ESET Nominated INF/Autorun as most Widely Spread Computer Virus in November 2011

A study of the top ten security threats in the Internet world released by ESET found in the month of November 2011, and according to it every month and for the last several months, removable media malware dominated the stats and November 2011 was no exception.

In the world INF/Autorun topped in the threat list: .38% overall and 3.66% in Europe. INF/Autorun is a tag that describes a variety of malware exploiting the autorun.inf file as a way to hack a computer.

Moreover after INF/Autorun, win 32/dorkbot appears as number two threat globally for November 2011 as it is moving up steadily and its infection rate is slightly higher than in previous month(3.43%). This virus (dorkbot) spreads through removable media which includes a backdoor that permit it to be controlled remotely. This worm job is to collect login user names and password when unsuspecting user browses certain website.After that it sends those information to the remote machine.

Ranked as number three on the latest list of e-threat is HTML/ScrInject (percentage of total detections: 2.40% and Europe 2.55). HTML / ScrInject.B is a type of generic discovery of web pages that include HTML script "hidden" or iframes are automatically aimed to download the malware.

HTML / iFrame.B (percentage of total global detections: 2.24% and Europe - 2.48% ) - Generic recognition for malicious iframes rooted in HTML pages which are redirected to a definite URL with malicious content, was ranked fourth on November 2011 list, reported by ESET.

Interestingly, the spread of virus win 32/Conficker which or else holds the statistic threat stable position faintly weakened in November and acquire fifth place in the world (2.20%) and Europe (1.76%) ranking.

At the sixth position of the list is Win32/Autoit (percentage of total detections: 1.53%) This worm innovates copies of itself on local disks and write-accessible removable disks.
Win32/Sality (percentage of total detections: 1.03%) A service is initiated when Sality which is a polymorphic virus is executed, this service creates or deletes registry keys related to the actions of system security. This malware is ranked as position seven.

According to the ESET list, Win32/Ramnit (0.97%), JS/TrojanDownloader.Iframe.NKE (0.79%), and Win32/PSW.OnLineGames (0.75%), are placed on ranked eighth, ninth and tenth respectively.

Related article: ESET Discusses malware Writers’ Trend

» SPAMfighter News - 12/31/2011