Panda Virus Alert - Bagle.B Worm

Panda Software Reports Sasser & Netsky Status Glendale, CA May 04, 2004 - PandaLabs has been tracking the status of Sasser and Netsky and issues the following alert: • The 4 variants of Sasser are amongst the most frequently detected among the 20 Top most frequently detected viruses by Panda Software's ActiveScan  - 10 have been written by the same writers (Netsky and Sasser) • According to the data collected via Panda Software's ActiveScan, half of the infected computers, are infected by one of the Sasser or Netsky variants. • The number of incidences remain steady and while variants of C and D are on the rise, but A and B are seem to be decreasing - but the number of incidences seem to be very close to what was being detected yesterday. VIRUS TRACKING REPORT May 1-May 4, 2004 |1-May | |2-May | |3-May | |4-May | | | |Virus |% of infections |Virus |% of infections |Virus |% of infections |Virus |% of infections | |1 |W32/Sasser.A |11.08 |W32/Sasser.B |24.44 |W32/Sasser.B |13.38 |W32/Netsky.P |11.42 | |2 |W32/Netsky.P |8.16 |W32/Sasser.A |15.81 |W32/Netsky.P |11.62 |W32/Sasser.B |8.24 | |3 |W32/Nachi.B |7.33 |W32/Nachi.B |7.36 |W32/Sasser.A |7.93 |W32/Netsky.D |6.28 | |4 |Trj/Downloader.L |5.12 |W32/Netsky.P |7.06 |W32/Netsky.D |6.21 |W32/Sasser.A |4.93 | |5 |W32/Sasser.B |4.86 |W32/Netsky.D |4.64 |W32/Nachi.B |5.07 |W32/Nachi.B |4.82 | |6 |W32/Netsky.D |4.21 |Trj/Downloader.L |4.57 |Trj/Downloader.L |4.57 |W32/Netsky.B |4.81 | |7 |W32/Netsky.Z |3.61 |Trj/Revop.F |2.99 |W32/Netsky.B |4.2 |Trj/Downloader.L |4.47 | |8 |Trj/Revop.F |3.28 |W32/Netsky.B |2.63 |W32/Bagle.AB |3.74 |W32/Sasser.D |4.28 | |9 |W32/Netsky.B |2.79 |W32/Netsky.Z |2.46 |W32/Sasser.C |2.97 |W32/Bagle.AB |3.8 | |10 |W32/Gaobot.PN |2.55 |Trj/Keylog.L |2.16 |Trj/Revop.F |2.92 |W32/Sasser.C |3.17 | |11 |Trj/Keylog.L |2.45 |W32/Parite.B |2.1 |W32/Netsky.Z |2.77 |Trj/Revop.F |3.03 | |12 |W32/Bagle.AB |2.43 |W32/Netsky.C |2.06 |W32/Netsky.C |2.48 |W32/Bagle.pwdzip |2.73 | |13 |W32/Gaobot.QP |2.31 |W32/Gaobot.QP |1.84 |W32/Sasser.D |2.37 |W32/Netsky.C |2.31 | |14 |W32/Parite.B |2.21 |Bck/Blarul.A |1.71 |W32/Bagle.pwdzip |2.21 |W32/Netsky.Z |2.27 | |15 |W32/Netsky.C |2.07 |Trj/Downloader.DK |1.56 |W32/Netsky.Q |2.11 |W32/Gaobot.RJ |2.27 | |16 |Bck/Blarul.A |1.98 |W32/Bagle.AB |1.55 |Trj/Keylog.L |2.07 |Trj/Keylog.L |2.26 | |17 |Trj/Multidropper.AM |1.73 |W32/Bagle.pwdzip |1.51 |Trj/Downloader.DK |1.54 |Trj/Downloader.DK |2.21 | |18 |W32/Bagle.pwdzip |1.66 |W32/Gaobot.PN |1.51 |W32/Parite.B |1.51 |W32/Netsky.Q |2.07 | |19 |Trj/Downloader.DK |1.53 |Trj/Multidropper.AM |1.37 |W32/Bugbear.B |1.44 |W32/Gaobot.QY |1.61 | |20 |Trj/Siboco.A |1.43 |Trj/Downloader.AN |1.28 |W32/Mydoom.A |1.44 |W32/Bugbear.B |1.48 | | "Clearly, these variants have not completed their course but it looks as if containment will probably be accomplished by the end of the week.  Although the risk remains highest for home users who may not have the knowledge to patch their operating systems as via the Windows update feature that Microsoft has recommended," said Patrick Hinojosa, CTO Panda Software US. All computer users scan and repair their systems via Panda Software's ActiveScan at http://www.pandasoftware.com/activescan.  This is a full scan and repair tool that anyone can use on their home of office computer to repair any damage caused by a virus. About PandaLabs On receiving a possibly infected file, Panda Software's technical staff gets straight to work. The file is analyzed and depending on the type, the action taken may include: disassembly, macro scanning, code analysis etc. If the file does in fact contain a new virus, the disinfection and detection routines are prepared and quickly distributed to users. Panda Software manufactures several leading antivirus software and hardware solutions available for the home user to the enterprise. For more information: Alan Wallace