If you remember our MSRT related blog from few days ago (and if not just scroll down a bit), we informed you that in this month’s free removal tool we would be adding Win32/Rimecud to our list of prevalent malware targeted for removal. We even speculated about a possible connection between it and last month’s addition, Win32/Hamweq. This led us to belief that, given the high detection rate of Win32/Hamweq, we would have a new leader for January’s run of the removal tool. Not to our surprise, this actually happened.
Take a look at our 3-day-run top 20 families chart:
Worm targeting removable drives and instant messaging with backdoor functionality.
Worm targeting removable drives, and IRC controlled backdoor
Worm targeting network/removable drives, and online game PWS
Rogue antivirus downloader
Data stealing malware that changes DNS settings
Network worm and malware downloader
Downloader of numerous malware components
Password Stealer targeting predominantly Brazilian banks