Trojans Lead Sunbelt’s March 2010 Report
On April 6, 2010, Sunbelt Software, a provider of Windows security software, declared the ten most prevalent malware threats for March 2010. The list reveals the consistent dominance of Trojan horse programs circulating on the Web and increasing trend of generic and behavior-based findings in antivirus detections.
The top two malware detections - Trojan.Win32.Generic!BT (31.07%) and Trojan-Spy.Win32.Zbot.gen (4.97%) - constituted more than a third of all the detections. Moreover, 50% of all the detections for March 2010 was made up by the top ten malware.
INF.Autorun (v) at the fifth spot and BehavesLike.Win32.Malware (v) at the sixth spot replaced Trojan.Win32.Agent and Trojan-Spy.Win32.Zbot.gen (v), which slipped down in the list. INF.Autorun is a generic family of malware employing Autorun.inf files to automatically launch trojans, backdoors, and Trojan downloaders when user access some particular files or folders. After execution, these harmful files will usually install extra malware into the hacked system.
BehavesLike.Win32.Malware (v) (1.47%) shows behaviors that are usually seen in relation with the malware attacks.
In addition, Trojan.Win32.Malware (1.37%), Trojan.ASF.Wimad (v) (1.23%) and Virtumonde (1.21%) acquired the eighth, ninth and tenth positions respectively.
On comparing the latest list with the February 2010 list, it can be seen that Virtumonde has slipped down from the seventh to the tenth spot. This is recognized as the most widespread harmful software seen in the recent times. Because of its characteristics and exclusive method of carrying out several system modifications, Virtumonde usually is the outcome of other auxiliary infections with different types of malware.
Tom Kelchner, Sunbelt Software Research Centre Manager, stated that it's not just up-to-the-minute malware detections that is expected from a good antivirus solution but it should also make fast detections, as per the news published by Sourcewire.com on April 6, 2010.
Related article: Trojans to Target VoIP in 2006
» SPAMfighter News - 15-04-2010