top ten list of viruses ever!!!



roberto
07-09-2005, 10:50 PM
According the following criterias

Pc's infected & Damages ($)

Anyone knows???

Thanks

Robert
CUBA

Robert Moir
07-09-2005, 10:50 PM
roberto wrote:
> According the following criterias
>
> Pc's infected & Damages ($)
>
> Anyone knows???

I'm sure plenty of places can supply various lists but as its impossible to
get accurate numbers that everyone will agree on for both your criteria, I
would suggest that any lists shouldn't be taken seriously.

Trafton
07-09-2005, 10:50 PM
roberto wrote:
> According the following criterias
>
> Pc's infected & Damages ($)
>
> Anyone knows???
>
> Thanks
>
> Robert
> CUBA
>
>

Robert,

As Robert Moir said, it's honestly difficult to get statistics about
this kind of thing. Some of the best numbers came from MessageLabs,
which used to post statistics about the worms they detected with their
email service. However, they track only emails, which does not
necessarily correlate to damage or PCs infected.

However, certainly, MyDoom, Sobig.F, and Blaster all rank fairly high on
this list. Although Loveletter was more of a media event, being a 2000
worm means that it cost less and spread less overall than most worms in
history. I recall statistics that said that something like 30% of
computers in some Scandanavian countries were infected, but this could
very well have been based on faulty data. I'm not sure how they arrived
at these numbers, in any case.

A Google search of news articles might help, but the most accurate
information you'll find is probably estimation on economic damage, and
even that will range wildly and is simply too difficult to calculate to
be realistic.

Hope that helps to answer your question. :)

Sincerely,

Benjamin Johnstone-Anderson
Microsoft MVP, Windows Security
Security Manifest: http://www.msmvps.com/trafton/

David H. Lipman
07-09-2005, 10:50 PM
From: "Trafton" <traftonSPAM@mvps.org>


| Robert,
|
| As Robert Moir said, it's honestly difficult to get statistics about
| this kind of thing. Some of the best numbers came from MessageLabs,
| which used to post statistics about the worms they detected with their
| email service. However, they track only emails, which does not
| necessarily correlate to damage or PCs infected.
|
| However, certainly, MyDoom, Sobig.F, and Blaster all rank fairly high on
| this list. Although Loveletter was more of a media event, being a 2000
| worm means that it cost less and spread less overall than most worms in
| history. I recall statistics that said that something like 30% of
| computers in some Scandanavian countries were infected, but this could
| very well have been based on faulty data. I'm not sure how they arrived
| at these numbers, in any case.
|
| A Google search of news articles might help, but the most accurate
| information you'll find is probably estimation on economic damage, and
| even that will range wildly and is simply too difficult to calculate to
| be realistic.
|
| Hope that helps to answer your question. :)
|
| Sincerely,
|
| Benjamin Johnstone-Anderson
| Microsoft MVP, Windows Security
| Security Manifest: http://www.msmvps.com/trafton/

I agree with your assesment and I think the Lovsan/Blaster is at the top of the list.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

roberto
07-09-2005, 10:50 PM
No wonder it was so difficult to find this information on Internet!!

Well....maybe we can make our own list.... to Mydoom (by the way i want to
know if was the first case on history that a virus "shutted down" a site??)
, Sobig, Blaster.... i will add Sasser, Loveletter...maybe Nimda ...but what
about the others?? Any idea or comment??

"David H. Lipman" <DLipman~nospam~@Verizon.Net> escribió en el mensaje
news:uVtavqcfFHA.1472@TK2MSFTNGP12.phx.gbl...
> From: "Trafton" <traftonSPAM@mvps.org>
>
>
> | Robert,
> |
> | As Robert Moir said, it's honestly difficult to get statistics about
> | this kind of thing. Some of the best numbers came from MessageLabs,
> | which used to post statistics about the worms they detected with their
> | email service. However, they track only emails, which does not
> | necessarily correlate to damage or PCs infected.
> |
> | However, certainly, MyDoom, Sobig.F, and Blaster all rank fairly high on
> | this list. Although Loveletter was more of a media event, being a 2000
> | worm means that it cost less and spread less overall than most worms in
> | history. I recall statistics that said that something like 30% of
> | computers in some Scandanavian countries were infected, but this could
> | very well have been based on faulty data. I'm not sure how they arrived
> | at these numbers, in any case.
> |
> | A Google search of news articles might help, but the most accurate
> | information you'll find is probably estimation on economic damage, and
> | even that will range wildly and is simply too difficult to calculate to
> | be realistic.
> |
> | Hope that helps to answer your question. :)
> |
> | Sincerely,
> |
> | Benjamin Johnstone-Anderson
> | Microsoft MVP, Windows Security
> | Security Manifest: http://www.msmvps.com/trafton/
>
> I agree with your assesment and I think the Lovsan/Blaster is at the top
of the list.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

Robert Moir
07-09-2005, 10:50 PM
roberto wrote:
> No wonder it was so difficult to find this information on Internet!!
>
> Well....maybe we can make our own list.... to Mydoom (by the way i
> want to know if was the first case on history that a virus "shutted
> down" a site??)

No. Melissa predated that, and I can't say that Melissa was the first
either.

>, Sobig, Blaster.... i will add Sasser,
> Loveletter...maybe Nimda ...but what about the others?? Any idea or
> comment??

Kak got around.. so did.. umm i forget the virus/worm name but I think it
was something like happy99 *googles* oh yeah.. that one was funny.

David H. Lipman
07-09-2005, 10:50 PM
From: "Robert Moir" <robspamtrap+msnews@gmail.com>

| roberto wrote:
>> No wonder it was so difficult to find this information on Internet!!
>>
>> Well....maybe we can make our own list.... to Mydoom (by the way i
>> want to know if was the first case on history that a virus "shutted
>> down" a site??)
|
| No. Melissa predated that, and I can't say that Melissa was the first
| either.
|
>> , Sobig, Blaster.... i will add Sasser,
>> Loveletter...maybe Nimda ...but what about the others?? Any idea or
>> comment??
|
| Kak got around.. so did.. umm i forget the virus/worm name but I think it
| was something like happy99 *googles* oh yeah.. that one was funny.
|

Happy99 was like Swen in that it could post itself to UseNet News Groups.

Melissa was code "borrowed" from Vicodin and was modified from David Smith, a local New
Jerseyite, and was named after a GoGo dancer in Forida.

Neither brought the havoc of the Lovsan/Blaster worm. IIt caused businesses and gornments
much money and in the US they had to subsequently re-write many security manuals and change
the way their respective networks were secure incurring even more money.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Help
07-09-2005, 10:50 PM
1. W32/MyDoom.A-mm (62M)
2. W32/Sobig.F-mm (35M)
3. W32/Netsky.B-mm (9M)
4. W32/NetSky.D-mm (9M)
5. W32/Klez.H-mm (8M)
6. W32/Swen.A-mm (5M)
7. W32/Netsky.P-mm (4M)
8. W32/Netsky.C-mm (3M)
9. W32/Yaha.E-mm (2M)
10. W32/Dumaru.A-mm (2M)
"roberto" <ralplavner@HotPOP.com> wrote in message
news:eICHCbZfFHA.3304@TK2MSFTNGP12.phx.gbl...
> According the following criterias
>
> Pc's infected & Damages ($)
>
> Anyone knows???
>
> Thanks
>
> Robert
> CUBA
>
>

roberto
07-09-2005, 10:50 PM
M means Millions of Computers afected

"Help" <not@home.xxx> escribió en el mensaje
news:#fTpFc9fFHA.272@TK2MSFTNGP15.phx.gbl...
> 1. W32/MyDoom.A-mm (62M)
> 2. W32/Sobig.F-mm (35M)
> 3. W32/Netsky.B-mm (9M)
> 4. W32/NetSky.D-mm (9M)
> 5. W32/Klez.H-mm (8M)
> 6. W32/Swen.A-mm (5M)
> 7. W32/Netsky.P-mm (4M)
> 8. W32/Netsky.C-mm (3M)
> 9. W32/Yaha.E-mm (2M)
> 10. W32/Dumaru.A-mm (2M)
> "roberto" <ralplavner@HotPOP.com> wrote in message
> news:eICHCbZfFHA.3304@TK2MSFTNGP12.phx.gbl...
> > According the following criterias
> >
> > Pc's infected & Damages ($)
> >
> > Anyone knows???
> >
> > Thanks
> >
> > Robert
> > CUBA
> >
> >
>
>

Robert Moir
07-09-2005, 10:50 PM
Help wrote:
> 1. W32/MyDoom.A-mm (62M)
> 2. W32/Sobig.F-mm (35M)
> 3. W32/Netsky.B-mm (9M)
> 4. W32/NetSky.D-mm (9M)
> 5. W32/Klez.H-mm (8M)
> 6. W32/Swen.A-mm (5M)
> 7. W32/Netsky.P-mm (4M)
> 8. W32/Netsky.C-mm (3M)
> 9. W32/Yaha.E-mm (2M)
> 10. W32/Dumaru.A-mm (2M)

based on what?

Robert Moir
07-09-2005, 10:50 PM
David H. Lipman wrote:
> From: "Robert Moir" <robspamtrap+msnews@gmail.com>
>
>> roberto wrote:
>>> No wonder it was so difficult to find this information on Internet!!
>>>
>>> Well....maybe we can make our own list.... to Mydoom (by the way i
>>> want to know if was the first case on history that a virus "shutted
>>> down" a site??)
>>
>> No. Melissa predated that, and I can't say that Melissa was the first
>> either.
>>
>>> , Sobig, Blaster.... i will add Sasser,
>>> Loveletter...maybe Nimda ...but what about the others?? Any idea or
>>> comment??
>>
>> Kak got around.. so did.. umm i forget the virus/worm name but I
>> think it was something like happy99 *googles* oh yeah.. that one was
>> funny.
>>
>
> Happy99 was like Swen in that it could post itself to UseNet News
> Groups.
>
> Melissa was code "borrowed" from Vicodin and was modified from David
> Smith, a local New Jerseyite, and was named after a GoGo dancer in
> Forida.
>
> Neither brought the havoc of the Lovsan/Blaster worm. IIt caused
> businesses and gornments much money and in the US they had to
> subsequently re-write many security manuals and change the way their
> respective networks were secure incurring even more money.

Happy99 and Kak were trivial enough, but Melissa certainly caused
considerable disruption to business.

As for the money thing, I don't doubt that it did cost money, even that it
cost serious money, but I do wonder what accounting methods are used to
produce those awe inspiring figures that AV companies and clueless
mainstream media people spout.

Kreepz86
07-09-2005, 10:50 PM
from http://computer.howstuffworks.com/virus.htm

"For example, experts estimate that the Mydoom worm infected approximately a
quarter-million computers in a single day in January 2004. (Times Online).
Back in March 1999, the Melissa virus was so powerful that it forced
Microsoft and a number of other very large companies to completely turn off
their e-mail systems until the virus could be contained. The ILOVEYOU virus
in 2000 had a similarly devastating effect. "




"Robert Moir" <robspamtrap+msnews@gmail.com> wrote in message
news:%23lyDTa%23fFHA.3788@tk2msftngp13.phx.gbl...
> David H. Lipman wrote:
>> From: "Robert Moir" <robspamtrap+msnews@gmail.com>
>>
>>> roberto wrote:
>>>> No wonder it was so difficult to find this information on Internet!!
>>>>
>>>> Well....maybe we can make our own list.... to Mydoom (by the way i
>>>> want to know if was the first case on history that a virus "shutted
>>>> down" a site??)
>>>
>>> No. Melissa predated that, and I can't say that Melissa was the first
>>> either.
>>>
>>>> , Sobig, Blaster.... i will add Sasser,
>>>> Loveletter...maybe Nimda ...but what about the others?? Any idea or
>>>> comment??
>>>
>>> Kak got around.. so did.. umm i forget the virus/worm name but I
>>> think it was something like happy99 *googles* oh yeah.. that one was
>>> funny.
>>>
>>
>> Happy99 was like Swen in that it could post itself to UseNet News
>> Groups.
>>
>> Melissa was code "borrowed" from Vicodin and was modified from David
>> Smith, a local New Jerseyite, and was named after a GoGo dancer in
>> Forida.
>>
>> Neither brought the havoc of the Lovsan/Blaster worm. IIt caused
>> businesses and gornments much money and in the US they had to
>> subsequently re-write many security manuals and change the way their
>> respective networks were secure incurring even more money.
>
> Happy99 and Kak were trivial enough, but Melissa certainly caused
> considerable disruption to business.
>
> As for the money thing, I don't doubt that it did cost money, even that it
> cost serious money, but I do wonder what accounting methods are used to
> produce those awe inspiring figures that AV companies and clueless
> mainstream media people spout.
>
>

roberto
07-09-2005, 10:50 PM
I FOUND THIS...( http://news.zdnet.com/2100-1009_22-5149764.html) and
after mydoom.... the rest of the virus has been 2 YEARS OLD BOYS
The MyDoom e-mail virus is only a few days old and still growing, but at
least one security firm is ready to crown it as the worst ever.

Finnish security software and services company F-Secure made the coronation
late Wednesday, declaring MyDoom the fastest-spreading worm ever and "the
worst e-mail worm incident in virus history" in a letter research director
Mikko Hypponen wrote.

MyDoom raced onto the Internet on Monday, quickly clogging e-mail servers,
as it propagated itself with millions of messages laden with malicious
software code. An offshoot of the pest surfaced Wednesday but did not appear
to be spreading nearly as quickly as the original.

F-Secure estimated that the worm was accounting for 20 percent to 30 percent
of worldwide e-mail traffic Wednesday, putting it well ahead of previous
nasties, such as the SoBig.F worm.

F-Secure credited the worm's fast spread to several factors, including
aggressive harvesting of e-mail addresses and the fact that it was released
in the middle of the North American workday, giving it several hours to
spread unchecked among corporate networks.

Other security companies had evaluations almost as dire. MessageLabs, which
screens e-mail, said it had intercepted more than 3.4 million copies of
MyDoom, which infected one of every 12 messages at its peak. That compares
with a total of 33 million infections and a peak rate of one in 17 for
SoBig.F. MyDoom had already climbed to No. 5 on MessageLabs' list of the
all-time most active viruses, surpassing previous annoyances such as SirCam.

Security software and services company Network Associates estimated on
Thursday that between 400,000 and 500,000 PCs worldwide had been infected by
MyDoom. Infection rates were averaging one out of every 10 messages for
large customers and one out of three for small customers, indicating that
the virus concentrates on PCs in the home, where security precautions are
often less stringent than in the office.

"We do believe that home users represent the larger piece of the pie for
infected systems," said Craig Schmugar, a virus research manager for Network
Associates' McAfee division.

Schmugar said home users usually wait to download virus definitions and
removal tools. "The weekend is a good time to do that, so we expect there'll
be a good downturn Monday" in the number of infected systems, he said.

Sharon Ruckman, senior director at security software maker Symantec's
Security Response center, said MyDoom generated an impressive volume of
e-mail traffic at its peak Tuesday. But businesses and e-mail providers were
much better prepared for the assault than with previous bugs, limiting
MyDoom's damage.

"It's hard to compare it with LoveLetter and Melissa, where corporate e-mail
systems were actually taken offline," she said. "Enterprises have good
security systems in place, so they're seeing (MyDoom) trying to get in and
blocking it."


"roberto" <ralplavner@HotPOP.com> escribió en el mensaje
news:eICHCbZfFHA.3304@TK2MSFTNGP12.phx.gbl...
> According the following criterias
>
> Pc's infected & Damages ($)
>
> Anyone knows???
>
> Thanks
>
> Robert
> CUBA
>
>

Jupiter Jones [MVP]
07-09-2005, 10:50 PM
Are you sure?
"M" often means a thousand.
In any event it would have helped if "Help" would have posted the source for
the information.

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar
http://www.dts-l.org


"roberto" <ralplavner@HotPOP.com> wrote in message
news:u%23qAa99fFHA.1148@TK2MSFTNGP12.phx.gbl...
>M means Millions of Computers afected
>
> "Help" <not@home.xxx> escribió en el mensaje
> news:#fTpFc9fFHA.272@TK2MSFTNGP15.phx.gbl...
>> 1. W32/MyDoom.A-mm (62M)
>> 2. W32/Sobig.F-mm (35M)
>> 3. W32/Netsky.B-mm (9M)
>> 4. W32/NetSky.D-mm (9M)
>> 5. W32/Klez.H-mm (8M)
>> 6. W32/Swen.A-mm (5M)
>> 7. W32/Netsky.P-mm (4M)
>> 8. W32/Netsky.C-mm (3M)
>> 9. W32/Yaha.E-mm (2M)
>> 10. W32/Dumaru.A-mm (2M)
>> "roberto" <ralplavner@HotPOP.com> wrote in message
>> news:eICHCbZfFHA.3304@TK2MSFTNGP12.phx.gbl...
>> > According the following criterias
>> >
>> > Pc's infected & Damages ($)
>> >
>> > Anyone knows???
>> >
>> > Thanks
>> >
>> > Robert
>> > CUBA

roberto
07-09-2005, 10:50 PM
yes, it would have helped, but if the M would have meant THOUSAND im sure
Microsoft wouldnt have offered 500 000 usd for the "Mydoom's creator"

"Jupiter Jones [MVP]" <jones_jupiter@hotnomail.com> escribió en el mensaje
news:OQPjkaAgFHA.2444@tk2msftngp13.phx.gbl...
> Are you sure?
> "M" often means a thousand.
> In any event it would have helped if "Help" would have posted the source
for
> the information.
>
> --
> Jupiter Jones [MVP]
> http://www3.telus.net/dandemar
> http://www.dts-l.org
>
>
> "roberto" <ralplavner@HotPOP.com> wrote in message
> news:u%23qAa99fFHA.1148@TK2MSFTNGP12.phx.gbl...
> >M means Millions of Computers afected
> >
> > "Help" <not@home.xxx> escribió en el mensaje
> > news:#fTpFc9fFHA.272@TK2MSFTNGP15.phx.gbl...
> >> 1. W32/MyDoom.A-mm (62M)
> >> 2. W32/Sobig.F-mm (35M)
> >> 3. W32/Netsky.B-mm (9M)
> >> 4. W32/NetSky.D-mm (9M)
> >> 5. W32/Klez.H-mm (8M)
> >> 6. W32/Swen.A-mm (5M)
> >> 7. W32/Netsky.P-mm (4M)
> >> 8. W32/Netsky.C-mm (3M)
> >> 9. W32/Yaha.E-mm (2M)
> >> 10. W32/Dumaru.A-mm (2M)
> >> "roberto" <ralplavner@HotPOP.com> wrote in message
> >> news:eICHCbZfFHA.3304@TK2MSFTNGP12.phx.gbl...
> >> > According the following criterias
> >> >
> >> > Pc's infected & Damages ($)
> >> >
> >> > Anyone knows???
> >> >
> >> > Thanks
> >> >
> >> > Robert
> >> > CUBA
>
>

David H. Lipman
07-09-2005, 10:50 PM
From: "roberto" <ralplavner@HotPOP.com>

| yes, it would have helped, but if the M would have meant THOUSAND im sure
| Microsoft wouldnt have offered 500 000 usd for the "Mydoom's creator"
|

If they wanted thousands they would have used 'K' for Kilo which is a Thousand.
Lowercase 'm' 1/1000 or milli and Capital 'M' for Mega or Millions.

This is standard scientific nomenclature. Capital 'M' never stands for thousands.

Examples.

MB - MegaBytes
mb - MilliBars
KB - KiloBytes
Kb - KiloBits
MHz - MegaHertz
Kc - KiloCycles

Sorry Jupiter.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


top ten list of viruses ever!!!