Top Ten viruses most frequently detected by Panda ActiveScan

Madrid, December 3, 2004 - November has been an erratic month in terms of virus activity. Although in general it has been relatively quiet, there has been some cause for concern, such as the appearance of Sober.I and the Tasin family of worms. However, Downloader.GK was once again the most active malicious code.

According to November´s Top Ten, based on the data gathered by Panda ActiveScan, the free online scanner, the Downloader.GK Trojan was, for the sixth month running, the malicious code responsible for most attacks, to be precise 19.46%. A long way off in second place came Mhtredir.gen (6.86%), followed by Netsky.P (4.70%) and Mabutu.A (4.62%). Fifth place was taken by Citifraud.A (4.34%), followed by Sasser.ftp (3.54%), Gaobot.gen (3.27%), StartPage.FH (3.05%), Bagle.BC (2.98%) and Qhost.gen (2.93%).

The following conclusions can be drawn from the data collected by Panda ActiveScan in November:

- Use of malicious code for financial gain. Of the ten viruses in the ranking, seven could be used directly or indirectly for financial gain. This could be through selling personal data, phishing-type fraud, stealing of confidential data, or by taking remote control of users´ computers.

- Significant activity of Trojans and worm/Trojans. In relation with the previous point, in November the trend that started some months ago has continued, with the prevalence of Trojans or worm/Trojans such as Mabutu.A. Both these types of malware are widely used to carry out frauds by cyber-crooks.

- Software vulnerabilities still represent a major threat. Five of the malicious code in this month´s Top Ten use vulnerabilities in software installed on computers in order to carry out their malicious action. Nevertheless, the fact that none of them have been discovered recently and that there has been plenty of time to apply the patches needed to fix them, indicates that there are many users who are not updating their systems frequently enough. This is why software vulnerabilities continue to be a serious threat as they allow the propagation of a wide variety of malicious code, regardless of whether the flaw has recently been discovered or has been known for some time.

- To help as many users as possible keep their systems virus free, Panda Software offers Panda ActiveScan, free of charge, at http://www.pandasoftware.com/. Webmasters who would like to include ActiveScan on their websites can get the HTML code, free of charges, at http://www.pandasoftware.com/partners/webmasters.

Panda Software also offers users Virus Alerts, an e-bulletin in English and Spanish that gives immediate warning of the emergence of potentially dangerous malicious code. To receive Virus Alerts just visit Panda Software´s website (http://www.pandasoftware.com/) and complete the corresponding form in the Virus Alerts section.

For more information about these and other malicious code, visit Panda Software´s Virus Encyclopedia at: http://www.pandasoftware.com/virus_info/encyclopedia/

Oxygen3 24h-365d, by Panda Software