Malware Prevalence - April 2012

HitmanPro is a second opinion malware scanner, designed to run alongside existing real-time antivirus programs. Its purpose is to find and remove malware that your existing antivirus program is currently unable to find and/or remove.

The list below is the top malware that HitmanPro found and removed from computers that were protected by up-to-date antivirus programs. It differs from other security companies because this list is about malware that is successful in hiding from or bypassing up-to-date virus protection programs. We are able to compile this list because HitmanPro also records if there was an up-to-date antivirus program on the computer, registered in the Windows Security Center.

Prevalence Top 25 # Malware Prevalence 1 FakeAV 14,21% 2 Mywebsearch 8,50% 3 Alureon 8,37% 4 ZeroAccess (Sirefef) 6,05% 5 InstallCore 5,72% 6 Pihar 4,12% 7 Zeus (Zbot) 3,66% 8 Hotbar 2,87% 9 Sasfis 2,72% 10 Mebroot 2,63% 11 Virut 2,37% 12 SearchSuite 2,08% 13 Gamevance 1,97% 14 Delf 1,93% 15 Hacktool 1,62% 16 Sality 1,61% 17 Softomate 1,59% 18 Wimad 1,55% 19 Medfos 1,49% 20 Small 1,47% 21 Bundlore 1,44% 22 Tibs 1,29% 23 Ransom 1,24% 24 Vundo 1,20% 25 Solimba 1,16% Note: items in bold are new entries

Infected MBR Prevalence Top 5 # Bootkit Prevalence 1 Pihar 59,88% 2 Mebroot (Sinowal) 19,73% 3 Alureon 15,88% 4 sst 1,70% 5 Shetwirl 1,30% A bootkit is a variant of a kernel-mode rootkit and modifies the master boot record (MBR). They sucessfully subvert 64-bit kernel-mode driver signing in Windows 7. More information on Wikipedia: Bootkits

<< March

May >>