ESER: INF/Autorun Malware was the Most Common Malware in July 2012

In July 2012, INF/Autorun was the top malware internationally that too fot the third year in a row with 5.46 % infection rate worldwide, according to ESET's statistics on malware for July 2012. INF/Autorun shows a variety of malware using the file autorun.inf as a measure of compromising a PC. This file have information on programs used to run automatically when removable media (USB flash drives) are entered by a Windows PC user.

HTML/ScrInject.B occupies second rank worldwide having an infection rate of 3.37% .HTML /Scrinject.B is a generic detection of HTML pages containing an ob furcated script or iframe tag that automatically redirect the user to malware download.

Win32/conficker was ranked third internationally with an infection rate of 3.29%. The win 32/conficker threat is a network worm originally propagated by abusing vulnerability in the windows operating systems.

On the e-threats list, Win32/Sirefef (2.78%)comprising of a multi-component family of malware that utilizes stealth to show its absence on a harmful computer. Due to the nature of this threat, the payload may differ greatly from one infection to other, although usual behavior is: downloading and executing of random files, contacting remote hosts, immobilizing the security features.

Placed fifth on the list is Win32/Dorkbot (1.65%). Win32/Dorkbot is a family of IRC-based worms that circulates through social networks, instant messaging programs, and removable drives. Variants of Win32/Dorkbot may confine user names and passwords by monitoring network communication, and may obstruct websites that are associated to security updates. It may also begin an inadequate denial of service (DoS) attack.

Win32/Sality (1.33%) is ranked sixth on ESET's list. Win32/Sality is a polymorphic virus that contaminates Win32 PE executable files. It also holds Trojan components. Win32/Sality has been popularly known to be downloaded by variants of the Win32/Bagle family.

Win32/Dorkbot (1.65%). Win32/Dorkbot is a family of IRC-based worms that spreads through removable drives, instant messaging programs, and social networks. Types of win32/Dorkbot might capture user names and passwords by monitoring network communication, and may obstruct websites that are related to security updates. It may also discover a limited denial of service (DoS) attack.

Win32/sality (1.33%) is listed as sixth ranker on ESET's list .win32/sality is a polymorphic virus that infects win32 PE executable files. It also contains Trojan components. Win 32/sality is popular to be downloaded by the type of win32/bagle family.

Globally JS/Trojandownloader.Iframe shares 1.26% to the infection rate and is placed seventh on the list. This malware is a malicious Trojan that takes the browser to a specific URL location with malicious software.

Also to the above mentioned malicious threats, other e-threats that are listed in ESET's last list include win32/Ramnit ans JS/Iframe takes on the eighth and ninth thereby sharing 1.17% and 0.98% infection rates respectively.

» SPAMfighter News - 8/29/2012