Re: Home Page Hijacked!!

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: PA Bear (PABear_at_mvps.org)
Date: 10/17/04


Date: Sun, 17 Oct 2004 02:08:29 -0400

Give it a rest, please, David. We're here to help others, not criticize
those trying to offer help. If you want to append my posts with your
comments or alternate suggestions, please do so.

I find Stinger to be a useful, general tool to rule /out/ those Trojans. I
don't claim it to be an "investigational tool"; I recommend it to eliminate
some likely possibilities.

Furthermore, I've found most posters don't have the understanding to use
Sysclean correctly or effectively (or the patience to learn).

-- 
~PA Bear
David H. Lipman wrote:
> I see you have learned NOTHING.  As I have previously stated, Stinger is
> NOT an investigational tool since it ONLY targets ~45 infectors (and
> their bariants) while Trend Sysclean is a tool based around standard
> Trend Pattern Files.  Trend Sysclean is a broad-spectrum virus, worm and
> Trojan removal tool.  The number of infectors targeted by Sysclean grows
> as a function of the release of new Pattern Files and the number of
> infectors addded to the Pattern Files.  It should also be noted that the
> sysclean Damage Cleanup Engine is updated periodically
>
> You have Stinger listed under the header of Trojans.  The majority of
> infectors that Stinger targets just so happens to be Internet worms.  The
> Trojans that Stingers targets are Trojans that are "associated" or work
> in companion with Internet worms.
>
> BackDoor-AQJ -- Trojan -- http://vil.nai.com/vil/content/v_101702.htm
> BackDoor-CFB --  Trojan -- http://vil.nai.com/vil/content/v_126106.htm
> BackDoor-CHR -- Trojan -- http://vil.nai.com/vil/content/v_127617.htm
> BackDoor-JZ -- Trojan -- http://vil.nai.com/vil/content/v_98963.htm
> Bat/Mumu.worm -- worm -- http://vil.nai.com/vil/content/v_100349.htm
> Exploit-DcomRpc -- Trojan -- http://vil.nai.com/vil/content/v_100516.htm
> IPCScan -- Trojan -- http://vil.nai.com/vil/content/v_108749.htm
> IRC/Flood.ap -- Trojan -- http://vil.nai.com/vil/content/v_111930.htm
> IRC/Flood.bi -- Trojan -- http://vil.nai.com/vil/content/v_100023.htm
> IRC/Flood.cd -- Trojan -- http://vil.nai.com/vil/content/v_100327.htm
> NTServiceLoader -- Program -- http://vil.nai.com/vil/content/v_116783.htm
> PWS-Narod -- Trojan -- http://vil.nai.com/vil/content/v_100477.htm
> PWS-Sincom.dll --  Trojan -- http://vil.nai.com/vil/content/v_117412.htm
> W32/Anig.worm -- worm -- http://vil.nai.com/vil/content/v_100990.htm
> W32/Bagle@MM -- worm -- http://vil.nai.com/vil/content/v_101164.htm
> W32/Blaster.worm (Lovsan) -- worm --
> http://vil.nai.com/vil/content/v_100547.htm W32/Bugbear@MM -- worm --
> http://vil.nai.com/vil/content/v_99728.htm
> W32/Deborm.worm.gen -- worm -- http://vil.nai.com/vil/content/v_100143.htm
> W32/Doomjuice.worm -- worm -- http://vil.nai.com/vil/content/v_101002.htm
> W32/Dumaru -- worm -- http://vil.nai.com/vil/content/v_100560.htm
> W32/Elkern.cav --
> W32/Fizzer.gen@MM --
> W32/FunLove --
> W32/Klez --
> W32/Korgo.worm --
> W32/Lirva --
> W32/Lovgate --
> W32/Mimail --
> W32/MoFei.worm --
> W32/Mumu.b.worm --
> W32/MyDoom --
> W32/Nachi.worm --
> W32/Netsky --
> W32/Nimda --
> W32/Pate --
> W32/Polybot --
> W32/Sasser.worm --
> W32/SirCam@MM --
> W32/Sober --
> W32/Sobig --
> W32/SQLSlammer.worm --
> W32/Swen@MM --
> W32/Yaha@MM --
> W32/Zafi --
> W32/Zindos.worm --
>
>
>
>
> If you can not provide current and proper virus and parasite removal
> information, please send the OP to those who do at:
>
> microsoft.public.scripting.virus.discussion
> microsoft.public.security.virus
> alt.comp.virus
> alt.comp.anti-virus
>
>
> Dave
>
>
> "PA Bear" <PABear@mvps.org> wrote in message
> news:ubNi95xsEHA.224@TK2MSFTNGP15.phx.gbl...
>
> > A. Trojans
> >
> > 1. Check in at Windows Update and install all critical updates & reboot.
> >
> > 2. Download and run Stinger (http://vil.nai.com/vil/stinger/); then... 


Relevant Pages

  • Re: Home Page Hijacked!!
    ... The number of infectors targeted by ... You have Stinger listed under the header of Trojans. ... targets just so happens to be Internet worms. ...
    (microsoft.public.windowsxp.general)
  • Re: 2 or more AV programs a good idea??
    ... Stinger and sysclean are removal tools. ... command line scanner is an "On Demand" scanner and will not interfere with an Anti Virus ... In the case of Stinger, ... comes out or if McAfee decides to add a new infector to its list of targeted infectors. ...
    (microsoft.public.security.virus)
  • Re: Help! IE Hijacked with malware
    ... Please change your set of instructions in reference to McAfee Stinger. ... Stinger only targets ~45 infectors and their variants. ... It is far better to suggest Trend Sysclean. ...
    (microsoft.public.windowsxp.general)
  • Re: iexpIorer.exe ..new virus? What is it?
    ... >Trojans and worms) while Stinger has a limitation of 33 Internet worms. ... If the Online scan ...
    (microsoft.public.security.virus)
  • Re: XP Pro slow bootup
    ... Stinger is NOT a cure-all. ... It is not really for Trojans. ... It is McAfee's Internet worm ...
    (microsoft.public.security.virus)