Stinger

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View


I have a computer here that has been blacklisted by our provider because it
was sending out spam email. The ISP recommends using Stinger (among other
apps) to clean it up. So I ran it and when it was finished it did not
indicate that it had found anything. My question is... is there supposed to
be a report? Could it possibly be that it just fixed it and made no mention
of it? Seems like I had that happen to me once before and the computer was
clean.

--
        --- Everybody has a right to my opinion. ---

Re: Stinger




| I have a computer here that has been blacklisted by our provider because
it
| was sending out spam email. The ISP recommends using Stinger (among other
| apps) to clean it up. So I ran it and when it was finished it did not
| indicate that it had found anything. My question is... is there supposed
to
| be a report? Could it possibly be that it just fixed it and made no
mention
| of it? Seems like I had that happen to me once before and the computer was
| clean.

| --
|         --- Everybody has a right to my opinion. ---

If McAfee Stinger found anything you would indeed know it.

What OTHER tools have you used to determine there is nothing on the PC ?

BTW:  The McAfee Stinger utility provides a small subset of what the McAfee
Module of my Multi AV Scanning Tool provides.
Try it as well as the Sophos module on the affected PC.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


Re: Stinger




Quoted text here. Click to load it

Well, as many times as you've posted a link to your Multi AV, the only one
I can find right now is in German!

--
        --- Everybody has a right to my opinion. ---

Re: Stinger






| Well, as many times as you've posted a link to your Multi AV, the only one
| I can find right now is in German!

Swiss-German  :-)


Download MULTI_AV.EXE from the URL --
http://www.pctip.ch/ds/28400/28470/Multi_AV.exe
or
http://212.98.39.7/ds/28400/28470/Multi_AV.exe

http://www.pctip.ch/downloads/dl/35905.asp
or
http://212.98.39.7/downloads/dl/35905.asp


To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Stinger




Quoted text here. Click to load it

So far I'm striking out
Sophos:
c:\RECYCLER\S-1-5-21-1229272821-651377827-725345543-1003\Dc12.exe
\SfxArchiveData\INSTMTDR.EXE\SfxArchiveData\CHALLENGE.XML (unexpected
error [0x8000ffff])
Scan aborted due to an unrecoverable error.

Kapersky downloads all the files and asks if you want to scan a specific
folder. I tried NO and then I tried C:. Either way it just went back to
the start menu. Trying McAffee now.

This has been a highly frustrating situation. These people have two
computers running through a router. Since they were spewing spam, the ISP
blacklisted the router. The other computer had quite a bit of spyware and
junk on it, so I copied off all their documents, reformatted it and put
the documents back. She took that computer home and I have the other one
here. The ISP says she is *still* spewing spam with the computer I wiped
and reinstalled Windows in. The one I have here was spewing when it was
hooked up alone to the router as well.
Stinger alone has always taken care of it on previous cases like this.

--
        --- Everybody has a right to my opinion. ---

Re: Stinger



Quoted text here. Click to load it


 You just formatted the drive? You didn't wipe the partitions and
repartition it? Possibly an MBR rootkit? You might try going to:

http://www.gmer.net /

and running GMER to see if it can find a rootkit on the system.

 Another possibility is in the "documents" you copied over for them. Were
they scanned with a good AV program? One that scans ALL files? I've been
seeing a lot of infected .wma media files lately that people have been
picking up via Limewire.



--
Rick Simon               rsimon@cris.com

Include "spam(trap)key" somewhere in the
body of any email to avoid my spam filters.

Re: Stinger




Quoted text here. Click to load it

OK. Did that. It was clean
Quoted text here. Click to load it

Yes. Ran David's Multi-AV on it.
 I've
Quoted text here. Click to load it

No music except a few mp3's. They don't have LimeWire installed.

The ISP has unblocked the router. I'll know by morning if it will stay that
way.
 

--
        --- Everybody has a right to my opinion. ---

Re: Stinger



Quoted text here. Click to load it

Not all malware is classified as a virus, so it might be worth running
something like spybot or adaware on your PC and see if that throws up
anything.
--
Brian Cryer
www.cryer.co.uk/brian


Re: Stinger



Brian Cryer wrote:

Quoted text here. Click to load it

And:
MalwareBytes Anti-Malware for home use: http://malwarebytes.org /
SUPERAntiSpyware for home use: http://superantispyware.com/

--
   -bts
   -Four wheels carry the body; two wheels move the soul

Site Timeline