How to Utilize Stinger

It finds and removes threats identified under the”Threat List” option under Advanced menu choices in the Stinger program.

McAfee Stinger now detects and eliminates GameOver Zeus and CryptoLocker.

How can you use Stinger?
  • Once prompted, choose to save the document to a convenient location on your hard diskdrive, like your Desktop folder.
  • When the download is complete, browse to the folder which includes the downloaded Stinger record, and run it. If needed, click on the”Customize my scanning” link to add additional drives/directories for your scan.
  • Stinger has the ability to scan targets of Rootkits, which is not allowed by default.
  • Click on the Scan button to start scanning the given drives/directories.
  • Stinger Requires GTI File Reputation and runs community heuristics at Moderate level by default. If you choose”High” or”Very High,” McAfee Labs recommends you place the”On hazard detection” actions to”Report” just for the first scan.

    To Find out More about GTI File Reputation view the following KB articles

    KB 53735 – FAQs for Worldwide Threat Intelligence File Reputation

    KB 60224 – The best way to confirm that GTI File Reputation is set up correctly

    KB 65525 – Identification of generically detected malware (Global Threat Intelligence detections)

  • Frequently Asked Questions

    Q: I understand I have a virus, but Stinger did not detect one. What’s this?
    A: Stinger is not a substitute for an entire anti virus scanner.follow the link https://freewindows10download.com/soft/mcafee-labs-stinger-64-bit At our site It’s just designed to detect and remove certain threats.

    Q: Stinger found a virus it couldn’t fix. Why is this?
    A: This is most likely due to Windows System Restore functionality having a lock on the infected file. Windows/XP/Vista/7 consumers must disable system restore prior to scanning.

    Q: Where’s your scanning log saved and how can I see them?
    A: By default the log file is stored in where Stinger.exe is conducted. Inside Stinger, browse to the log TAB along with the logs have been displayed as list with the time stamp, clicking onto the log file name opens the file from the HTML format.

    Q: Where are the Quarantine files saved?
    A: The quarantine documents are saved under C:\Quarantine\Stinger.

    A: The Threat List provides a listing of malware which Stinger is configured to discover. This list does not comprise the results of running a scan.

    Q: Why Are there some command-line parameters available when conducting Stinger?
    A: Yes, even the command-line parameters are exhibited by going to the help menu inside Stinger.

    Q: I conducted Stinger and finally have a Stinger.opt file, what’s that?
    A: When Stinger runs it generates the Stinger.opt document that saves the current Stinger configuration. After you operate Stinger the second time, your prior configuration is used provided that the Stinger.opt file is in exactly the identical directory as Stinger.

    Is this expected behaviour?
    A: whenever the Rootkit scanning option is selected within Stinger preferences — VSCore documents (mfehidk.sys & mferkdet.sys) to a McAfee endpoint will be upgraded to 15.x. These files are set up only if newer than what’s about the machine and is needed to scan for the current generation of newer rootkits. In the event the rootkit scanning option is disabled within Stinger — that the VSCore update won’t happen.

    Q: How Does Stinger work rootkit scanning when installed via ePO?
    A: We’ve disabled rootkit scanning from the Stinger-ePO bundle to restrict the auto update of VSCore components once an admin deploys Stinger to thousands of machines. To Allow rootkit scanning in ePO mode, please use these parameters while checking in the Stinger package in ePO:

    –reportpath=%temp% –rootkit

    Q: What versions of Windows are encouraged by Stinger?
    Moreover, Stinger requires the device to get Internet Explorer 8 or above.

    Q: Which are the requirements for Stinger to perform in a Win PE surroundings?
    A: While creating a custom Windows PE picture, add support to HTML Application components utilizing the instructions supplied in this walkthrough.

    Q: How can I obtain hold for Stinger?
    An: Stinger is not a supported application. McAfee Labs makes no guarantees concerning this product.

    Q: How How do I add custom made detections into Stinger?
    A: Stinger gets the option where a user can enter upto 1000 MD5 hashes as a custom blacklist. Throughout a system scan, even if any documents match the custom blacklisted hashes – the files will get deleted and noticed. This attribute is provided to assist power users who have isolated a malware sample(s) that no detection is available however from the DAT files or GTI File Reputation. To leverage this attribute:

    1. In the Stinger port goto the Advanced –> Blacklist tab. SHA1, SHA 256 or other hash types are unsupported.
    2. During a scan, all documents that match the hash will have a detection name of Stinger! . Total dat fix is applied on the file.
    3. Files which are digitally signed with a valid certification or those hashes that are already marked as clean from GTI File Reputation will not be detected as a member of the customized blacklist. This is a security feature to prevent customers from accidentally deleting documents.

    Q: How How do run Stinger with no Real Protect component getting installed?
    A: The Stinger-ePO bundle does not fulfill Actual Protect. To Be Able to run Stinger with no Real Protect getting installed, execute Stinger.exe –ePO

    Leave a Comment

    Your email address will not be published. Required fields are marked *

    Scroll to Top