Stinger is a stand-alone utility used to detect and remove specific viruses. It is not a substitute for full anti-virus protection, but rather a tool to assist administrators and users when dealing with an infected system. Stinger utilizes next generation scan engine technology, including process scanning, digitally signed DAT files, and scan performance optimizations.
New releases of Stinger contain all families, and associated families, of threats that have achieved a Medium of higher Risk Asssessment. This Stinger is only updated upon the discovery of a new Medium or higher threat.
This version of Stinger includes specific detection and repair for W32/Polip only. At this time, because of the nature of the infection algorithm, repair of files infected with W32/Polip may not return the files to their pristine, pre-infected state, and can cause problems with self-checking applications.
Stinger includes detection for all known variants:
* W32/Anig.worm, -W32/Bagle, -Exploit-DcomRpc, -Exploit-Lsass,
* IRC/Flood.ap, -IRC/Flood.bi, -IRC/Flood.cd, -PWS-Narod,
* W32/Sdbot.worm.gen, -BackDoor-JZ, -BackDoor-AQJ,
* BackDoor-CFB, -Backdoor-CEB, -Bat/Mumu.worm; -IPCScan;
* NTServiceLoader; -PWS-Sincom.dll; -W32/SQLSlammer.worm;
* W32/Bagle.bf - .bg@MM; -W32/Bagle.bl@MM; -W32/Bagle.bj - .bk@MM;
* W32/Bagle.bi - bn@MM; -W32/Bagle.dldr; -W32/Bagle.bo - bt@MM;
* W32/Bagle.cc - .dd; -W32/Blaster.worm; -W32/Bropia.worm.a - .p;
* W32/Bropia.worm.bx/by; -W32/Bropia.worm.q - .u;
* W32/Bropia.worm.q - aj; -W32/Bugbear@MM; -W32/Bugbear.j@MM;
* W32/Deborm.worm.gen; -W32/Dumaru; -W32/Dumaru.bd - bg@MM;
* W32/Elkern.cav; -W32/Fizzer.gen@MM; -W32/FunLove;
* W32/IRCBot.worm; -W32/Klez; -W32/Lirva; -W32/Lovgate;
* W32/Lovgate.aq@MM; -W32/Lovgate.ar@MM; -W32/Korgo.worm;
* W32/Korgo.worm.aa.dam; -W32/Korgo.ag - .ai; -W32/Korgo.worm.ae;
* W32/Korgo.worm.aj; -W32/Mimail; -W32/MoFei.worm; -W32/Mumu.b.worm;
* W32/Doomjuice.worm; -W32/Mydoom; -W32/Mydoom.ad - .ah@MM;
* W32/Mydoom.an@MM; -W32/Mydoom.ao - bb@MM; -W32/Mydoom.bc - bd@MM;
* W32/Mydoom.be@MM; -W32/Mydoom.bf - bi@MM; W32/Mydoom.bw@MM;
* W32/Nachi.worm; -W32/Netsky; -W32/Netsky.ag@MM; -W32/Nimda;
* W32/Nimda.u@MM;-W32/Bagle.ba - .bd@MM, -W32/Bagle.bh - bm@MM;
* W32/Netsky.ah - .ai@MM, -W32/Pate; -W32/Pate.d; -W32/Sasser.worm;
* W32/Sasser.worm.g; -W32/SirCam@MM, -W32/Sobig; -W32/Sober;
* W32/Sober.j@MM, -W32/Sober.k@MM, W32/Sober.l@MM;
* W32/Sober.m - .p@MM; W32/Sober.r@MM; -W32/Swen@MM; -W32/Yaha@MM;
* W32/Zafi; -W32/Zafi.c@MM; -W32/Zafi.d@MM; -W32/Zafi.e@MM;
* W32/Zindos.worm; - W32/Zobot.worm
Windows ME and XP utilize a restore utility that backs up selected files automatically to the C:\_Restore folder. This means that an infected file could be stored there as a backup file, and VirusScan will be unable to delete these files. You must disable the System Restore Utility to remove the infected files from the C:\_Restore folder. |
发表于 2008-9-8 01:44:04