Notes

There has been a lot of discussion on how well each vendor does in a 'zero-day' situation, and that our stats seem to be higher than the industry norm. To better understand why these statistics show what they do, we have to look back to the sources of the binaries. Since August of 2007, we have seen a very large increase of dropper style malware being propagated. The detection rate for these types of malware (mostly trojans), is not as good as the malware that they eventually download and install. Once a system has been infected and controlled, a more reliable and stable binary is loaded. These binaries are detected at a much higher percent than the other binaries that we see because they are in many case nothing new to the Anti-Virus vendors. This trend is more clearly seen by looking at our source table and because the majority of the binaries are coming from the sandboxing process means that we are receiving the greatest amount of malware from the malware samples themselves. These in turn are all fed back into the Anti-Virus testing systems and reset to the sandbox systems.

If and when this trend changes again, the charts will reflect those new directions the malware authors are taking the infection vectors.

Report Description

These charts represent the testing that was completed in the last 24-hours. Since our systems have a certain capacity for testing a certain number of binaries, the numbers below may be equal to the number that came in during the last 24-hours, or less. The Re-Test values should match the 0-day testing since there has not been sufficient time to process each set of binaries twice.

Day0 Summary

vendor detected total percent

Day0

Panda QuickHeal
unrecognized 0/0 unrecognized 0/0
W32/Parite.B 1 Worm.VB.at 59
Trojan.Vobfus.gen 5
Trojan.Agent.ATV 4
Trojan.Tdss.axhs 1
Win32.Net-Worm.Kido.ih.3.Pack 1
Win32.Backdoor.Cakl.d.6 1
Trojan.Agent.epf 1
DrWeb F-Prot6 F-Secure Ikarus
unrecognized 10,135/10,150 unrecognized 10,144/10,150 unrecognized 10,111/10,150 unrecognized 10,110/10,150
Trojan.Siggen.4099 3 W32/Vobfus.A 3 Worm.Win32.VBNA.a 23 Worm.Win32.VBNA 23
Trojan.Siggen.38892 2 W32/Virut.7116 1 Worm.Win32.VBNA.isu 3 Virus.Worm.Win32.VBNA 3
Trojan.MulDrop.34673 1 W32/Sisron.A!Generic 1 Worm:W32/Vobfus.A 3 Virus.Worm.VB.7 2
Trojan.Packed.904 1 W32/BackdoorX.GMX 1 Worm.Win32.VBNA.kqq 2 VirTool.Win32.DelfInject 1
Trojan.DownLoader1.1967 1 Trojan:W32/Hutpic.gen!E 2 Worm.Bacteraloh 1
Win32.Virut.30 1 Trojan.Win32.Cosmu.odx 1 Packed.Win32.Krap 1
DDoS.5651 1 Worm.Win32.VBNA.iby 1 P2P-Worm.Win32.Palevo 1
Win32.HLLW.Lime.18 1 Worm:W32/Vinkus.gen!A 1 Trojan.Crypt 1
Trojan.Packed.650 1 Trojan-Dropper:W32/Nemqe.gen!A 1 Trojan.Win32.Zmunik 1
Trojan.MulDrop.59624 1 Trojan:W32/SillyDC.gen!A 1 VirTool.Win32.Vbinder 1
BackDoor.Udr.1 1 Trojan.Win32.Pincav.vcn 1 Backdoor.Win32.Udr 1
BackDoor.PcClient.2394 1 Packed.Win32.Black.a 1 Trojan-Dropper.Win32.Nemqe 1
Backdoor:W32/Udr.gen!A 1 Trojan-Dropper.Agent 1
Trojan.Win32.Zmunik.rl 1 Worm.Win32.Citeary 1
Packed.Win32.Krap.as 1 Worm.Win32.Vobfus 1
Virus.Win32.Virut.av 1
Backdoor.Win32.Udr 1
Worm:W32/Palevo.AT 1
Trojan-Dropper.Win32.Agent.bsgx 1
P2P-Worm.Win32.Palevo.wgc 1
Kaspersky McAfee NOD32 Norman
unrecognized 10,112/10,150 unrecognized 10,134/10,150 unrecognized 10,115/10,150 unrecognized 10,147/10,150
Worm.Win32.VBNA.a 23 W32/VBNA.worm 6 Win32/AutoRun.VB.MC 23 W32/Virut.AG 1
Worm.Win32.VBNA.isu 3 New 3 Win32/AutoRun.VB.GA 3 W32/Udr.A 1
Worm.Win32.VBNA.kqq 2 Generic 2 Win32/AutoRun.VB.IQ 2 Logsnif.A 1
Trojan.Win32.Cosmu.odx 1 Downloader-CFY 1 Win32/TrojanDownloader.FakeAlert.AFQ 1
Worm.Win32.VBNA.iby 1 W32/Virut.gen.a 1 Win32/VB.NPV 1
Trojan.Win32.Zmunik.rl 1 Generic.dx!oyk 1 Win32/Agent.UDR 1
Trojan-Dropper.Win32.Agent.bsgx 1 PWS-Nemqe.dr 1 Win32/Virut.AV 1
Packed.Win32.Black.a 1 BackDoor-DSA 1 Win32/Virut.NBP 1
P2P-Worm.Win32.Palevo.wgc 1 Win32/AutoRun.VB.GE 1
Packed.Win32.Krap.as 1 Win32/Peerfrag.GC 1
Backdoor.Win32.Udr 1
Virus.Win32.Virut.av 1
Trojan.Win32.Pincav.vcn 1
QuickHeal Sophos TrendMicro VBA32
unrecognized 10,086/10,150 unrecognized 10,135/10,150 unrecognized 10,120/10,150 unrecognized 10,138/10,150
Trojan.Vobfus.gen 27 W32/SillyFDC-DV 3 WORM_VBNA.SMJ 21 SScope.Trojan.VB.Svchorse.024 3
Worm.VB.at 25 Mal/VBNam-A 2 WORM_VB.SMP 4 OScope.Trojan.VB.0877 2
Trojan.Agent.ATV 2 Mal/Generic-A 2 WORM_VOBFUS.SM 2 Worm.Win32.AutoRun.mwf 1
Backdoor.Poison.pg 1 Mal/Behav-285 1 PE_VIRUT.AV 1 Embedded.Malware-Cryptor.Win32.General.4 1
Backdoor.Bifrose.bbvc 1 W32/Virut-W 1 TROJ_RENOS.SMPE 1 SScope.Trojan.VB.Svchorse.026 1
Trojan.Zmunik.rw 1 Mal/Behav-181 1 BKDR_NEWHEUR.IZ 1 Virus.Win32.Virut.2 1
Trojan.Buzus.hts 1 Mal/VB-F 1 Backdoor.Win32.Hupigon.dkl 1
Backdoor.Small 1 W32/Autorun-ARS 1 Trojan-Clicker.Win32.AutoIt.u 1
W32.Perite.A 1 Mal/Palevo-A 1 OScope.Backdoor.Udr 1
Backdoor.Sinowal.dwc 1 Mal/EncPk-ND 1
Win32.Trojan-Downloader.Lipler.axkd.4 1 Mal/VBInject-D 1
W32.Virut.Z 1 Mal/HckPk-E 1
Backdoor.Ircbot.p 1
Vexira VirusBuster
unrecognized 10,149/10,150 unrecognized 10,119/10,150
Win32.Virut.Gen.4 1 Worm.VBNA.Gen 27
Packed/Themida 1
Win32.Virut.Gen.4 1
Trojan.Bredolab.Gen!Pac 1
Backdoor.Agent.ETHV 1

Retry - Summary

vendor detected total percent

Retry

AntiVir Avast-Commercial AVG7 Clam
unrecognized 0/0 unrecognized 0/0 unrecognized 0/0 unrecognized 0/0
WORM/VB.NVA 19,802 Win32:Zbot-LRA 19,761 Generic10.TNK 19,802 Trojan.Downloader-50691 18,223
WORM/VBNA.abvj 1,891 Win32:VB-ONE 1,939 Win32/Aliser 300 Trojan.Chinky 525
TR/Dropper.Gen 1,837 Win32:Malware-gen 1,907 Worm/Allaple.B 33 Trojan.VB-7159 440
WORM/Agent.ghj 1,066 Win32:VB-OMR 1,609 Win32/Themida 18 Trojan.Agent-122844 382
TR/Chinky.G 661 Win32:AutoRun-AYY 1,605 Worm/Allaple.A 17 Trojan.Chinky-1 347
TR/VB.bjd.2 555 Win32:Trojan-gen 1,198 Win32/NSAnti 13 Trojan.VB-8073 321
WORM/VBNA.isu 395 Win32:VB-NSF 948 Win32/Tufik.A 11 W32.Aliser 304
TR/Chinky.E 372 Win32:AutoRun-BGR 692 Win32/Parite 11 Trojan.Chinky-9 100
TR/Vundo.Gen 353 Win32:Alisa 304 Dropper.Delf 9 Trojan.Chinky-35 73
TR/Crypt.XPACK.Gen 318 Win32:AutoRun-BGQ 274 SHeur.CMDD 8 Trojan.FakeAV-296 45
W32/Aliser.8364 304 Win32:Spyware-gen 152 Win32/Virut 8 Trojan.Chinky-3 44
WORM/VBNA.AALN 265 Win32:VB-NIE 150 Win32/Cryptor 8 Trojan.Swizzor.Gen 44
WORM/VBNA.JDX 174 Win32:Rootkit-gen 115 Win32/PolyCrypt 7 Trojan.Chinky-41 43
WORM/Vobfus.F 160 Win32:Adware-gen 96 BackDoor.Generic.LBE 7 Trojan.Chinky-2 36
TR/Crypt.ZPACK.Gen 133 Win32:SwizBased-gen 49 Klone 7 Worm.VB-1079 34
TR/Chinky.B 122 Win32:Caxnet 44 Win32/Chir.B@mm 6 Trojan.Downloader-72711 26
TR/Chinky.H 118 Win32:Hilot 35 Dropper.VB.3.BS 6 Trojan.IRCBot-3427 25
TR/ATRAPS.Gen 118 Win32:Preald-K 30 Corrupted.F 6 Trojan.VB-7196 25
WORM/VBNA.jky 100 Win32:Virut-C 30 Packed.VPacker 5 Worm.Zhelatin-39 24
TR/Spy.Gen 99 Win32:Allaple 27 Win32/PEPatch 5 PUA.Packed.Thinstall2425 20
DrWeb F-Prot6 F-Secure G-Data
unrecognized 0/0 unrecognized 0/0 unrecognized 0/0 unrecognized 0/0
Win32.HLLW.Autoruner.6014 19,802 W32/Worm.BAOX 19,802 Worm:W32/Revois.gen!A 19,802 Win32.OverDoom.PRP.A 2,696
Trojan.MulDrop1.4017 1,891 W32/VBTrojan.6!Maximus 1,595 Trojan.Win32.Cosmu.nyl 19,802 Trojan.Agent.VB.BDS 2
Trojan.MulDrop1.1659 1,066 W32/Skintrim.1!Generic 512 Worm.Win32.VBNA.a 3,646 Trojan.Generic.1757811 1
Win32.HLLW.Autoruner.7225 555 W32/Aliser.C 304 Worm.Win32.VBNA.abvh 1,891 Trojan.Generic.1650574 1
Trojan.DownLoad.39314 460 W32/Vobfus.A 236 Trojan-Downloader:W32/Agent.LFW 447 Trojan.Generic.1961859 1
Trojan.Siggen.4099 395 W32/Alureon.G!Generic 55 Worm.Win32.Basun.ajp 436 Trojan.Generic.1743878 1
Trojan.MulDrop.63417 386 W32/Trojan2.LISN 53 Trojan-Downloader.Win32.Lipler.axkd 411 Trojan.Rincux.AW 1
Win32.HLLW.Siggen.452 377 W32/RAHack.A.gen!Eldorado 48 Worm:W32/Vobfus.A 395 Trojan.Generic.2194375 1
Win32.Alisa.3732 304 W32/Virut.AI!Generic 41 Worm:W32/Vinkus.gen!A 395 Win32.Worm.Allaple.Gen 1
Trojan.MulDrop.39230 197 W32/VBTrojan.7!Maximus 39 Worm.Win32.VBNA.isu 394 Generic.Hupigon.AND.5EE115B6 1
Trojan.Siggen.38892 160 W32/FraudLoad.A!Generic 34 Worm.Win32.VBNA.fcm 375 Trojan.Generic.2370728 1
Win32.HLLW.Autoruner.8325 150 W32/VBTrojan.17!Generic 32 Virus.Win32.Small.a 304 Generic.Onlinegames.14.0677AC07 1
Win32.HLLW.Autoruner.7159 146 W32/VBTrojan.Dropper.4!Maximus 32 Virus:W32/Aliser.gen!A 294 Backdoor.Agent.ZWB 1
Trojan.Siggen.52867 123 W32/Agent.CM.gen!Eldorado 28 Rootkit.Win32.Xanfpezes.a 220 Trojan.Crypt.BH 1
Trojan.Swizzor.based 120 W32/Heuristic-400!Eldorado 27 Worm.Win32.VBNA.kqq 160 Trojan.PWS.OnlineGames.ZXA 1
Trojan.Siggen.8837 100 W32/Backdoor2.EQWF 25 Worm.Win32.VBNA.ixo 150 Backdoor.Sinowal.BX 1
Win32.HLLW.Autoruner.7155 67 W32/FraudPack.D!Generic 22 Trojan:W32/Hutpic.gen!E 145 Trojan.Vundo.ENF 1
Trojan.Wintrim.44 62 W32/Dropper.gen8!Maximus 17 Worm.Win32.VBNA.err 140 Trojan.Downloader.Vb.NL 1
DLOADER.Trojan 48 W32/Swizzor-based.2!Maximus 12 Trojan.Win32.Swizzor.c 102 Generic.Onlinegames.14.8101E7A7 1
Trojan.Packed.682 47 W32/ScreenBlaze.A2.gen!Eldorado 12 Worm:W32/Vobfus.gen!B 100 Win32.Worm.Downadup.Gen 1
Ikarus Kaspersky McAfee NOD32
unrecognized 0/0 unrecognized 0/0 unrecognized 0/0 unrecognized 0/0
Trojan-Downloader.Win32.VB 19,831 Trojan.Win32.Cosmu.nyl 19,802 Generic 21,848 Win32/AutoRun.VB.JP 19,357
Worm.Win32.VBNA 4,773 Worm.Win32.VBNA.a 3,646 W32/VBNA.worm 1,495 Win32/AutoRun.VB.LR 3,110
Virus.Win32.AutoRun 739 Worm.Win32.VBNA.abvh 1,891 MultiDropper-TD 1,433 Win32/AutoRun.VB.MC 1,063
Virus.Win32.VB 623 Worm.Win32.Basun.ajp 436 W32/Alisa.a 304 Win32/TrojanDownloader.VB.NZX 447
Virus.Worm.Win32.VBNA 592 Trojan-Downloader.Win32.Lipler.axkd 411 Generic.dx!nir 218 Win32/AutoRun.VB.FB 415
Trojan.Crypt 469 Worm.Win32.VBNA.isu 394 Downloader-BPJ.gen.b 81 Win32/AutoRun.VB.GA 395
Trojan-Downloader.Win32.Lipler 402 Worm.Win32.VBNA.fcm 375 Downloader-CEW 72 Win32/Skintrim.FD 389
Trojan.SuspectCRC 264 Virus.Win32.Small.a 304 Skintrim!u 69 Win32/AutoRun.VB.LJ 388
Worm.Win32.Vobfus 263 Rootkit.Win32.Xanfpezes.a 216 Skintrim!v 67 Win32/AutoRun.VB.FI 377
Virus.Worm.VB.7 163 Worm.Win32.VBNA.kqq 160 W32/RAHack 58 Win32/AutoRun.VB.GJ 324
Virus.Win32.Aliser 131 Worm.Win32.VBNA.ixo 150 New 55 Win32/Small.A 304
Trojan.Win32.FakeAV 112 Worm.Win32.VBNA.err 140 Generic.dx!oqr 51 Win32/AutoRun.VB.IQ 201
Trojan-Dropper.Agent 105 Trojan.Win32.Swizzor.c 102 BackDoor-DOQ.gen.ag 49 Win32/AutoRun.VB.FL 157
Virus.Win32.Virut 104 Packed.Win32.Krap.as 89 Generic.dx!oqb 43 Win32/AutoRun.VB.FF 140
Packed.Win32.Krap 95 Packed.Win32.Krap.r 55 Generic.dx!opg 42 Win32/AutoRun.OJ 123
Backdoor.Win32.Hupigon 87 Net-Worm.Win32.Allaple.b 54 BackDoor-DTL.b 42 Win32/AutoRun.VB.GQ 100
Gen.Trojan 80 Worm.Win32.VBNA.fku 53 Generic.dx!orl 42 NewHeur_PE 93
Trojan.Win32.Obfuscated 74 Worm.Win32.VBNA.iwz 39 FakeAlert-CO 41 Win32/Genetik 47
Backdoor.Win32.Bifrose 67 Worm.Win32.Basun.wsc 38 BackDoor-ABF 35 Win32/Kryptik.AJD 41
Trojan-Spy.Win32.Zbot 63 Packed.Win32.TDSS.z 36 Generic.dx!ops 32 Win32/AutoRun.VB.GG 39
Norman Panda QuickHeal Sophos
unrecognized 0/0 unrecognized 0/0 unrecognized 0/0 unrecognized 0/0
W32/DLoader.IHYN 18,351 Malicious 9 Worm.VB.at 19,801 Troj/DwnLdr-HQY 19,802
W32/Salisa.3720 304 W32/Parite.B 5 Trojan.Vobfus.gen 2,905 Mal/Generic-A 1,878
Sandbox: W32/Malware 44 Generic 5 Win32.Worm.VBNA.a.3 1,065 Mal/AutoRun-J 959
Allaple.gen3 32 W32/Sdbot.ABL.worm 3 Trojan.Agent.ATV 868 W32/SillyFDC-DS 622
Sandbox: W32/Downloader 28 Bck/Poison.E 2 Worm.Datunif.A 440 Mal/Vobfus-A 549
Suspicious_F.gen 27 Bck/Karsh.B 2 Win32.Trojan-Downloader.Lipler.axkd.4 406 W32/Datunif-A 447
Allaple.gen 22 W32/Chir.B 2 W32.Salisa.3720 296 Mal/Generic-L 398
W32/Packed_Nspack.A 11 Bck/Formador.B 2 Win32.Trojan.Swizzor.c.4 122 W32/SillyFDC-DV 396
W32/Pinfi.A 10 W32/Rahack.gen 1 Win32.Worm.Vobfus.E.3 93 W32/SillyFDC-DP 377
SDBot.gen8 8 Dialer.HHE 1 I-Worm.Allaple.gen 58 W32/Small-C 304
Bifrose.gen1 8 Adware/Startpage.CTK 1 Trojan.Buzus.cvxo 53 Mal/Wintrim-E 201
Packed_Nspack.K 8 Trojan.Agent.irc 50 Mal/Wintrim-D 170
W32/Udr.A 7 Trojan.Krap.as 38 Mal/VBNam-A 163
Agent.IZEO 7 Win32.Packed.Krap.r.4 34 Mal/Swizzor-K 104
Pinfi.A 6 Worm.Palevo 23 Mal/FakeAV-CO 89
W32/Packed_Upack.A 6 Win32.Worm.VBNA.fcm.3 18 Mal/Hrup-A 80
Hupigon.gen203 6 Win32.Packed.Krap.as.4 18 W32/Allaple-F 58
W32/Smalltroj.dam 5 Trojan.Koutodoor.a 17 Mal/FakeAV-BW 56
PoisonIvy.gen19 5 W32.Virut.G 17 Mal/Packer 56
Hupigon.gen126 5 Win32.Trojan.Hrup.aah.4 17 Mal/RtKit-A 42
TrendMicro VBA32 Vexira VirusBuster
unrecognized 0/0 unrecognized 0/0 unrecognized 0/0 unrecognized 0/0
TROJ_DLOADR.SMM 19,802 Trojan-Downloader.Win32.VB.eex 18,899 Trojan.DL.VB.EEDT 19,802 Worm.VB.FMYJ 19,802
WORM_VBNA.SMJ 4,204 Win32.TrojanDownloader.VB.NZX 423 Win32.Belial.A 299 Worm.VBNA.Gen 6,336
WORM_VB.SMP 1,070 SScope.Trojan.VB.Svchorse.024 381 Worm.Allaple.Gen 56 Worm.Datunif.Gen 447
WORM_VBNA.SMB 488 Trojan.Win32.VB.tqu 380 Win32.Parite.B 9 Trojan.Lipler.Gen 391
WORM_VB.TOT 447 Worm.Win32.VBNA.fcm 338 Win32.Virut.Gen.4 7 Worm.Win32.VBNA.JFW 319
WORM_VB.TET 377 Virus.Win32.Alisa 304 I-Worm.Chir.B 6 Win32.Aliser 304
PE_ALISA.A 283 SScope.Trojan.VB.Svchorse.026 236 Trojan.DL.CKSPost.Gen 5 Trojan.Rootkit.YF 220
TROJ_LIPLER.SMT 222 Worm.Win32.VBNA.abvh 189 Worm.SdBot.OB 4 Trojan.Swizzor.Gen!Pac.6 89
TROJ_LIPLER.SMA 171 OScope.Trojan.VB.0877 160 Adware.Trymedia.E 4 Trojan.Codecpack.Gen.2 76
WORM_VOBFUS.SM 167 SScope.Trojan.VB.Svchorse.027 150 Trojan.DL.VB.EEFX 4 Worm.Akbot.Gen 51
TROJ_Generic.DIT 100 Malware-Cryptor.Win32.Palka 150 Backdoor.Bifrose.AHY 3 Rootkit.Koutodoor.Gen.2 42
WORM_AUTORUN.LLA 93 BScope.Lipler.059 148 Backdoor.PCClient.Gen.4 3 Packed/NSPack 40
TROJ_RENOS.SMPE 92 SScope.Trojan.VB.Svchorse.029 134 Trojan.DL.Small.CNE 3 Worm.VBNA.CUA 39
WORM_ALLAPLE.IK 58 Worm.Win32.VBNA.err 129 Trojan.Agent.JVF 2 Trojan.Buzus.AZJX 32
TROJ_FAKEAV.SMAL 54 SScope.Trojan.VB.Svchorse.028 100 Trojan.DL.Agent.XGB 2 Packed/FSG 31
TROJ_BUZUS.BIR 53 Worm.Win32.VBNA.a 89 Worm.Hamweg.Gen 2 Packed/Themida 28
Mal_Repyh 47 Trojan.Win32.Swizzor.c 68 Win32.Parite.B2 2 Trojan.Codecpack.Gen 25
BKDR_AGENT.SMA 25 OScope.Malware-Cryptor.Win32.Allaple 57 Trojan.Agent.WUV 2 Rootkit.Alureon.Gen.10 24
TROJ_FAKEAL.SMDP 25 Crafted.Win32File.OLS 53 Hacktool.IPScan.A 1 Trojan.Hupigon.Gen!Pac.6 21
TROJ_Gen.MZ40L9 25 Trojan.Win32.Buzus.cvuo 50 Backdoor.VB.DZSH 1 Trojan.Buzus.AZJV 21

<< | Viruses | Virus Weekly Stats >>