Skip navigation

Latest threat detection statistics from ESET

Bournemouth, UK (12th November 2007) – ESET announced today that a trojan that targets online gamers, in particular Asian users, was the number one threat to computer users in October. Accounting for 5.73% of detections made by ESET’s ThreatSense.Net statistical reporting, Win32/PSW.Agent.NDP steals information from several sources, before sending the information to a remote attacker.

“Agent.NDP is an interesting threat as it does not exploit any security vulnerability and does not contain its own mailing engine,” comments Pierre Marc Bureau, researcher, ESET. “Trojans are commonly used to perform identity theft and other malicious actions. In this case, Agent.NDP seems to target the popular Chinese online games, Forthgoer and AskTao, attempting to steal information such as usernames and passwords, which can then be exploited in a variety of ways for illegal gain.”

Most probably installed after being downloaded from a website, Agent.NDP copies itself, upon execution, in the user’s temporary folder and writes a DLL in the same folder. It then injects the DLL’s code into explorer.exe to monitor system’s execution and find the information it is looking for.

Second in the ranking for October, is INF/Autorun, which reached 3.45 % of detections during last month. This label is used to describe a variety of malware that use the file autorun.inf. The file autorun.inf contains information to run programs automatically when removable media is inserted into a computer. Viruses that install or modify autorun.inf files are detected as INF/Autorun by ESET NOD32. Malicious programs that spread on USB sticks are often detected as INF/Autorun.

Top 10 Threats for October 2007

1 Win32/PSW.Agent.NPD – 5.73%
2 INF/Autorun – 3.45%
3 Win32/TrojanDownloader.Ani.Gen – 2.80%
4 Win32/Adware.Virtumonde – 2.72%
5 Win32/Agent.BCK – 2.05%
6 Win32/Adware.Virtumonde.FP 1.40%
7 Win32/Agent 1.34%
8 Win32/RJump.A – 1.33%%
9 IRC/SdBot – 1.22%
10 Win32/Adware.Agent.AB – 0.99%.


About ThreatSense.Net

ThreatSense.Net reports detection statistics from millions of client computers around the world and is believed to be the most comprehensive malware reporting system available. From an original idea, realised in VIRUS RADAR, ThreatSense.Net, includes data about all types of threats seen attacking user systems, not just those transmitted via email.

The (anonymous) statistical information is collected from NOD32 users, who enable the reporting service in the product, to provide a comprehensive view of the behaviour and spread of malware in the real world. Currently data is collected from more than 10 million systems, and has tracked more than 10,000 different threats and malware families.

About ESET

ESET develops software solutions that deliver instant, comprehensive protection against evolving computer security threats. ESET pioneered and continues to lead the industry in proactive threat detection. Over the past 20 years, ESET’s NOD32 Antivirus has consistently achieved the highest accolades in all types of comparative testing. ESET’s flagship product, ESET NOD32 Antivirus, is the foundational product that builds out the ESET product line to include ESET Smart Security. ESET Smart Security is an integrated antivirus, antispyware, antispam and personal firewall solution that combines accuracy, speed and an extremely small system footprint to create the most effective security solution in the industry. Both products have an extremely efficient code base that eliminates the unnecessary large size found in some solutions. This means faster scanning that doesn’t slow down computers or networks.

Sold in more than 110 countries, ESET has worldwide production headquarters in Bratislava, SK and worldwide distribution headquarters in San Diego, U.S. ESET also has offices in UK, Argentina and Czech Republic and is globally represented by an extensive partner network. For more information, visit or call 0845 838 0832.

PR Contact:

Sara Claridge
Marylebone Media Relations
+44 (0) 870 766 8482
+44 (0) 7968 626838 (mobile)

This press release was distributed by ResponseSource Press Release Wire on behalf of Marylebone Media Relations in the following categories: Consumer Technology, Computing & Telecoms, for more information visit