'Downadup' Threats Most Common in Romania

Bitdefender, the well-known security solutions provider, released a report naming the most encountered threats found in the Romanian online environment in 2011's third trimester.

It will be interesting to see the results of this study, especially after recent studies named Romania, along with France and China as being the countries that host the largest number of malicious websites, right after the USA.

Win32.Worm.Downadup.Gen and Win32.Worm.DownadupJob.A totalize almost 10% of the entire virus population in the country. The worm spreads by exploiting a vulnerability in the Windows RPC Server Service, attempting to install fake anti-virus programs and blocking any access to software provider websites.

Another piece of malware that roams the Romanian internet is part of the Trojan.Autorun family which seems to be among the most commonly found threats. These types of Trojans are known because they make use of Autorun files placed on removable storage devices to spread.

Next position is occupied by Win32.Sality.OG and its variant Win32.Sality.3. Even though these are not as often seen as the previous ones, they're more dangerous as besides blocking all the anti-virus software installed on the infected machine, they also come with rootkits. They expand the contamination by attaching their code to executable and .scr script files.

Trojan.Script.404794 closes the list, numbers showing that in infects 1.22% of all the computers from the target country. This malevolent program is easily detectable as it redirects users to illegal content hosting websites.

These pieces of malware cause harm to thousands of computers each month so a proper protection is necessary. Make sure to keep your virus definition database up to date and perform periodic systems scans that will detect anything that might have slipped by.

Softpedia offers its users a large number of tools that will help them get rid of the pesky viruses.

Win32.Worm.Downadup Removal Tool 1.22 is available for download here.

W32/Autorun Worm Removal 1.0 is available for download here.

SalityKiller 1.3.6.0 is available for download here.