Recently published analyses

• Program:Win32/PerfectOptimizer
• Worm:Win32/Failnum.A
• TrojanDownloader:Win32/Rochap.J
• Exploit:JS/MS09002.C
• TrojanDownloader:Win32/FakeSmoke
• Trojan:Win32/Ramtopt.A
• Worm:Win32/Vobfus.C
• Trojan:Win32/Whitewell.A
• Trojan:Win32/Daonol.I
• TrojanDropper:Win32/Vtimrun.B

Top desktop threats

• Trojan:JS/Agent.FA
• Trojan:JS/FakeXPA
• TrojanDownloader:ASX/Wimad.AZ
• Trojan:Win32/FakeSpypro
• TrojanDownloader:ASX/Wimad.AF
• Exploit:Win32/ShellCode.A
• TrojanDownloader:JS/Renos
• TrojanDownloader:ASX/Wimad.BV
• TrojanDownloader:Win32/Monkif.O
• Trojan:Win32/FakeXPA

Top adware/spyware

• Adware:Win32/Hotbar
• BrowserModifier:Win32/BaiduSobar
• Trojan:Win32/Alureon.gen!U
• Trojan:Win32/FakeXPA
• TrojanDownloader:Win32/Renos.JM
• Trojan:Win32/Yektel.A
• TrojanDownloader:Win32/Renos.JI
• Trojan:Win32/Hiloti.gen!A
• Trojan:Win32/C2Lop.A
• Trojan:Win32/Alureon.CT

Top MSRT detections

• Worm:Win32/Taterf.B
• PWS:Win32/Lolyda.AT
• PWS:Win32/Frethog.gen!B
• Worm:Win32/Conficker.B
• Worm:Win32/Conficker.C
• PWS:Win32/Frethog.AD
• Worm:Win32/Taterf.gen!A
• Worm:Win32/Conficker.B!inf
• Trojan:Win32/FakeXPA
• Trojan:WinNT/Alureon.D

Microsoft Updates for Multiple Vulnerabilities

Multiple Vulnerabilities Affect Adobe Reader and Acrobat

Microsoft Updates for Multiple Vulnerabilities

Microsoft Updates for Multiple Vulnerabilities

Microsoft Updates for Multiple Vulnerabilities

Apple Updates for Multiple Vulnerabilities

Microsoft Windows and Internet Explorer Vulnerabilities

Microsoft Updates for Multiple Vulnerabilities

Microsoft Video ActiveX Control Vulnerability

Microsoft Updates for Multiple Vulnerabilities

Recently published analyses

• Trojan:Win32/Ramtopt.A
• Worm:Win32/Vobfus.C
• Trojan:Win32/Whitewell.A
• Trojan:Win32/Daonol.I
• TrojanDropper:Win32/Vtimrun.B
• TrojanDownloader:Win32/Vtimrun.B
• Backdoor:Win32/IRCbot.gen!T
• Trojan:Win32/Small.CV
• VirTool:WinNT/Koobface.E
• Trojan:Win32/Alureon.BT

Microsoft has released security advisory 977544 to address a vulnerability in the Server Message Block (SMB) protocol. This vulnerability may allow an attacker to cause a denial-of-service condition. This vulnerability only affects Windows 7 and Server 2008 software.

US-CERT encourages users and administrators to review Microsoft security advisory 977544 and apply the workarounds.

Apple has released Safari 4.0.4 to address multiple vulnerabilities in a number of components. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, conduct cross-site request forgery, or obtain sensitive information. These vulnerabilities affect Safari running on both the Mac OS X and Windows platforms.

US-CERT encourages users and administrators to review Apple article HT3949 and upgrade to Safari 4.0.4 to help mitigate the risks.

Top desktop threats

• Trojan:JS/Agent.FA
• Virus:Win32/Sality.AM
• Worm:Win32/Conficker.B
• Worm:Win32/Taterf.B
• Worm:Win32/Conficker.C
• TrojanDownloader:JS/Renos
• TrojanDownloader:ASX/Wimad.AZ
• Worm:Win32/Conficker.B!inf
• Exploit:JS/Mult.BB
• Worm:Win32/Autorun!inf

Top MSRT detections

• Worm:Win32/Taterf.B
• PWS:Win32/Frethog.gen!B
• PWS:Win32/Lolyda.AT
• Worm:Win32/Conficker.B
• Trojan:Win32/FakeXPA
• Trojan:WinNT/Alureon.D
• Worm:Win32/Conficker.C
• Worm:Win32/Taterf.gen!A
• Trojan:Win32/FakeRean
• Trojan:Win32/Yektel.A

Top adware/spyware

• BrowserModifier:Win32/Zwangi
• Adware:Win32/Hotbar
• Trojan:Win32/Alureon.gen!U
• BrowserModifier:Win32/BaiduSobar
• Trojan:Win32/FakeXPA
• TrojanDownloader:Win32/Renos.JI
• Trojan:Win32/Hiloti.gen!A
• Trojan:Win32/FakeSmoke
• Adware:Win32/DoubleD
• Trojan:Win32/Yektel.A