Sober virus set to continue reign
By Matt Whipp
Posted on 5 Jan 2006 at 16:35
Antivirus vendors have totted up the figures for December, with some showing nearly four in five reports accountable to the Sober worms.
Sophos put the Sober-Z worm at number one for the month, claiming 78.9 per cent of reports. Given that the viruses which didn't make the top ten at all accounted for another 9.5 per cent, the remaining places on the chart don't make for a riveting read. Zafi-b took 3.3 per cent at number two, and Netsky-P still appears stuck barnacle-like to the chart at three, while the remaining bots muster around a per cent or so each.
We probably haven't seen the last of Sober though. Recent analysis of the worm showed that it is primed to download fresh code at midnight tomorrow, with the potential of causing another epidemic over the weekend.
Microsoft has added detection for the virus into its Malicious Software Removal Tool and the Windows Live Safety Cente and added that in addition to the attack scheduled for Friday evening, the worm is also set up to download fresh malicious code and running it every two weeks. Microsoft has also issued an advisory on the threat.
Finnish antivirus vendor F-Secure has a list of URLs the worm is programmed to look up on its website.
Russian antivirus vendor Kaspersky has a rather different take on the virus landscape for the festive month. It says Sober accounted for only around 5 per cent of the infection reports it received, and ancient Internet worm Zafi-d took the top slot with 29 per cent.
Like Sophos' chart, the top 20 is dominated by bot variants, a symptom of the growing business in botnets within the virus underground. But Kaspersky notes that one bot family seems to have all but disappeared. Some variants of the Doombot family reached as high as second place in Kaspersky's figures for November, yet now they're no longer on the radar. Kaspersky says that had new malicious programs been active over the month, the disappearance of Doombot would been straightforward, yet this has not happened.
Sophos' and Kaspersky's virus charts follow below:
1 Sober-Z 78.9%
2 Zafi-B 3.3%
3 Netsky-P 2.3%
4 Mytob-EX 1.4%
5 Mytob-FO 1.2% new entry
6 Mytob-BE 0.7%
7 Zafi-D 0.6%
=7 Mytob-GH 0.6%
9 Mytob-C 0.5%
=9 Mytob-FM 0.5% new entry
Other malicious programs15.07%
- How to check your identity hasn’t been sold to the hackers
- Tim Cook: this is how much TV has changed since the 70s
- Westminster wins the .London battle
- 20 years of PC Pro: from deep pan pizza to virtualisation
- Five reasons why the Apple Watch leaves me cold
- Apple Watch, iPhone 6 and 6 Plus: Tim Cook's Apple back with a bang?
- BT Home Hub 5: how to get maximum speed
- 20 years of PC Pro: one-star reviews (including "the worst tablet we've ever seen")
- 20 years of PC Pro: our best covers
- Why we've closed the PC Pro forums
- How to write your company's IT security policy
- The key to choosing a secure password
- Please stop reposting fake Facebook messages
- Is Facebook safe for business?
- Don't rely on Chrome's password vault
- Facebook Graph Search: don't panic
- Gmail drafts and Pastebin: could they evade the email snoops?
- Applying for a job at GCHQ? Here's your plain-text password
- Google two-step verification: a must for business email
- Yes, I write down my passwords