Jan 5

The Most Dangerous Virus at May 2009

Posted in Virus

Today I read interesting article from DetikInet about most dangerous virus at May 2009.  It was published by Kapersky. Kaspersky Security Network released a list of top 20 virus attacks in the month of May. There are two newcomers in the list of malware that attack. What are they?

There are two lists published by Kaspersky. First list contained list of dangerous programs (Malware), Adware, and unwanted programs are the most commonly detected by the computer user. Here is the list of them :

1. Net-Worm.Win32.Kido.ih
2. Virus.Win32.Sality.aa
3. Trojan-Dropper.Win32.Flystud.ko
4. Trojan.Win32.Autoit.ci
5. Trojan.JS.Agent.xy
6. Exploit.HTML.CodeBaseExec
7. Trojan-Downloader.Win32.VB.eql
8. Trojan.Win32.Chifrax.a
9. Virus.Win32.Virut.ce
10. Virus.Win32.Sality.z
11. Worm.Win32.AutoRun.dui
12. Packed.Win32.Krap.b
13. Packed.Win32.Black.a
14. Worm.Win32.Mabezat.b
15. Virus.Win32.Alman.b
16. Packed.Win32.Klone.bj
17. P2P-Worm.Win32.Palevo.ddm
18. Trojan.Win32.Swizzor.a
19. Exploit.JS.Agent.agc
20. Email-Worm.Win32.Brontok.q

No significant changes in the Top 20 in May. There are only two newcomers in this list, that is, the P2P-Worm.Win32.Palevo.ddm and Trojan.Win32.Swizzor.a.

The spread of P2P-Worm.Win32.Palevo.ddm in the public network through various peer-to-peer, also infected through storage media, making it easier for distribution.

While Trojan.Win32.Swizzor.a utilize some interesting and sophisticated tricks to hide the code, and disguise the presence in the system.

Meanwhile, in the second list, Kaspersky provides data on which programs infected the most objects detected on the user’s computer. Following list:

1. Virus.Win32.Sality.aa
2. Worm.Win32.Mabezat.b
3. Trojan-Clicker.HTML.IFrame.aga
4. Virus.Win32.Virut.ce
5. Net-Worm.Win32.Nimda
6. Virus.Win32.Xorer.du
7. Virus.Win32.Sality.z
8. Virus.Win32.Parite.b
9. Virus.Win32.Alman.b
10. Virus.Win32.Virut.q
11. Net-Worm.Win32.Kido.ih
12. Virus.Win32.Small.l
13. Email-Worm.Win32.Runouce.b
14. Worm.Win32.Fujack.k
15. Virus.Win32.Parite.a
16. Virus.Win32.Virut.n
17. Virus.Win32.Hidrag.a
18. Virus.Win32.Sality.ae
19. Worm.Win32.Otwycal.g
20. Trojan.Win32.Swizzor.a

Seen from this list, Trojan-Clicker.HTML.IFrame.aga, up to rank third, but still below the rank Virus.Win32.Sality.ae. IFrame.aga is one of the many versions of an iframe that is now spread by using Virus.Win32.Virut.ce for infecting to the web page. While Sality.ae is the latest version of the famous Sality virus.