Sober virus set to continue reign
By Matt Whipp
Posted on 5 Jan 2006 at 16:35
Antivirus vendors have totted up the figures for December, with some showing nearly four in five reports accountable to the Sober worms.
Sophos put the Sober-Z worm at number one for the month, claiming 78.9 per cent of reports. Given that the viruses which didn't make the top ten at all accounted for another 9.5 per cent, the remaining places on the chart don't make for a riveting read. Zafi-b took 3.3 per cent at number two, and Netsky-P still appears stuck barnacle-like to the chart at three, while the remaining bots muster around a per cent or so each.
We probably haven't seen the last of Sober though. Recent analysis of the worm showed that it is primed to download fresh code at midnight tomorrow, with the potential of causing another epidemic over the weekend.
Microsoft has added detection for the virus into its Malicious Software Removal Tool and the Windows Live Safety Cente and added that in addition to the attack scheduled for Friday evening, the worm is also set up to download fresh malicious code and running it every two weeks. Microsoft has also issued an advisory on the threat.
Finnish antivirus vendor F-Secure has a list of URLs the worm is programmed to look up on its website.
Russian antivirus vendor Kaspersky has a rather different take on the virus landscape for the festive month. It says Sober accounted for only around 5 per cent of the infection reports it received, and ancient Internet worm Zafi-d took the top slot with 29 per cent.
Like Sophos' chart, the top 20 is dominated by bot variants, a symptom of the growing business in botnets within the virus underground. But Kaspersky notes that one bot family seems to have all but disappeared. Some variants of the Doombot family reached as high as second place in Kaspersky's figures for November, yet now they're no longer on the radar. Kaspersky says that had new malicious programs been active over the month, the disappearance of Doombot would been straightforward, yet this has not happened.
Sophos' and Kaspersky's virus charts follow below:
1 Sober-Z 78.9%
2 Zafi-B 3.3%
3 Netsky-P 2.3%
4 Mytob-EX 1.4%
5 Mytob-FO 1.2% new entry
6 Mytob-BE 0.7%
7 Zafi-D 0.6%
=7 Mytob-GH 0.6%
9 Mytob-C 0.5%
=9 Mytob-FM 0.5% new entry
Other malicious programs15.07%
- How to remove SkyDrive from the Windows 8.1 Explorer
- Switching from iPhone to Android? Switch off iMessage
- Why is Google pumping more money into Firefox?
- Sky Broadband Shield review
- Samsung Galaxy S4: how to double your battery life
- Motorola Moto G review: first look
- IBM Watson meets Willy Wonka
- Google’s support policies shove users towards Chrome
- Lenovo Yoga Tablet review: first look
- Michael Dell's reasons to be cheerful
- Don't rely on Chrome's password vault
- Facebook Graph Search: don't panic
- Gmail drafts and Pastebin: could they evade the email snoops?
- Applying for a job at GCHQ? Here's your plain-text password
- Google two-step verification: a must for business email
- Yes, I write down my passwords
- How to deal with a ransomware attack
- How secure is your Wi-Fi network?
- How QR codes caught out the security pros
- Why I do not trust Do Not Track... yet