A Kaspersky Lab Employee analyzed the evolution of viruses

Nov 21, 2006 10:15 GMT  ·  By

We're all afraid of viruses. Even if we have an antivirus solution, we are still vulnerable. Why? Because there is a period of time between the moment an update is released and the one when the antivirus receives the update when all computers are vulnerable. So, it's obvious that virus information is precious.

Alexander Gostev, Senior Virus Analyst at Kaspersky Lab, published a security analysis to observe the malware evolution between July and September.

"There wasn't a single significant epidemic during this period, although of course the antivirus industry waited for August with bated breath. This was more a matter of tradition than because of any real threat; for the past three years, August has always brought a major virus epidemic. 2003: Lovesan and the MS03-026 vulnerability. 2004: Zafi and Bagle. 2005: Bozori (a.k.a. Zotob) which exploited the MS05-039 vulnerability to paralyze the networks of CNN, ABC, the New York Times and many other organizations in the USA.

There weren't any new proof of concept viruses either. This is also connected to the fact that the virus writers needed time to digest the events of the first six months of the year - an embarrassment of riches which they exploited to the full with new proof of concept code," he started.

"Between July and September nothing really changed. Malicious users - with Chinese hackers being the most active - continued to challenge Microsoft with new Trojans, and Microsoft continued to stick to its scheduled patch routine," Alexander Gostev added. "If the situation is as I have described it, then something will have to change in the near future. Either antivirus companies will go on the attack, making a new concerted effort to quash the virus uprising, or virus writers will come up with something truly new, raising the bar for the antivirus industry as a whole," he concluded.

Alexander Gostev made a good analysis of the main facts and it's obvious that something needs to change, because the use of Internet without a security solution is more and more dangerous. The entire security analysis is available here.