To Risk Top

Are Viruses and Worms currently being written for the Application? This question may be answered by looking at the F-Secure latest fifty virus listing. Using Outlook as an example, by looking at the detailed virus/worm descriptions we may see if the most recent attacks need Outlook or use the Windows Address Book to provide new targets for further distribution. As of January 12, 2003, 19 of 47 of the viruses listed as the top 50 at F-Secure use Outlook or the Outlook Windows Address Book. This is 40.4 percent of latest viruses, It is clear that the Outlook environment is being currently targeted by virus writers. Are their efforts successful? If they are successful, they will be causing expenditure of infosec resources. Viruses/Worms Involved with Outlook/WAB
		Virus or Worm
	Yes	Godzilla
	Yes	Chet
	Yes	Aliz
	Yes	Exploit.IFrame.FileDownload
	Yes	Frethem
	Yes	Klez
	Yes	Welyah
	Yes	Zoher
	Yes	Likun
	Yes	Roron
	Yes	Bugbear
	Yes	Friendgreetings
	Yes	Yaha.J
	Yes	Yaha.K
	Yes	Yaha.M
	Yes	Klez.E
	Yes via MAPI	Nimda
	Yes via MAPI	BadTrans.B
	Yes via MAPI	Finaldo
	Yes via MAPI	Gismor
	More general file scan	Shoho
	More general file scan	Lirva.B
	More general file scan	Sobig
	More general file scan	Lirva
	Linux	Slapper
	Linux	Linux.Devnull
	No	Apher
	No	Carewmr
	No	Helvis
	No	Zasil
	No	Jeem
	No	Maz
	No	Bridex
	No	SdBot
	No	KilOnce
	No	Winevar
	No	CIH
	No	Worm.P2P.Lolol
	No	Galil
	No	Lioten
	No	Etap
	No	Opaserv
	No	Ptsnoop
	No	ExploreZip.E
	No	Recory
	Unknown	Cardst
	Unsure	Fleming

© copyright James B. Nickson, 2003
For problems with this site, please Email.