BitDefender Releases May 2010 Threat Report

BitDefender, an Internet security company, has recently released monthly e-threat report (May 2010). The report shows that although Microsoft has removed the Windows Autorun feature from Vista SP2 and new OS, a large number of users still run the previous versions of Windows. These versions are exposed to this threat which makes it the top runner with 13.24% for May 2010.

Next come Win32.Worm.Downadup.Gen (also called Kido or Conficker) with the detection rate 5.84%. Win32.Worm.Downadup is a computer worm that depends on Microsoft Windows Server Service RPC (Remote procedure call) Handling Remote Code Execution Vulnerability (MS08-67) to spread from one system to another connected in the local network. The authors applied different approaches to accelerate the spreading pace and make it hard to remove.

Besides, the wave of bogus anti-virus scams has not flown that facilitated Trojan.FakeAV.KUE to occupy the third place with the detection rate of 5.11%. Trojan:W32/FakeAV.KUE detects the script associated with fake antivirus programs. The users might come across these programs or related fake programs while accessing malicious websites or any infected website. These scripts perform different activities on the user's computer without his knowledge and do not replicate.

Win32.Sality.OG occupied the fourth place with the detection rate of 2.68%. This malicious program attaches own encrypted codes to executable files (.exe and .scr binaries). The program installs a rootkit and removes antivirus application running on the system to hide itself.

The fifth place is taken by a newcomer Trojan.Swizzor.2 with 2.12% of the total detection rate. Trojan.Swizzor.2 has got its name for the generic detection of hidden downloader that generally arrives bundled with other software (like BitTorrent optimization tools or 3wPlayer).

Trojan.Autorun.AET ranked sixth with the detection rate of 2.02%. This permits entry into the affected system. It steals and searches for passwords saved for specific Windows services, The program blocks the process of security tools that make the system vulnerable to other malware attacks.

The seventh place was occupied by Gen:Heur.Krypt.24 (2.01%), followed by Worm.Autorun.VHG (1.97%). The ninth and tenth place on the list were taken by Gen:Variant.Rimecud.2 (1.91%) and Exploit.PDF-JS.Gen (1.76%) respectively.

Related article: BitDefender Releases March Malware List

» SPAMfighter News - 6/15/2010