Info and Support - SpiderWeb Networking

INFO & SUPPORT

January 2007 Top Spyware Threats Infection Percentage

  1. Trojan-Downloader.Zlob.Media-Codec         2.56%
  
  2. SpySheriff                                 1.11%
  
  3. Trojan.Smitfraud                           0.75%
  
  4. Zango.SearchAssistant                      0.71%
  
  5. VirusBurst                                 0.59%
  
  6. Virtumonde                                 0.57%
  
  7. ClickSpring.PuritySCAN                     0.50%
  
  8. Trojan.Win32.Qhost.hf                      0.46%
  
  9. WinAntiVirus Pro                           0.43%
  
  10.Trojan-Downloader.Gen                      0.42%

Trojan-Downloader.Zlob.Media-Codec
Trojan-Downloader.Zlob.Media-Codec is a trojan that installs rogue security software on the infected machine without notice and consent. It purports to be a needed codec or upgrade to Windows Media Player when users attempt to watch certain adult/porn videos to trick the user into downloading it. Once downloaded, it contacts remote servers and initiates the download of rogue security software such as SpywareQuake.

SpySheriff
SpySheriff is a purported anti-spyware application to scan for and remove spyware from users' computers. SpySheriff is known to be distributed through exploits that also download adware or spyware on users' computers without notice or consent. When SpySheriff is downloaded through an exploit, it puts a red icon in the system tray and shows a false warning that the computer is infected with spyware

Trojan.Smitfraud
Trojan.Smitfraud downloads and installs programs that purport to scan for adware and spyware and typically display false reports of spyware in order to frighten the user into paying for the program.

Zango.SearchAssistant
Zango.SearchAssistant opens new browser windows showing websites based on the previous websites you visit. The adware will run in the background on a computer and will periodically direct users to other sponsors' websites, allowing users to compare prices between websites. While the Software is installed on the computer, Zango may collect information about users and the websites visited. This information will be used to provide users with comparative shopping opportunities when they are most relevant. By installing and/or using the Software users grant permission for Zango to periodically display sponsors' websites.

VirusBurst
VirusBurst is software that purports to scan and detect malware or other problems on the computer, but which attempts to dupe or badger users into purchasing the program by presenting the user with intrusive, deceptive warnings and/or false, misleading scan results.

Virtumonde
Virtumonde is an adware program that displays pop-up advertisements on the desktop and also downloads other software from various remote servers. There are many variants of Virtumonde, some with trojan-like behaviors including downloading other software without notice and consent, transmitting information to remote servers without notice and consent, and lowering system security on the infected machine.

ClickSpring.PuritySCAN
ClickSpring.PuritySCAN is an adware program that scans a user's Internet Explorer files, including browser cache, cookies and history for pornographic/adult related words and allows the user to delete them.

Trojan.Win32.Qhost.hf Trojan.Win32.Qhost.hf is a trojan that is installed under false or deceptive pretenses or is installed without the user's full knowledge and consent.

WinAntiVirus Pro
WinAntiVirusPro is a rogue antispyware program that purports to scan and detect malware or other problems on the computer, but which attempts to dupe or badger users into purchasing the program by presenting the user with intrusive, deceptive warnings and/or false, misleading scan results.

Trojan-Downloader.Gen
Trojan-Downloader.Gen is a trojan downloader typically installed through an exploit or some other deceptive means and that facilitates the download and installation of other malware and unwanted software onto a victim's PC.

About Sunbelt Software's Threat Research Center
The Sunbelt Software Threat Research Center specializes in the discovery and analysis of dangerous vulnerabilities (i.e., security holes, bugs, maligned features or combination of operations) that could be exploited for Internet and email attacks. The research team actively researches new spyware outbreaks, creating and testing new spyware definitions on a constant basis.