This version of Stinger includes detection for all known variants, as of September 17, 2008: Variant Names:
AdClicker-EV, AFXRootkit, Apropos, BackDoor-ALI, BackDoor-AQJ, BackDoor-AQJ.b, BackDoor-AWQ, BackDoor-AXO, BackDoor-BAC, BackDoor-CEB, BackDoor-CEB!bat, BackDoor-CEB!hosts, BackDoor-CEB.b, BackDoor-CEB.c, BackDoor-CEB.d, BackDoor-CEB.dll, BackDoor-CEB.dr, BackDoor-CEB.e, BackDoor-CEB.f, BackDoor-CEB.sys, BackDoor-CFB, BackDoor-CSX, BackDoor-CSY, BackDoor-CUX, BackDoor-CWD, BackDoor-DIX, BackDoor-DJF, BackDoor-DJZ, BackDoor-JZ, BackDoor-JZ.dam, BackDoor-JZ.dr, BackDoor-JZ.gen, BackDoor-JZ.gen.b, Bat/Mumu.worm, Cleanup, CoreFlood, Coreflood!psexec, Coreflood.dldr, CoreFlood.dll, CoreFlood.dr, Cutwail, Danmec, Downloader-AUE, Downloader-BAI, Downloader-DN.a, Downloader-DN.b, Downloader-UA, Downloader-ZQ, Exploit-DcomRpc, Exploit-DcomRpc.b, Exploit-DcomRpc.dll, Exploit-Lsass, Exploit-Lsass.dll, Exploit-MS04-011, Exploit-MS04-011.gen, Exploit-MSExcel.k, Exploit-MSExcel.l, Exploit-MSExcel.m, Exploit-MSExcel.n, Exploit-MSExcel.o, Exploit-MSExcel.p, Exploit-MSExcel.q, Exploit-MSExcel.r, Exploit-PDF.b, FakeAlert-AO, Fribet, Generic RootKit.a, Generic Rootkit.d, Generic RootKit.e, Generic RootKit.f, Generic!atr, HackerDefender, HE4Hook, Hidden-Process.a, HideVault!sys, HideWindow, HideWindow.dll, HTool-T2W, IPCScan, IRC/Flood.ap, IRC/Flood.ap.bat, IRC/Flood.ap.dr, IRC/Flood.bi, IRC/Flood.bi.dr, IRC/Flood.cd, JS/Downloader-AUE, MadCodeHook, NTRootkit-E, NTRootKit-H, NTRootKit-J, NTRootkit-S, NTRootkit-U, NTRootkit-Z, NTServiceLoader, Patched-Import, ProcKill, Proxy-Agent.af, Proxy-Agent.af.dr, Puper, PWS-Banker.dldr, PWS-FireMing, PWS-FireMing.dll, PWS-FireMing.dr, PWS-Gamania.gen.a, PWS-Gogo, PWS-Goldun, PWS-LDPinch, PWS-Narod, PWS-Narod.dll, PWS-Narod.gen, PWS-Progent, PWS-Sincom, PWS-Sincom.dll, PWS-Sincom.dr, Qoolaid.a, rootkit, RootKit-NTIllusion, Rustock, Spam-Mailbot.c, Spy-Agent.bv, Spy-Agent.bw, Srizbi, StealthMBR, Vanquish, Vanti, W32/Almanahe, W32/Almanahe.a, W32/Anig.worm, W32/Anig.worm.dll, W32/Bagle, W32/Bagle!eml.gen, W32/Bagle!pwdzip, W32/Bagle.ad!src, W32/Bagle.dldr, W32/Bagle.dll.dr, W32/Bagle.eml, W32/Bagle.fb!pwdzip, W32/Bagle.fc!pwdzip, W32/Bagle.fd!pwdzip, W32/Bagle.fe!pwdzip, W32/Bagle.fm.dldr, W32/Bagle.gen, W32/Bagle@MM!cpl, W32/Blaster.worm, W32/Blaster.worm.k, W32/Bropia.worm, W32/Bugbear, W32/Bugbear.a.dam, W32/Bugbear.b!data, W32/Bugbear.b.dam, W32/Bugbear.gen@MM, W32/Bugbear.h@MM, W32/Bugbear@MM, W32/Deborm.worm.ah, W32/Deborm.worm.gen, W32/Doomjuice.worm, W32/Dumaru, W32/Dumaru.ad@MM, W32/Dumaru.al.dll, W32/Dumaru.dll, W32/Dumaru.eml, W32/Dumaru.gen, W32/Dumaru.gen@MM, W32/Dumaru.w.gen, W32/Elkern.cav, W32/Elkern.cav.c, W32/Elkern.cav.c.dam, W32/Feebs, W32/Fizzer, W32/Fizzer.dll, W32/Fujacks!htm, W32/FunLove, W32/FunLove.apd, W32/Gaobot.worm, W32/Harwig.worm, W32/IRCbot, W32/IRCbot.worm, W32/IRCbot.worm.dll, W32/Klez, W32/Klez.dam, W32/Klez.eml, W32/Klez.gen.b@MM, W32/Klez.rar, W32/Korgo.worm, W32/Lirva, W32/Lirva.c.htm, W32/Lirva.eml, W32/Lirva.gen@MM, W32/Lirva.htm, W32/Lirva.txt, W32/Lovgate, W32/Lurker, W32/Maslan, W32/Mimail, W32/Mimail.c@MM, W32/Mimail.i!data, W32/Mimail.q@MM, W32/MoFei.worm, W32/MoFei.worm.dr, W32/Mumu.b.worm, W32/Mydoom, W32/Mydoom!bat, W32/Mydoom!ftp, W32/Mydoom.b!hosts, W32/Mydoom.dam, W32/Mydoom.t.dll, W32/Mytob, W32/Mytob.gen@MM, W32/Mytob.worm, W32/MyWife, W32/MyWife.dll, W32/MyWife@MM, W32/Nachi!tftpd, W32/Nachi.worm, W32/Netsky, W32/Netsky.af@MM, W32/Nimda, W32/Nimda.dam, W32/Nimda.eml, W32/Nimda.gen@MM, W32/Nimda.htm, W32/Nuwar, W32/Nuwar.dam, W32/Nuwar.sys, W32/Nuwar@MM, W32/Nuwar@MM!rar, W32/Pate, W32/Pate!dam, W32/Pate.dam, W32/Pate.dr, W32/Polip, W32/Polip!mem, W32/Polybot, W32/Polybot.bat, W32/Sality, W32/Sality!dam, W32/Sality!mem, W32/Sality.dll, W32/Sality.gen, W32/Sality.stub, W32/Sasser.worm, W32/Sasser.worm!ftp, W32/Sdbot, W32/Sdbot!irc, W32/Sdbot.bat, W32/Sdbot.cli, W32/Sdbot.dll, W32/Sdbot.dr, W32/Sdbot.worm, W32/Sdbot.worm!ftp, W32/Sdbot.worm.bat.b, W32/Sdbot.worm.dr, W32/Sdbot.worm.gen, W32/Sdbot.worm.gen.a, W32/Sdbot.worm.gen.b, W32/Sdbot.worm.gen.c, W32/Sdbot.worm.gen.d, W32/Sdbot.worm.gen.e, W32/Sdbot.worm.gen.q, W32/Sober, W32/Sober!data, W32/Sober.dam, W32/Sober.eml, W32/Sober.f.dam, W32/Sober.g.dam, W32/Sober.q!spam, W32/Sober.r.dr, W32/Sober.r@MM, W32/Sobig, W32/Sobig.dam, W32/Sobig.eml, W32/Sobig.f.dam, W32/Sobig.gen@MM, W32/Spybot.worm, W32/SQLSlammer.worm, W32/Swen, W32/Swen@MM, W32/Virut, W32/Virut!mem, W32/Yaha.eml, W32/Yaha.gen@MM, W32/Yaha.y@MM, W32/Yaha@MM, W32/Zafi, W32/Zafi.b.dam, W32/Zindos.worm, W32/Zotob.worm, W32/Zotob.worm
|
