Virus Activity Overview - January 2007

Kaspersky Lab provides an overview of virus activity in January, based on the analysis of mail traffic. Starting from January 2007, Top 20 will include information about the verdicts of proactive protection (this technology is implemented in Kaspersky Anti-Virus 6.0 and Kaspersky Internet Security 6.0).

There was a change in the leader of viral statistics: we state the complete defeat of Warezovs, expressed in the fact that of all their diversity, only the version .do remained in the twenty, and then in more than a modest 17th place. February will show how this defeat turned out to be fatal for Warezov. It is possible that we will hear more about these worms.

Two newcomers came to the top twenty, Trojan-Downloader.Win32.Small - dam and .ciw. In fact, this is the same program - the same 'Storm Worm', about which the media wrote and spoke a lot in January. Spreading over the Web in letters telling about a terrible hurricane in Western Europe, the death of President Putin and the resurrection of Saddam Hussein - he was first adopted as another version of Warezov. However, a more detailed analysis showed that this is a completely new family of malicious programs, most likely
Asian in origin.