from; Panda Oxygen3: "The doors of wisdom are never shut." Benjamin Franklin (1706-1790); American statesman and scientist. - Top Ten viruses and spyware most frequently detected by Panda ActiveScan in May - Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com) Madrid, June 1 2005 - As with every month, Panda Software has published its ranking of the top ten viruses most frequently detected by its online anti-malware solution, Panda ActiveScan, in May. A new version of this tool which also detects spyware has recently been made available to users. Based on this feature, Panda Software has also published the top ten spyware programs most frequently detected last month. Last month's top ten ranking of the malware that have caused the most infections includes five worms, three Trojans, an exploit and a Visual Basic script. The most widespread example of malware was the exploit Mhtredir.gen, a generic detection routine for a group of Trojans that allow remote code to be run on affected computers. This exploit is particularly dangerous if the affected user has administrator rights. The aim of Mhtredir.gen is to exploit the vulnerability reported by Microsoft in its security bulletin MS04-013. The five worms in the latest ranking include the persistent Netsky.P, a regular in this classification and the culprit of a large number of infections over the last few months, and Sober.V, which generated an Orange Alert last month due to its high level of propagation. This worm tricks users with an email message offering free tickets to the soccer 2006 World Cup in Germany. This month's results show a change in the trend over the last few months, in which the rankings of malware activity were dominated by Trojans. The full ranking of viruses, worms and Trojans is the following: Exploit/Mhtredir.gen (2.53%) W32/Netsky.P.worm (2.35%) Trj/Shinwow.E (2.12%) Trj/Qhost.gen (1.99%) W32/Sober.V.worm (1.7%) W32/Sdbot.ftp (1.6%) Trj/Downloader.BSU (1.48%) VBS/Psyme.C (1.33%) W32/Gaobot.EWU.worm (1.32%) W32/Gaobot.gen.worm (1.22%) As well as this list, a separate ranking of infections by spyware is also generated. Spyware is a type of malware designed to gather data regarding users Internet habits and preferences, which is then sent to the creators of the malware or sold on to third-parties, normally spammers. In many cases, spyware is associated to forms of adware, which modify the browser settings to redirect users to certain websites or display pop-up adverts. The classification of the most widespread spyware over the last month is as follows: Spyware/ISTbar (3.5%) Spyware/New.net (3.34%) Spyware/Cydoor (3.17%) Spyware/BetterInet (2.63%) Spyware/Altnet (2.14%) Spyware/Petro-Line (1.08%) Spyware/Dyfuca (0.87%) Spyware/MarketScore (0.63%) Spyware/BargainBuddy (0.53%) Spyware/CnsMin (0.43%) As in the previous edition of this ranking, the top spot is taken by ISTbar, a spyware program that is installed on victims' computers camouflaged as an ActiveX control and, in turn, installs other similar types of malware: spyware, adware and dialers. Additional functions include displaying pornographic pop-ups, installing a toolbar, and changing the browser home page. Another widespread spyware program is Altnet, a program associated to P2P file sharing programs that inserts advertising and unwanted links when searches are carried out in these programs. For more information about these and other malicious code, visit Panda Software's Virus Encyclopedia, at http://www.pandasoftware.com/virus_info/encyclopedia/ NOTE: The address above may not show up on your screen as a single line. This would prevent you from using the link to access the web page. If this happens, just use the 'cut' and 'paste' options to join the pieces of the URL. ------------------------------------------------------------ The 5 viruses most frequently detected by Panda ActiveScan, Panda Software's free online scanner: 1)Netsky.P; 2)Qhost.gen; 3)Mitglieder.DC; 4)Sdbot.ftp; 5)Mhtredir.gen. ------------------------------------------------------------ To contact with Panda Software, please visit: http://www.pandasoftware.com/about/contact/ ------------------------------------------------------------ *********** MIKE"S REPLY SEPARATOR *********** Mike ~ It is a good day if I learned something new. Editor MikesWhatsNews see a sample on my web page http://www3.telus.net/mikebike <mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=subscribe> http://www3.telus.net/mikebike/worm_removal.htm See my Anti-Virus pages http://virusinfo.hackfix.org/index <virusinfo-request@xxxxxxxxxxxxx?Subject=subscribe> A Technical Support Alliance and OWTA Charter Member