have a virus, but Stinger did not detect one. Why is this?
- Stinger is not a substitute for a full anti-virus scanner. It is only designed to detect and remove specific threats.
- How can I get support for Stinger?
- Stinger is not a supported application. AVERT makes no guarantees about this product.
- Stinger found a virus that it couldn't repair. Why is this?
- This is most likely due to Windows System Restore functionality having a lock on the infected file. WindowsME/XP users should disable system restore prior to scanning.
- Are there any command-line parameters available when running Stinger?
- Yes, the parameters are displayed when passing Stinger the
/? switch:
- /ADL - Scan all local drives.
- /GO - Start scanning immediately.
- /LOG - Save the log file after scans.
- /SILENT - Do not display graphical interface.
- Yes, the parameters are displayed when passing Stinger the
/? switch:
- I ran Stinger and now have a Stinger.opt file, what is that?
- When Stinger runs it creates the Stinger.opt file that saves the current Stinger configuration. This way when you run Stinger the next time your previous configuration is what is used, as long as the Stinger.opt file is in the same directory as Stinger
- Where can I send feedback to regarding Stinger?
- Send your feedback to Stinger@avertlabs.com
Recent Update History
- 10/05/2005
- Added W32/Bagle.cc - .dd
- Added W32/Bropia.worm.bx/by
- Added W32/Korgo.worm.aj
- Added W32/Lovgate.ar@MM
- Added W32/Mydoom.bw@MM
- Added W32/Sober.r@MM
- Added W32/Zafi.e@MM
- Changed default download name to "s_t_i_n_g_e_r.exe" as Sober.r terminates "stinger" based process names
- 8/17/2005
- Added Stinger 2.5.6 for ePO
- 8/16/2005
- Added W32/IRCBot.worm family (includes W32/IRCBot.worm!MS05-039)
- Added W32/Zobot.worm family
- 5/03/2005
- Changed default download name to "s-t-i-n-g-e-r.exe" as Sober.p terminates "stinger" based process names
- 5/02/2005
- Added W32/Bagle.bo - bt@MM
- Added W32/Bropia.worm.q - aj
- Added W32/Sober.m - .p@MM
- Changed default download name to ST1NGER.EXE as Sober.p terminates "stinger" based process names
- 3/01/2005
- Added W32/Bagle.dldr
- Added W32/Bagle.bi - bn@MM
- Added W32/Bropia.worm.q - .u
- Added W32/Mydoom.bf - bi@MM
- 2/21/2005
- Added W32/Mydoom.be@MM
- Added W32/Sober.l@MM
- 2/18/2005
- Added W32/Mydoom.bc - bd@MM
- Added W32/Bropia.worm.a - .p
- 2/16/2005
- Added W32/Bagle.bh - bm@MM
- Added W32/Dumaru.bd - bg@MM
- Added W32/Mydoom.ao - bb@MM
- Added W32/Nimda.u@MM
- 1/03/2005
- Increased expiration date
Full credit for this section of our website goes to Network Associates. The full information was taken from their website. This information is posted here to help our guests and users find a collaborative amount of information within one area.
Remove Spyware - Prevent New Spyware From Installing
Spyware's Most Wanted
The How-To-Guide on Spyware Removal and Preventative Maintenance
All rights reserved and all copyrights are registered to their respectful owners.