Outbreak Name: Troj/Stinx-E

Outbreak Date: 11-10-05

IronPort's Virus Outbreak Filters Protect Customers from Stinx Outbreak Additional 7 Hours and 35 Minutes Protection

Background

IronPort's Virus Outbreak Filters protects customers within the critical period between the first exploit of a virus outbreak and the release of an AV signature. During the recent Stinx variant outbreak, Troj/Stinx-E, Outbreak Filters users were protected 7 hours and 35 minutes before an AV signature was available from any of the major AV vendors*. Troj/Stinx-E is a backdoor Trojan for the Windows platform. It connects to one of several IP addresses and runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer. Troj/Stinx-E can be instructed to delete, execute, and download and execute files.

Timeline

Outbreak Details & Timeline

Date November 10, 2005
Name** Troj/Stinx-E (Stinx variant)
02:50 GMT Virus Threat Level raised and protection starts
10:25 GMT First anti-virus signature publ ished*

Benefits

7 hours and 35 minutes of additional protection with Virus Outbreak Filters

*Calculated as first published alert time from any of the following vendors: Sophos, Trend Micro, Computer Associates, Kaspersky Labs, Symantec or McAfee.
** As named by Sophos.