Thema: McAfee Stinger / Norman Malware Cleaner etc. ...

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1491
Build Date: 28-Apr-2015

Stinger 32bit                 MD5: 936aad40bf31ba7783a4b29e087672fc
                              SHA1: 92f860bc054d0eeb96a9e9fc06c24fc71b305f56

Stinger-ePO 32bit             MD5: 2d1de4e90df62fc5c9692aa421c3210c
                              SHA1: 653c361977f65a17daa866b80bde42622eb9ca9c

Stinger 64bit                 MD5: 9c589614c01f08d0f7ff1bb2b0f679b7
                              SHA1: 3a5f12e34be7471a7862e34b8cc58a997aa876fc

Stinger-ePO 64bit             MD5: a64dc429e7595dbad48f58bfa0da5384
                              SHA1: a4b97ead9e5d55d06d7cc5a6c9aee50a48b20e37

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:


Enhanced Detections:

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1494
Build Date: 29-Apr-2015

Stinger 32bit                 MD5: 398f2241ffae290a5dd62c4a21303cb7
                              SHA1: 98a7639b3ff5d55c5aed64e9979d4fd29e0c5c8c

Stinger-ePO 32bit             MD5: e8508a2676676e2c0665c112f54d021f
                              SHA1: a50d466610d1c9b3cdab8a1a132d7799d869138f

Stinger 64bit                 MD5: 09f833a48663014c583c415087d00966
                              SHA1: 6e93934002e1a5aa10cc616f667718fdddadfd0a

Stinger-ePO 64bit             MD5: d35584983c8a468f3604065035e0da34
                              SHA1: 17ea3735edeb8df15323293b797a5f684806e91e

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• Exploit-SWF.u


Enhanced Detections:
• Ransom-Tescrypt

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1495
Build Date: 30-Apr-2015

Stinger 32bit                 MD5: 49bbf8750406cd6ac8b1a12572e9f32e
                              SHA1: a173ec5e6210819357120c11b32eaa3e84af8deb

Stinger-ePO 32bit             MD5: d513c0ca4425d272a56cc990388e439b
                              SHA1: 09e6eff3f0049fe4fa4c826769b647c778e99b21

Stinger 64bit                 MD5: c1d9aa87ffe74b41c73844ba48e0ac71
                              SHA1: 7c88ba3798a76d5a2ecd959dd9c077ff21a6dea2

Stinger-ePO 64bit             MD5: 56f2c5d287468fe66d75342282fd39fb
                              SHA1: 331ef3811047d767e7af64a4e36fd7a019d6e5ac

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• Exploit-SWF.x


Enhanced Detections:
• Generic Trojan.j
• Ransom-O
• Ransom-Tescrypt

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1498
Build Date: 04-May-2015

Stinger 32bit                 MD5: f57910807fbc44a1f758769f71ff4eac
                              SHA1: 282e97848fd2e8aa77fae45656724d4f79861f2f

Stinger-ePO 32bit             MD5: 72db768170fa82039b628bf5a37ca126
                              SHA1: d4d5fd5b03dadeb645ca1aebc25e064e5bc4eab3

Stinger 64bit                 MD5: 69d5762491262e87f989b95091f6c81e
                              SHA1: 95b40104e3cdf6a5e4742728848b2bb892983327

Stinger-ePO 64bit             MD5: 809574571120dec48419a204355d87a2
                              SHA1: 87a1c894a5f3a6ed3f272886f35e428d4f57d468

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• Exploit-SWF.y


Enhanced Detections:
• Exploit-SWF.x
• Generic Trojan.p
• JS/Exploit-Angler.a
• JS/Exploit-Angler.e
• JS/Exploit-Angler.f
• Ransom-O
• Ransom-Tescrypt
• W32/Conficker.worm
• W32/Conficker.worm.gen.b

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1504
Build Date: 06-May-2015

Stinger 32bit                 MD5: 5043b481922ae4f057ceeaee6ff65763
                              SHA1: dd4e1bae2b2bb87552a1790b1d111270491eb1bb

Stinger-ePO 32bit             MD5: 0a2ed07a2616d7a08bb7fb20e99c2fa1
                              SHA1: 21ffb894c710ab26475d2cb61cb6c134cd8fb4ea

Stinger 64bit                 MD5: 5cc678ccabc58549be293a445042f4e6
                              SHA1: d289bfc5a14ed936ec456fb91d1c12c36bf77b4e

Stinger-ePO 64bit             MD5: 8f4b6b742d78e1ab22e5c8d5720941de
                              SHA1: 2ae57886359b71bfe33f75113f4ccd73971e519c

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• Exploit-SWF.v
• JS/Exploit-Angler.g
• JS/Exploit.h
• JS/Exploit.i


Enhanced Detections:
• Exploit-CVE2012-0158!b
• Generic PWS.o

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1507
Build Date: 07-May-2015

Stinger 32bit                 MD5: 4c7622c73b67ce6bb2aa50aa5d61be91
                              SHA1: a7088647ff18a5fb74776c01cbc372a30e8579cf

Stinger-ePO 32bit             MD5: b4e43b25c945eb42283abde39a3b0905
                              SHA1: 78fe94dacc8d50524ace326373bff469e9a0e9b2

Stinger 64bit                 MD5: 43a2868ae3625444468984c85a98a5cb
                              SHA1: d4abd1c4f33a0180825ca992b3a97c5e8324bb50

Stinger-ePO 64bit             MD5: 4e51ac615bef6387dd944efa27f83e82
                              SHA1: 20bd87d122b67bdcbd40840b67af125c08a2f967

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• JS/Exploit-Angler.h


Enhanced Detections:
• Generic PWS.o
• JS/Exploit-Angler.f

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1514
Build Date: 11-May-2015

Stinger 32bit                 MD5: b3eb1c0d65945f14f024a5fec6fea325
                              SHA1: 617b30dd51d1ca86adbac1fd5e6ae421b3b3402a

Stinger-ePO 32bit             MD5: 12d47823f13c0e54fab89f8c57f362a7
                              SHA1: dce6132214ed279d90bbf48c823691828fd2fa79

Stinger 64bit                 MD5: 2f9a15fe5c6d97bc593ca4f1769e7fca
                              SHA1: 0a4a9734408907187ee5ba3a07dd391784445963

Stinger-ePO 64bit             MD5: adbbe6577308d052bcd4fff3fae10877
                              SHA1: 6f85914394dfb4cc5a92b834452e4936fa68fb6a

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• Generic.wb
• Generic.wc


Enhanced Detections:
• Generic Trojan.i
• Generic.vz
• Generic.wb
• Ransom-O

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1523
Build Date: 12-May-2015

Stinger 32bit                 MD5: 91bc194713ebd0a3c31b5bb98ba30b53
                              SHA1: 4ebd67167730f56270a55a598d02b52065e3594f

Stinger-ePO 32bit             MD5: fb2a54ca2495b61d88f419e7c1d059b6
                              SHA1: 92f7184616fa526c3fbdf887e51cd7eaf767b1a7

Stinger 64bit                 MD5: 3d25c44cfe81d2addf76a15c9cc76713
                              SHA1: f82138990acceabbf6875dc4a341b934192bc164

Stinger-ePO 64bit             MD5: 131f7fe7c7234de123e300604afd52e5
                              SHA1: 1f8064316303f702d6469856cb27e301fd781842

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• Exploit-CVE2012-0158!c


Enhanced Detections:
• Generic PWS.o

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1524
Build Date: 13-May-2015

Stinger 32bit                 MD5: 031e51911d86100e8bc84222ce00d63f
                              SHA1: e92cf4f7483a0a06140f961a514d8fcde6f31bfc

Stinger-ePO 32bit             MD5: 72ae2daf3f252d9ad5e3247d9cd9d661
                              SHA1: 67701ddbc031affff2ac770d17590a21d88ca934

Stinger 64bit                 MD5: 3b3a8fcfe141fe0719b482cda28a0628
                              SHA1: c0d6333cfacbf73c85bb36b1bf3ed8ba9c5a2016

Stinger-ePO 64bit             MD5: f74a92973836cabf3b6c42e1177f6386
                              SHA1: a517d4107e72368bdd2ad885c9479bd80bd529d3

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• Ransom-CTB


Enhanced Detections:
• Exploit-SWF.s
• Exploit-SWF.y
• Ransom-Tescrypt!remnants

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1525
Build Date: 14-May-2015

Stinger 32bit                 MD5: 69aa79347cf76d09160de502af2f12ef
                              SHA1: 5ac3b98a37794d1f7501dec2f567db188f9a9d73

Stinger-ePO 32bit             MD5: a17d41dc14898e8f7f8d78c3f1846d27
                              SHA1: 1789463065087b503cadd24826810d03fe009179

Stinger 64bit                 MD5: 489d873a00f2e55426f9ca5d7471444f
                              SHA1: 6eae3048374468155d05a166a65ece57cecf0c97

Stinger-ePO 64bit             MD5: 34f10780043ea12718875e356cee0d4f
                              SHA1: 30bdf6a3c25dd323f81cabce99550aa0867a48f4

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• Ransom-CTB


Enhanced Detections:
• Exploit-CVE2014-1761
• Exploit-SWF.s
• Exploit-SWF.y
• JS/Exploit-Angler.f
• Ransom-Tescrypt!remnants

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1526
Build Date: 15-May-2015

Stinger 32bit                 MD5: c26340b8abf219a6f658e2741c6b282c
                              SHA1: 2f7393004639cc429bd5d8b30e91bc2169604384

Stinger-ePO 32bit             MD5: 5c9eea18189c5722cac031449840cd11
                              SHA1: 8a884e7d57ba5598e092c99a8cf9178558ace8d7

Stinger 64bit                 MD5: 78ffa35df19d1b4101e42af47deb9070
                              SHA1: 877c545163961bb739f4d65affcf19e42e32e313

Stinger-ePO 64bit             MD5: dca3868cc68164617a7ce9f4fc5e6344
                              SHA1: fb47e06ee4fb982e5edbaab3797316b75aaddc86

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:


Enhanced Detections:
• Exploit-SWF.t
• Exploit-SWF.x
• Generic PWS.o
• Ransom-O
• SWF/Exploit-Anogre.b
• W32/Autorun.worm.c

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Wer McAfees Scan-Tool "Stinger" benutzt, um seinen PC zu säubern, bekommt ungefragt einen Virenwächter im Betastadium untergeschoben. Einen Opt-Out gibt es nicht.

Stinger ist ein Standalone-Tool von McAfee zur Malware-Entfernung; sein Einsatz erfordert keinen McAfee-Virenschutz. Trotzdem installiert es ohne Hinweis oder Rückfrage einen Hintergrund-Wächter. Die Software namens Raptor soll das System in Echtzeit auf verdächtiges Verhalten hin überwachen. Sie befindet sich im Betastadium; McAfee möchte dementsprechend auch keinerlei Garantie dafür übernehmen. Dennoch wird es zwangsweise installiert, sobald der Anwender Stinger startet und die Lizenzbedingungen akzeptiert – einen Hinweis auf Raptor sucht man dort allerdings vergebens. Der Hersteller plant allerdings, es in künftige Antivirenprodukte zu integrieren.

Zumindest auf McAfees Download-Seite ist die Aussage "Includes Raptor (BETA)" zu lesen. Dass dieses Programm allerdings auf dem PC installiert wird, nach der Benutzung von Stinger auf dem Rechner aktiv bleibt und permanent Daten an McAfee sendet, verschweigt der Hersteller dort geflissentlich. Erst wer dem "Includes Raptor"-Link folgt und dann wiederum auf "How to use Raptor (BETA)" klickt, landet auf einer Seite, auf der ein paar Fragen zu Raptor beantwortet sind. Warum ein heuristischer Wächter ausgerechnet mit einem Produkt verteilt wird, das ausschließlich dazu da ist, bereits befallene Systeme zu säubern, erklärt der Hersteller auch dort nicht.

Die Software soll es auf die Erkennung von Zero-Day-Angriffen abgesehen haben und dazu auch McAfees Cloud-Dienste nutzen und vor allem mit Informationen füttern. In den FAQs relativiert McAfee, dazu werden nicht komplette Dateien hochgeladen, sondern lediglich "behavioral traces". Das seien "ein paar Bytes an Informationen, die Raptor benötigt", um die verdächtigte Datei einschätzen zu können. Die Verhaltensspur enthalte neben Dateinamen und -pfad, Prozess-ID, Event und Betriebssystemversion auch eine zufällig erzeugte GUID des Systems. Wie Raptor entscheidet, ob es Informationen über einen Prozess in die Cloud schickt, erklärt der Hersteller dort nicht; auf eine Anfrage von heise Security hat McAfee noch nicht reagiert.

Die Software lässt sich nicht über die Funktion "Programme und Features" in der Systemsteuerung deinstallieren: Sie hat dort schlicht keinen Eintrag. Raptor vom Rechner zu werfen, ist dennoch einfach. Die Anwendung stellt ein Icon in den Windows-Tray, über dessen Kontextmenü sie sich entfernen lässt – darauf muss der Anwender allerdings erst einmal kommen. Im Test mit ein paar Betriebssystemen (Windows 7 Home x64, 8.1 Pro x64 sowie ein englisches 8.1 x86) waren nach der Deinstallation keine laufenden Prozesse oder Autostart-Einträge von Raptor mehr zu finden; lediglich ein leeres Programmverzeichnis blieb zurück.

Stinger ist vor einigen Tagen bereits aus einem ähnlichen Grund bei PortableApps.com rausgeflogen. Die Erklärung von PortableApps.com-Chef Haller, dass ein Dienst namens "McAfee Validation Trust Protection Service" installiert würde, konnten wir allerdings nicht nachvollziehen; ebenso war auf unseren Testsystemen die von Haller referenzierte Datei namens mfevtps.exe nicht zu finden.

Quelle : www.heise.de

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1527
Build Date: 18-May-2015

Stinger 32bit                 MD5: 5acdbf7ec292510371af5df8e4b1bf2d
                              SHA1: 20b455b5b8f5118fd580e505455db18410c90ed8

Stinger-ePO 32bit             MD5: 1f6b9e87c24320961502bee5777d8604
                              SHA1: 2efc4ce3a41d78bd097c080508c041e5cb2a9a2e

Stinger 64bit                 MD5: 04fdce9a403a03a640056bcd79ab81e0
                              SHA1: dca6f58febaed61842df4f7d7c7b4320d0a3dffe

Stinger-ePO 64bit             MD5: 03514873f1a0b40c6b7d78484ab786a4
                              SHA1: 1936c896eb1831164928ea41472feff79fd0144c

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• Kovter


Enhanced Detections:
• Exploit-CVE2015-0311
• Exploit-CVE2015-1665
• Exploit-SWF.v
• Generic PWS.o
• JS/Exploit-Angler.g
• JS/Exploit-Angler.h
• JS/Exploit.h
• JS/Exploit.i
• Ransom-CTB


http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1532
Build Date: 19-May-2015

Stinger 32bit                 MD5: 329e81aaa5179a02164785d6147e14e6
                              SHA1: 3ec4085ab72b28916cef04b4418dad7f903d745d

Stinger-ePO 32bit             MD5: 12c5e86673764176691fc15e6c940a76
                              SHA1: 278fb0fb0146aea86bb8abdf4b40046ed1cd5d85

Stinger 64bit                 MD5: a6538312be50a1c73b1a430e0afa927b
                              SHA1: 36c22639733f7ff5359686f1561bcef75a99d3fb

Stinger-ePO 64bit             MD5: a7d0c081a7ed9e23a014106c76d693aa
                              SHA1: 825e19cfdda1745919dfee4dcd473d3dfc1fb3c9

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• ALS/Gofas
• Exploit-CVE2011-0257
• Exploit-CVE2013-1017
• Exploit-SWF.z
• JS/Exploit.j
• JS/Exploit.l
• JS/Exploit.m


Enhanced Detections:

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

[SiLæncer]

Release Notes

Code: [Auswählen]

Build Number: 12.1.0.1534
Build Date: 20-May-2015

Stinger 32bit                 MD5: 827ef108139a86e65c28c7d931219c8d
                              SHA1: 9c75989100a8e40daca7e78aac1cb316d1114aea

Stinger-ePO 32bit             MD5: 11d6733f7cf4e9560659a7cc5862da0a
                              SHA1: c571b505fdeb7a755caf67147f1c3d540ba9fe2d

Stinger 64bit                 MD5: 0020af300711c3a39bac043de721f6fd
                              SHA1: 6c7bb0a8fad0c2e5a9c386c9818d74ef5d6572c0

Stinger-ePO 64bit             MD5: 74f76c43416467b6b0178172e4a2c768
                              SHA1: 69b0e5fddc7a7c948283384625aaf0bc204360bf

   
Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

New Detections:
• JS/Exploit.n
• Trojan-CTBLocker!env


Enhanced Detections:
• Exploit-SWF.y


http://www.mcafee.com/us/downloads/free-tools/stinger.aspx