Original URL: http://www.theregister.co.uk/2001/12/03/badtrans_surges_past_sircam_as/

BadTrans surges past SirCam as most infectious virus

Plague begins to tail off

By John Leyden

Posted in Security, 3rd December 2001 13:04 GMT

BadTrans-B has eclipsed SirCam to become the most common email-borne virus on the Internet.

MessageLabs, a managed service provider which scans its users email for viruses, blocked 170,510 emails containing BadTrans-B, in the last four weeks.

SirCam was the next most common virus -it was filtered out by MessageLabs 52,179 times. Nimda.E, number eight in the list and the most damaging virus to corporate systems, was blocked 1,631 times. Email is only one of the ways that Nimda spreads, so the worm was more common than these figures suggest.

MessageLabs has produced a detailed analysis of the outbreak of BadTrans-B which suggests the rates of infection tailing off. The originating domain name of infected emails had led MessageLabs to say three in five of the infected emails it blocked came from home users. The outbreak of the worm was felt across the world but the UK was hit particularly badly.

MessageLabs' list considers the actual number of viruses blocked during a month, unlike the monthly study by anti-virus vendor Sophos, which looks at calls to its support centres.

Sophos, as of November 27, closed the book on the worst viruses of 2001 and concluded Nimda and SirCam will account for 50 per cent of the reports it will receive this year. BadTrans-B barely scraped into the Sophos list at number nine.
®

Top ten viruses blocked by MessageLabs in November

External Links

Latest monthly stats from MessageLabs

Related Stories

Hybrid viruses set to become bigger threat
BadTrans virus bites Windows users hard
Thousands of idiots still infected by SirCam
SirCam virus hogs connections with spam
Firms hit in Nimda mutant outbreak
Nimda worm tails off
Users haven't learned any lessons from the Love Bug
Rise in viruses within emails outpacing growth of email