Sober virus set to continue reign
By Matt Whipp
Posted on 5 Jan 2006 at 16:35
Antivirus vendors have totted up the figures for December, with some showing nearly four in five reports accountable to the Sober worms.
Sophos put the Sober-Z worm at number one for the month, claiming 78.9 per cent of reports. Given that the viruses which didn't make the top ten at all accounted for another 9.5 per cent, the remaining places on the chart don't make for a riveting read. Zafi-b took 3.3 per cent at number two, and Netsky-P still appears stuck barnacle-like to the chart at three, while the remaining bots muster around a per cent or so each.
We probably haven't seen the last of Sober though. Recent analysis of the worm showed that it is primed to download fresh code at midnight tomorrow, with the potential of causing another epidemic over the weekend.
Microsoft has added detection for the virus into its Malicious Software Removal Tool and the Windows Live Safety Cente and added that in addition to the attack scheduled for Friday evening, the worm is also set up to download fresh malicious code and running it every two weeks. Microsoft has also issued an advisory on the threat.
Finnish antivirus vendor F-Secure has a list of URLs the worm is programmed to look up on its website.
Russian antivirus vendor Kaspersky has a rather different take on the virus landscape for the festive month. It says Sober accounted for only around 5 per cent of the infection reports it received, and ancient Internet worm Zafi-d took the top slot with 29 per cent.
Like Sophos' chart, the top 20 is dominated by bot variants, a symptom of the growing business in botnets within the virus underground. But Kaspersky notes that one bot family seems to have all but disappeared. Some variants of the Doombot family reached as high as second place in Kaspersky's figures for November, yet now they're no longer on the radar. Kaspersky says that had new malicious programs been active over the month, the disappearance of Doombot would been straightforward, yet this has not happened.
Sophos' and Kaspersky's virus charts follow below:
1 Sober-Z 78.9%
2 Zafi-B 3.3%
3 Netsky-P 2.3%
4 Mytob-EX 1.4%
5 Mytob-FO 1.2% new entry
6 Mytob-BE 0.7%
7 Zafi-D 0.6%
=7 Mytob-GH 0.6%
9 Mytob-C 0.5%
=9 Mytob-FM 0.5% new entry
Other malicious programs15.07%
- Flickr redesign: is it enough to tempt photographers back?
- Hands on with the new Google Maps
- Nokia Lumia 925 review: first look
- Why I won't subscribe to Creative Cloud
- GoPro camera strapped to a remote-control helicopter: the ultimate boy's toy
- Acer Iconia A1 review: first look
- Acer Aspire P3 review: first look
- Acer Aspire R7 review: first look
- How we produce the PC Pro podcast
- Google Now draining iPhone battery
- Yes, I write down my passwords
- How to deal with a ransomware attack
- How secure is your Wi-Fi network?
- How QR codes caught out the security pros
- Why I do not trust Do Not Track... yet
- The hard disks you can "secure" with a single-digit password
- Why I've started using a password manager
- Time to kill off CAPTCHA
- Are today's young people Generation I (for insecure)?
- Ransomware that's better made than antivirus software