About
Subscribe

New BugBear causes 25% of June infections

Carel Alberts
By Carel Alberts, ITWeb contributor
Johannesburg, 02 Jul 2003

Central Command, a provider of PC anti-virus and computer services, has released its monthly listing of the top 12 viruses for June 2003. The report, coined the "Dirty Dozen", is based on the number of virus occurrences confirmed through Central Command`s Virus Response Team.

The most prevalent viruses for the month were, in order of decreasing occurrence, followed by its percentage of total occurrences:

  • Worm/BugBear.B 24.8%
  • Worm/Klez.E (including G) 18.2%
  • Worm/Sobig.C 10.7%
  • Worm/Sobig.E 9.8%
  • Worm/Sobig.A 5.5%
  • W32/Yaha.E 3.2%
  • Worm/Hawawi.E 2.4%
  • Worm/Sobig.B 1.3%
  • Worm/BugBear 1.3%
  • W32/Funlove.4099 1.1%
  • W32/Nimda 1.0%
  • W32/Parite 0.7%
  • Others 20%

"For the second straight month, a Dirty Dozen newcomer is at number one. This time it was Worm/BugBear.B," says Steven Sundermeier, product manager at Central Command.

"Worm/BugBear.B was triumphantly spreading around the globe at an alarming rate and it is considered highly malicious because it can expose sensitive data."

Among other functionalities, Worm/BugBear.B drops a keylogger component that can record and leak vital information about the user, contains a backdoor designed to wait on TCP Port 1080 and listen for instructions from its creator, as well as the ability to disable personal firewall and anti-viral software.

"The Worm/Sobig virus family accounts for one-third of the Dirty Dozen, at numbers three, four, five and eight on the list. "In the battle of the Sobigs, Worm/Sobig.C held off its new sibling [variant E] to be the leader of the family. This is the first time in the history of our Dirty Dozen that a virus family has occupied four spots. Worm/Hawawi.E was the other new entry for the June report."

Central Command`s Vexira Antivirus has been updated for 1 011 different viruses, worms and other malicious applications during June, Sundermeier says.

Share