Skip to main content

Virus Top Twenty for June 2008

1 July 2008

Summer vacation is in full swing, which means changes in the statistics for malicious programs in mail traffic are relatively small.

PositionChange in positionNameProactive Detection FlagPercentage
1. No Change 0 Email-Worm.Win32.NetSky.q Trojan.generic 34.15
2. Up +2 Email-Worm.Win32.Nyxem.e Trojan.generic 13.16
3. Down -1 Email-Worm.Win32.NetSky.y Trojan.generic 8.20
4. Up +14 Net-Worm.Win32.Mytob.t Worm.P2P.generic 5.40
5. Down -2 Email-Worm.Win32.Scano.gen Trojan.generic 3.89
6. Down -1 Email-Worm.Win32.NetSky.d Trojan.generic 3.62
7. No Change 0 Email-Worm.Win32.NetSky.aa Trojan.generic 3.01
8. Return Return Email-Worm.Win32.Mydoom.m Trojan.generic 2.95
9. Up +8 Email-Worm.Win32.Mydoom.l Worm.P2P.generic 2.62
10. Up +1 Net-Worm.Win32.Mytob.c Trojan.generic 2.48
11. Down -5 Email-Worm.Win32.NetSky.x Trojan.generic 2.45
12. Down -3 Email-Worm.Win32.Bagle.gt Trojan.generic 2.42
13. Up +1 Email-Worm.Win32.NetSky.t Trojan.generic 2.14
14. Down -2 Email-Worm.Win32.Bagle.gen Trojan.generic 1.46
15. Down -7 Email-Worm.Win32.NetSky.b Trojan.generic 1.02
16. New! New! Net-Worm.Win32.Nimda Invader 0.93
17. New! New! Trojan-Downloader.Win32.Injecter.ga Invader 0.91
18. Down -8 Net-Worm.Win32.Mytob.u Trojan.generic 0.67
19. New! New! Exploit.Win32.IMG-WMF.y 0.65
20. New! New! Email-Worm.Win32.LovGate.w Trojan.generic 0.58
Other Malicious Programs 7.29


Summer vacation is in full swing. As a result, changes in the statistics for malicious programs in mail traffic are relatively small. Netsky and Nyxem, the long-standing leaders of the Top Twenty, have merely shifted their positions slightly.

The only meaningful change in the rankings is that Nimda, an old worm which first appeared back in 2001, has resurfaced. Nimda is a versatile worm that spreads not only via email, but also across network drives on local area networks. It also attempts to attack IIS servers on the network. This is a nasty piece of malicious code: it leaves the computer wide open to anyone by adding a Guest user to the Administrators group and making local disks accessible by other computers on the network.

It is also worth mentioning a newcomer to the rankings: Exploit.Win32.IMG-WMF.y. Exploits being sent by email pose a serious threat to users, as some email clients display media content without first prompting the user. This exposes the computer to automatic infection. The user doesn't need to give permission for the attachment to be saved or run - the malicious code will execute automatically when the user views the message.

Other malicious programs made up a significant 7.29% of all malicious code found in mail traffic in June.

The Top Twenty countries which acted as sources of infected emails in June are shown below:


PositionChangeCountryPercentage
1 No Change 0 United States 18.95
2 Up +1 South Korea 7.97
3 Up +2 China 5.79
4 No Change 0 Spain 5.44
5 Up +3 Brazil 4.97
6 Up +1 Russia 4.41
7 Up +2 United Kingdom 4.28
8 Down -1 Germany 4.28
9 Down -3 France 3.86
10 Down -8 Poland 2.71
11 Down -1 India 2.65
12 Down -1 Italy 2.65
13 No Change 0 Japan 2.00
14 Up +4 Argentina 1.97
15 Down -3 Isreal 1.89
16 No Change 0 Turkey 1.49
17 Down -3 Canada 1.31
18 Down -3 The Netherlands 1.17
19 Down -2 Australia 1.16
20 New! New! Ukraine 1.12
Other Countries 19.95


Summary

  • New: Net-Worm.Win32.Nimda, Trojan-Downloader.Win32.Injecter.ga, Exploit.Win32.IMG-WMF.y, Email-Worm.Win32.LovGate.w.
  • Moved up: Email-Worm.Win32.Nyxem.e, Net-Worm.Win32.Mytob.t, Email-Worm.Win32.Mydoom.l, Net-Worm.Win32.Mytob.c, Email-Worm.Win32.NetSky.t.
  • Moved down: Email-Worm.Win32.NetSky.y, Email-Worm.Win32.Scano.gen, Email-Worm.Win32.NetSky.d, Email-Worm.Win32.NetSky.x, Email-Worm.Win32.Bagle.gt, Email-Worm.Win32.Bagle.gen, Email-Worm.Win32.NetSky.b, Net-Worm.Win32.Mytob.u.
  • Returned: Email-Worm.Win32.Mydoom.m.
  • No change: Email-Worm.Win32.NetSky.q, Email-Worm.Win32.NetSky.aa.

Virus Top Twenty for June 2008

Summer vacation is in full swing, which means changes in the statistics for malicious programs in mail traffic are relatively small.
Kaspersky logo

About Kaspersky

Kaspersky is a global cybersecurity and digital privacy company founded in 1997. With over a billion devices protected to date from emerging cyberthreats and targeted attacks, Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection, specialized security products and services, as well as Cyber Immune solutions to fight sophisticated and evolving digital threats. We help over 200,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.

Related Articles Press Releases