PDA

View Full Version : OT - McAfee AVERT Stinger [v2.5.6]


siljaline
August 17th 05, 04:39 AM
<http://msmvps.com/siljaline/archive/2005/08/16/62955.aspx>

Regards,
Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

(Reply to group, as return address
is invalid - that we may all benefit)

Noel Paton
August 17th 05, 06:53 AM
About time they updated that! - I was beginning to think that it had been
left on the vine to wither!

--
Noel Paton (MS-MVP 2002-2005, Windows)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's

"siljaline" > wrote in message
...
> <http://msmvps.com/siljaline/archive/2005/08/16/62955.aspx>
>
> Regards,
> Silj
>
> --
> siljaline
>
> MS - MVP Windows (IE/OE) & Security, AH-VSOP
> _________________________________________
> Security Tools Updates
> http://aumha.net/viewforum.php?f=31
>
> (Reply to group, as return address
> is invalid - that we may all benefit)
>
>
>

Shane
August 17th 05, 11:56 AM
Notice it's twice as large as it used to be.

Mildly interesting!


Shane


"Noel Paton" > wrote in message
...
> About time they updated that! - I was beginning to think that it had been
> left on the vine to wither!
>
> --
> Noel Paton (MS-MVP 2002-2005, Windows)
>
> Nil Carborundum Illegitemi
> http://www.btinternet.com/~winnoel/millsrpch.htm
>
> http://tinyurl.com/6oztj
>
> Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
>
> "siljaline" > wrote in message
> ...
> > <http://msmvps.com/siljaline/archive/2005/08/16/62955.aspx>
> >
> > Regards,
> > Silj
> >
> > --
> > siljaline
> >
> > MS - MVP Windows (IE/OE) & Security, AH-VSOP
> > _________________________________________
> > Security Tools Updates
> > http://aumha.net/viewforum.php?f=31
> >
> > (Reply to group, as return address
> > is invalid - that we may all benefit)
> >
> >
> >
>
>

David H. Lipman
August 17th 05, 03:08 PM
From: "Noel Paton" >

| About time they updated that! - I was beginning to think that it had been
| left on the vine to wither!
|
| --
| Noel Paton (MS-MVP 2002-2005, Windows)
|
| Nil Carborundum Illegitemi
| http://www.btinternet.com/~winnoel/millsrpch.htm
|
| http://tinyurl.com/6oztj
|
| Please read http://dts-l.org/goodpost.htm on how to post messages to NG's

After 4 months I was thinking the same. However, while I don't see it was updated for new
variants of Bagle vraiants (but it might have been) they added..

W32/IRCBot.worm family (includes W32/IRCBot.worm!MS05-039)
W32/Zobot.worm family


What I found interesting was they reverted back to calling it STINGER.EXE when on 5/03/2005
they indicated "Changed default download name to "s-t-i-n-g-e-r.exe" as Sober.p terminates
"stinger" based process names"

You would think they would have kept the name "s-t-i-n-g-e-r.exe". An email to AvertLABS
Stinger support has gone unanswered.

Maybe I'll post something in the McAfee Forums.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

webster72n
August 17th 05, 08:07 PM
Thanks, Silj, woc.

Harry.


"siljaline" > wrote in message
...
> <http://msmvps.com/siljaline/archive/2005/08/16/62955.aspx>
>
> Regards,
> Silj
>
> --
> siljaline
>
> MS - MVP Windows (IE/OE) & Security, AH-VSOP
> _________________________________________
> Security Tools Updates
> http://aumha.net/viewforum.php?f=31
>
> (Reply to group, as return address
> is invalid - that we may all benefit)
>
>
>

webster72n
August 17th 05, 08:59 PM
Correction, Silj, I do have a comment:

When the stinger is finished scanning, it reports the amount of clean files,
nothing else.
I take it, for that to mean, no 'bad stuff'.
Am I correct with my assumption?

Harry.


"webster72n" > wrote in message
...
>
> Thanks, Silj, woc.
>
> Harry.
>
>
> "siljaline" > wrote in message
> ...
> > <http://msmvps.com/siljaline/archive/2005/08/16/62955.aspx>
> >
> > Regards,
> > Silj
> >
> > --
> > siljaline
> >
> > MS - MVP Windows (IE/OE) & Security, AH-VSOP
> > _________________________________________
> > Security Tools Updates
> > http://aumha.net/viewforum.php?f=31
> >
> > (Reply to group, as return address
> > is invalid - that we may all benefit)
> >
> >
> >
>
>

David H. Lipman
August 17th 05, 10:07 PM
From: "webster72n" >

|
| Correction, Silj, I do have a comment:
|
| When the stinger is finished scanning, it reports the amount of clean files,
| nothing else.
| I take it, for that to mean, no 'bad stuff'.
| Am I correct with my assumption?
|
| Harry.
|

Harry:

You have to ask ?


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

TomV
August 17th 05, 11:51 PM
Harry,

I think the operative word here is "clean." ;)

Tom

webster72n wrote:
> Correction, Silj, I do have a comment:
>
> When the stinger is finished scanning, it reports the amount of clean files,
> nothing else.
> I take it, for that to mean, no 'bad stuff'.
> Am I correct with my assumption?
>
> Harry.
>

siljaline
August 17th 05, 11:59 PM
"webster72n" wrote:
>
> Thanks, Silj, woc.

"woc" - Harry?

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

(Reply to group, as return address
is invalid - that we may all benefit)

webster72n
August 18th 05, 04:04 AM
I mad that up, Silj.
"woc" = without comment.
You think it will pass?

Harry.


"siljaline" > wrote in message
...
> "webster72n" wrote:
> >
> > Thanks, Silj, woc.
>
> "woc" - Harry?
>
> Silj
>
> --
> siljaline
>
> MS - MVP Windows (IE/OE) & Security, AH-VSOP
> _________________________________________
> Security Tools Updates
> http://aumha.net/viewforum.php?f=31
>
> (Reply to group, as return address
> is invalid - that we may all benefit)
>
>
>

webster72n
August 18th 05, 04:07 AM
Didn't see anything wrong with it, Dave.
But if it was, I apologize and promise to do better next time.

Harry.


"David H. Lipman" > wrote in message
...
> From: "webster72n" >
>
> |
> | Correction, Silj, I do have a comment:
> |
> | When the stinger is finished scanning, it reports the amount of clean
files,
> | nothing else.
> | I take it, for that to mean, no 'bad stuff'.
> | Am I correct with my assumption?
> |
> | Harry.
> |
>
> Harry:
>
> You have to ask ?
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

Shane
August 18th 05, 09:29 AM
Harry,

I was watching an episode of Blackadder Goes Forth last night. At one point
one of his men asks what to do if he should step on a mine. Blackadder says
'standard practice is to jump 200 ft into the air and scatter yourself over
a wide area'.

He might, alternatively, have said 'you have to ask?'


Shane

"webster72n" > wrote in message
...
>
> Didn't see anything wrong with it, Dave.
> But if it was, I apologize and promise to do better next time.
>
> Harry.
>
>
> "David H. Lipman" > wrote in message
> ...
>> From: "webster72n" >
>>
>> |
>> | Correction, Silj, I do have a comment:
>> |
>> | When the stinger is finished scanning, it reports the amount of clean
> files,
>> | nothing else.
>> | I take it, for that to mean, no 'bad stuff'.
>> | Am I correct with my assumption?
>> |
>> | Harry.
>> |
>>
>> Harry:
>>
>> You have to ask ?
>>
>>
>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> http://www.ik-cs.com/got-a-virus.htm
>>
>>
>
>

webster72n
August 18th 05, 01:58 PM
Shane:
Stepping on a mine?
Had no idea there were any in this area.
Have to be more careful in the future!

Harry.


"Shane" > wrote in message
...
> Harry,
>
> I was watching an episode of Blackadder Goes Forth last night. At one
point
> one of his men asks what to do if he should step on a mine. Blackadder
says
> 'standard practice is to jump 200 ft into the air and scatter yourself
over
> a wide area'.
>
> He might, alternatively, have said 'you have to ask?'
>
>
> Shane
>
> "webster72n" > wrote in message
> ...
> >
> > Didn't see anything wrong with it, Dave.
> > But if it was, I apologize and promise to do better next time.
> >
> > Harry.
> >
> >
> > "David H. Lipman" > wrote in message
> > ...
> >> From: "webster72n" >
> >>
> >> |
> >> | Correction, Silj, I do have a comment:
> >> |
> >> | When the stinger is finished scanning, it reports the amount of clean
> > files,
> >> | nothing else.
> >> | I take it, for that to mean, no 'bad stuff'.
> >> | Am I correct with my assumption?
> >> |
> >> | Harry.
> >> |
> >>
> >> Harry:
> >>
> >> You have to ask ?
> >>
> >>
> >> --
> >> Dave
> >> http://www.claymania.com/removal-trojan-adware.html
> >> http://www.ik-cs.com/got-a-virus.htm
> >>
> >>
> >
> >
>
>

Shane
August 19th 05, 12:42 AM
Plenty around here, Harry.

Lieutenant George, looking at the map, indicates an area where there are 'a
lot of mushrooms'.

Captain Blackadder: Military maps don't show features such as interesting
flora. Look in the key and you'll see what they are.

Lieutenant George: It says 'Mine'......so the mushrooms belong to the man
who made the map?



Shane


"webster72n" > wrote in message
...
> Shane:
> Stepping on a mine?
> Had no idea there were any in this area.
> Have to be more careful in the future!
>
> Harry.
>
>
> "Shane" > wrote in message
> ...
> > Harry,
> >
> > I was watching an episode of Blackadder Goes Forth last night. At one
> point
> > one of his men asks what to do if he should step on a mine. Blackadder
> says
> > 'standard practice is to jump 200 ft into the air and scatter yourself
> over
> > a wide area'.
> >
> > He might, alternatively, have said 'you have to ask?'
> >
> >
> > Shane
> >
> > "webster72n" > wrote in message
> > ...
> > >
> > > Didn't see anything wrong with it, Dave.
> > > But if it was, I apologize and promise to do better next time.
> > >
> > > Harry.
> > >
> > >
> > > "David H. Lipman" > wrote in message
> > > ...
> > >> From: "webster72n" >
> > >>
> > >> |
> > >> | Correction, Silj, I do have a comment:
> > >> |
> > >> | When the stinger is finished scanning, it reports the amount of
clean
> > > files,
> > >> | nothing else.
> > >> | I take it, for that to mean, no 'bad stuff'.
> > >> | Am I correct with my assumption?
> > >> |
> > >> | Harry.
> > >> |
> > >>
> > >> Harry:
> > >>
> > >> You have to ask ?
> > >>
> > >>
> > >> --
> > >> Dave
> > >> http://www.claymania.com/removal-trojan-adware.html
> > >> http://www.ik-cs.com/got-a-virus.htm
> > >>
> > >>
> > >
> > >
> >
> >
>
>

David H. Lipman
August 19th 05, 02:22 AM
From: "Shane" >

| Plenty around here, Harry.
|
| Lieutenant George, looking at the map, indicates an area where there are 'a
| lot of mushrooms'.
|
| Captain Blackadder: Military maps don't show features such as interesting
| flora. Look in the key and you'll see what they are.
|
| Lieutenant George: It says 'Mine'......so the mushrooms belong to the man
| who made the map?
|
| Shane

And General Electric says "Shut the refrigerator door - please. The 'shrooms will go bad"
;-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Shane
August 19th 05, 06:36 AM
"David H. Lipman" > wrote in message
...
> From: "Shane" >
>
> | Plenty around here, Harry.
> |
> | Lieutenant George, looking at the map, indicates an area where there are
> 'a
> | lot of mushrooms'.
> |
> | Captain Blackadder: Military maps don't show features such as
> interesting
> | flora. Look in the key and you'll see what they are.
> |
> | Lieutenant George: It says 'Mine'......so the mushrooms belong to the
> man
> | who made the map?
> |
> | Shane
>
> And General Electric says "Shut the refrigerator door - please. The
> 'shrooms will go bad"
> ;-)
>

Best put 'em in the freezer then!




Shane

Joan Archer
August 19th 05, 12:01 PM
<lol> Brilliant series <g>
Joan

Shane wrote:
> Plenty around here, Harry.
>
> Lieutenant George, looking at the map, indicates an area where there
> are 'a lot of mushrooms'.
>
> Captain Blackadder: Military maps don't show features such as
> interesting flora. Look in the key and you'll see what they are.
>
> Lieutenant George: It says 'Mine'......so the mushrooms belong to the
> man who made the map?
>
>
>
> Shane
>

webster72n
August 19th 05, 03:48 PM
The only thing to worry about then would be, the electric being shut off for
a longer period of time.
That's not going to happen, is it?

Harry.


"Shane" > wrote in message
...
>
> "David H. Lipman" > wrote in message
> ...
> > From: "Shane" >
> >
> > | Plenty around here, Harry.
> > |
> > | Lieutenant George, looking at the map, indicates an area where there
are
> > 'a
> > | lot of mushrooms'.
> > |
> > | Captain Blackadder: Military maps don't show features such as
> > interesting
> > | flora. Look in the key and you'll see what they are.
> > |
> > | Lieutenant George: It says 'Mine'......so the mushrooms belong to the
> > man
> > | who made the map?
> > |
> > | Shane
> >
> > And General Electric says "Shut the refrigerator door - please. The
> > 'shrooms will go bad"
> > ;-)
> >
>
> Best put 'em in the freezer then!
>
>
>
>
> Shane
>
>