[virusinfo] Top Ten viruses and spyware most frequently detected by Panda ActiveScan in May - 06-01-05

  • From: "Mike" <mikebike@xxxxxxxxx>
  • To: virusinfo@xxxxxxxxxxxxx
  • Date: Wed, 01 Jun 2005 16:12:36 -0700

from; Panda Oxygen3:

"The doors of wisdom are never shut." 
 Benjamin Franklin (1706-1790); American statesman and scientist. 

         - Top Ten viruses and spyware most frequently 
             detected by Panda ActiveScan in May - 
 Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com) 

Madrid, June 1 2005 - As with every month, Panda Software has published its
ranking of the top ten viruses most frequently detected by its online
anti-malware solution, Panda ActiveScan, in May. A new version of this tool
which also detects spyware has recently been made available to users. Based
on this feature, Panda Software has also published the top ten spyware
programs most frequently detected last month.

Last month's top ten ranking of the malware that have caused the most
infections includes five worms, three Trojans, an exploit and a Visual
Basic script. The most widespread example of malware was the exploit
Mhtredir.gen, a generic detection routine for a group of Trojans that allow
remote code to be run on affected computers. This exploit is particularly
dangerous if the affected user has administrator rights. The aim of
Mhtredir.gen is to exploit the vulnerability reported by Microsoft in its
security bulletin MS04-013.

The five worms in the latest ranking include the persistent Netsky.P, a
regular in this classification and the culprit of a large number of
infections over the last few months, and Sober.V, which generated an Orange
Alert last month due to its high level of propagation. This worm tricks
users with an email message offering free tickets to the soccer 2006 World
Cup in Germany. 

This month's results show a change in the trend over the last few months,
in which the rankings of malware activity were dominated by Trojans.

The full ranking of viruses, worms and Trojans is the following:

Exploit/Mhtredir.gen (2.53%)
W32/Netsky.P.worm (2.35%)
Trj/Shinwow.E (2.12%)
Trj/Qhost.gen (1.99%)
W32/Sober.V.worm (1.7%)
W32/Sdbot.ftp (1.6%)
Trj/Downloader.BSU (1.48%)
VBS/Psyme.C (1.33%)
W32/Gaobot.EWU.worm (1.32%)
W32/Gaobot.gen.worm (1.22%)

As well as this list, a separate ranking of infections by spyware is also
generated. Spyware is a type of malware designed to gather data regarding
users Internet habits and preferences, which is then sent to the creators
of the malware or sold on to third-parties, normally spammers. In many
cases, spyware is associated to forms of adware, which modify the browser
settings to redirect users to certain websites or display pop-up adverts.

The classification of the most widespread spyware over the last month is as
follows:

Spyware/ISTbar (3.5%)
Spyware/New.net (3.34%)
Spyware/Cydoor  (3.17%)
Spyware/BetterInet      (2.63%)
Spyware/Altnet  (2.14%)
Spyware/Petro-Line      (1.08%)
Spyware/Dyfuca  (0.87%)
Spyware/MarketScore     (0.63%)
Spyware/BargainBuddy    (0.53%)
Spyware/CnsMin  (0.43%)

As in the previous edition of this ranking, the top spot is taken by
ISTbar, a spyware program that is installed on victims' computers
camouflaged as an ActiveX control and, in turn, installs other similar
types of malware: spyware, adware and dialers. Additional functions include
displaying pornographic pop-ups, installing a toolbar, and changing the
browser home page. Another widespread spyware program is Altnet, a program
associated to P2P file sharing programs that inserts advertising and
unwanted links when searches are carried out in these programs.

For more information about these and other malicious code, visit Panda
Software's Virus Encyclopedia, at
http://www.pandasoftware.com/virus_info/encyclopedia/

NOTE: The address above may not show up on your screen as a single line.
This would prevent you from using the link to access the web page. If this
happens, just use the 'cut' and 'paste' options to join the pieces of the
URL.

------------------------------------------------------------ 

The 5 viruses most frequently detected by Panda ActiveScan, Panda
Software's free online scanner: 1)Netsky.P; 2)Qhost.gen; 3)Mitglieder.DC;
4)Sdbot.ftp; 5)Mhtredir.gen.

------------------------------------------------------------
To contact with Panda Software, please visit:
http://www.pandasoftware.com/about/contact/
------------------------------------------------------------

*********** MIKE"S REPLY SEPARATOR  ***********
Mike ~ It is a good day if I learned something new.
Editor MikesWhatsNews see a sample on my web page
http://www3.telus.net/mikebike
<mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=subscribe>
http://www3.telus.net/mikebike/worm_removal.htm
See my Anti-Virus pages  http://virusinfo.hackfix.org/index
<virusinfo-request@xxxxxxxxxxxxx?Subject=subscribe>
A Technical Support Alliance  and OWTA Charter Member 



Other related posts:

  • » [virusinfo] Top Ten viruses and spyware most frequently detected by Panda ActiveScan in May - 06-01-05