This version of Stinger includes detection for all known variants including:
BackDoor-ALI
BackDoor-AQJ
BackDoor-AQJ.b
BackDoor-CEB
BackDoor-CEB!bat
BackDoor-CEB!hosts
BackDoor-CEB.b
BackDoor-CEB.c
BackDoor-CEB.d
BackDoor-CEB.dll
BackDoor-CEB.dr
BackDoor-CEB.e
BackDoor-CEB.f
BackDoor-CEB.sys
BackDoor-CFB
BackDoor-JZ
BackDoor-JZ.dam
BackDoor-JZ.dr
BackDoor-JZ.gen
BackDoor-JZ.gen.b
Bat/Mumu.worm
Downloader-DN.a
Downloader-DN.b
Exploit-DcomRpc
Exploit-DcomRpc.b
Exploit-DcomRpc.dll
Exploit-Lsass
Exploit-Lsass.dll
Exploit-MS04-011
Exploit-MS04-011.gen
HideWindow
HideWindow.dll
IPCScan
IRC/Flood.ap
IRC/Flood.ap.bat
IRC/Flood.ap.dr
IRC/Flood.bi
IRC/Flood.bi.dr
IRC/Flood.cd
NTServiceLoader
ProcKill
PWS-Narod
PWS-Narod.dll
PWS-Narod.gen
PWS-Sincom
PWS-Sincom.dll
PWS-Sincom.dr
W32/Anig.worm
W32/Anig.worm.dll
W32/Bagle
W32/Bagle!eml.gen
W32/Bagle!pwdzip
W32/Bagle.ad!src
W32/Bagle.dldr
W32/Bagle.dll.dr
W32/Bagle.eml
W32/Bagle.fb!pwdzip
W32/Bagle.fc!pwdzip
W32/Bagle.fd!pwdzip
W32/Bagle.fe!pwdzip
W32/Bagle.fm.dldr
W32/Bagle.gen
W32/Bagle@MM!cpl
W32/Blaster.worm
W32/Blaster.worm.k
W32/Bropia.worm
W32/Bugbear
W32/Bugbear.a.dam
W32/Bugbear.b!data
W32/Bugbear.b.dam
W32/Bugbear.gen@MM
W32/Bugbear.h@MM
W32/Bugbear@MM
W32/Deborm.worm.ah
W32/Doomjuice.worm
W32/Dumaru
W32/Dumaru.ad@MM
W32/Dumaru.al.dll
W32/Dumaru.dll
W32/Dumaru.eml
W32/Dumaru.gen
W32/Dumaru.gen@MM
W32/Dumaru.w.gen
W32/Elkern.cav
W32/Elkern.cav.c
W32/Elkern.cav.c.dam
W32/Fizzer
W32/Fizzer.dll
W32/FunLove
W32/FunLove.apd
W32/Gaobot.worm
W32/Harwig.worm
W32/IRCbot
W32/IRCbot.worm
W32/IRCbot.worm.dll
W32/Klez
W32/Klez.dam
W32/Klez.eml
W32/Klez.gen.b@MM
W32/Klez.rar
W32/Korgo.worm
W32/Lirva
W32/Lirva.c.htm
W32/Lirva.eml
W32/Lirva.htm
W32/Lirva.txt
W32/Lovgate
W32/Mimail
W32/Mimail.c@MM
W32/Mimail.c@MM
W32/Mimail.i!data
W32/Mimail.q@MM
W32/MoFei.worm
W32/MoFei.worm.dr
W32/Mumu.b.worm
W32/Mydoom
W32/Mydoom!bat
W32/Mydoom!ftp
W32/Mydoom.b!hosts
W32/Mydoom.dam
W32/Mydoom.t.dll
W32/Mytob
W32/Mytob.gen@MM
W32/Mytob.worm
W32/MyWife
W32/MyWife.dll
W32/MyWife@MM
W32/Nachi!tftpd
W32/Nachi.worm
W32/Netsky
W32/Netsky.af@MM
W32/Nimda
W32/Nimda.dam
W32/Nimda.eml
W32/Nimda.gen@MM
W32/Nimda.htm
W32/Pate
W32/Pate!dam
W32/Pate.dam
W32/Pate.dr
W32/Polip
W32/Polip!mem
W32/Polybot
W32/Polybot.bat
W32/Sasser.worm
W32/Sasser.worm!ftp
W32/Sdbot
W32/Sdbot!irc
W32/Sdbot.bat
W32/Sdbot.cli
W32/Sdbot.dll
W32/Sdbot.dr
W32/Sdbot.worm
W32/Sdbot.worm!ftp
W32/Sdbot.worm.bat.b
W32/Sdbot.worm.dr
W32/Sdbot.worm.gen
W32/Sdbot.worm.gen.a
W32/Sdbot.worm.gen.b
W32/Sdbot.worm.gen.c
W32/Sdbot.worm.gen.d
W32/Sdbot.worm.gen.e
W32/Sdbot.worm.gen.q
W32/Sober
W32/Sober!data
W32/Sober.dam
W32/Sober.eml
W32/Sober.f.dam
W32/Sober.g.dam
W32/Sober.q!spam
W32/Sober.r.dr
W32/Sober.r@MM
W32/Sobig
W32/Sobig.dam
W32/Sobig.eml
W32/Sobig.f.dam
W32/Sobig.gen@MM
W32/Spybot.worm
W32/SQLSlammer.worm
W32/Swen
W32/Swen@MM
W32/Yaha.eml
W32/Yaha.gen@MM
W32/Yaha.y@MM
W32/Yaha@MM
W32/Zafi
W32/Zafi.b.dam
W32/Zindos.worm
W32/Zotob.worm
W32/Zotob.worm!host
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.
New Detections:
- FakeAlert-Rena.bk
- FakeAlert-Rena.bl
- Generic Downloader.ko
- Generic FakeAlert.gg.gen.a
Enhanced Detections:
- Downloader-BMN.gen.f
- FakeAlert-Rena.bh
- FakeAlert-SecurityTool.bt
- FakeAlert-SysDef.b
- Generic Downloader.io
- Generic Downloader.kp
- Generic FakeAlert.ama
- W32/Autorun.worm.aabc
- W32/Autorun.worm.g
- W32/Autorun.worm.g!0BE8F32E
|
