The Computer Guys

Miami to Fort Lauderdale Since 1994 - Thank You!

We Build the Best & Repair the Rest! ©

Top 10 malware reported to Sophos in August 2004

Position

Last
month

Malware

Percentage of reports

W32/Zafi-B

47.4%

W32/Netsky-P

18.0%

W32/MyDoom-O

7.2%

W32/Netsky-D

4.8%

W32/Netsky-Z

3.9%

W32/Bagle-AA

3.3%

W32/Netsky-B

2.9%

Re-entry

W32/Lovgate-V

1.9%

W32/Netsky-Q

1.5%

Re-entry

W32/Netsky-C

1.4%

Others

7.7%

Trojan poses as Berg video footage

Virus writers have moved on from using Osama bin Laden's or Arnold Schwarzenegger's supposed suicides as a lure to trying a similar trick involving "footage" of slain American captive Nick Berg.

VXers have seeded multiple Usenet groups with messages claiming Berg is alive and well in Iraq and pointing users towards supposed video footage from al-Jazeera. In reality this file offers only the Hackarmy Trojan. Last month virus writers used the same trick to try to con users into believing the same Trojan was either a suicide note from Arnold Schwarzenegger or photographs depicting Osama Bin Laden's supposed untimely demise.

Read more here..

W32/Netsky-Z is an internet worm which spreads by emailing itself to addresses found within files on the local computer.

The emails use a subject and message randomly selected from the following:

Subject lines:

Information
Hi
Document
Important

Message texts:

Important bill!
Important notice!
Important document!
Important data!
Important textfile!
Important details!
Important informations!
Important!
Important notice!

Attached file(Zip archive):

Bill.zip
Notice.zip
Important.zip
Data.zip
Textfile.zip
Details.zip
Part-2.zip
Informations.zip

The worm launched a denial-of-service attack on the following sites between the 2nd and the 5th May 2004:

www.educa.ch
www.medinfo.ufl.edu
www.nibis.de

This web is optimized for 800 x 600 monitor resolution or above and the latest web browser. Get the latest IE or Netscape web browser. (you need to connect to the internet first)