One Week Later: Broken LNKs and MSRT August


This month’s Malicious Software Removal Tool (MSRT) release added new detection and cleaning for several malware threats that incorporate the use of the CVE-2010-2568 vulnerability (which was fixed by the MS10-046 security bulletin released in August).  This includes the Win32/Stuxnet family and several variants of Win32/Vobfus and W32/Sality.

From a global perspective, the results for these .lnk-related families were interesting.  The following chart shows countries with the most saturated infections—that is, for every computer scanned, what percentage had an infection for each family.

Although these families had large numbers of cleanings in places like the US, India, France, Russia, Spain, and Brazil, these locations were not nearly as saturated with the malware (when you look at infections per capita) in comparison to the top regions shown in the chart above.  Some regions had smaller numbers of affected computers, but extraordinarily high saturation rates, such as Iran and Indonesia.

Iran and Indonesia have typically had very low CCM rates.  (CCM stands for Computers Cleaned per Mille – a count of how many computers were infected for each thousand scanned.)  This count is a measure of all malware families, not just a single family.  The Stuxnet infections that Iran and Indonesia have incurred over these past few months have been high enough to triple their CCMs.  To have a single family increase a country’s typically low malware saturation by a factor of three is very significant.

The charts below show the top five locations were the most computers were cleaned by family along with the percentage of computers cleaned in comparison to the total number scanned by MSRT in that location (between the start of Aug. 10 and midnight, Aug. 17, 2010).

Stuxnet

Geography

Cleanings

  %  

United States

31,740

0.03%

Indonesia

11,030

1.66%

Iran

4,818

1.83%

India

2,130

0.10%

Russia

714

0.01%

 

Vobfus

Geography

Cleanings

  %   

United States

54,065

0.1%

Mexico

20,243

0.4%

France

12,352

0.1%

Brazil

12,296

0.1%

Portugal

9,995

0.4%

 

 Sality.AU

Geography

Cleanings

  %   

United States


Comments (0)

Skip to main content