Aktivitas Conficker Kian Menggila di Indonesia

Worm Conficker yang belakangan menjadi momok pengguna komputer dan internet Tanah Air ternyata malah semakin menggila mengirim serangan. Tak ayal, persentase serangannya pun jauh melampui malware (program jahat) lainnya.

Demikian berdasarkan daftar Top 100 Malware dengan penyerangan terbanyak untuk periode 30 April 2009 – 7 Mei 2009 yang dikeluarkan Kasperky Lab.

Pada periode in,i 'cacing' yang juga memiliki nama Net-Worm.Win32.Kido.ih itu memiliki persentase serangan 49.4841%. Padahal di minggu sebelumnya, persentasenya tercatat 46.0534%. Sementara di beberapa minggu sebelumnya, hanya berada di kisaran 30%.

"Konten berikut merupakan konten yang dikumpulkan dari server Kaspersky berdasarkan jumlah serangan yang dikirimkan ke Kaspersky Security Network
melalui interaksi antar peserta user dari masing-masing negara," ujar Kaspersky dalam keterangan tertulisnya, Jumat (8/5/2009).

Untuk menyeleksinya menjadi Top 100, setiap deteksi malware berdasarkan negara membutuhkan serangan kepada koleksi server Kaspersky yang berjumlah
lebih dari 7.000.


Berikut adalah nama-nama program jahat yang paling sering menyerang di Indonesia:

Net-Worm.Win32.Kido.ih 49.4841%
HEUR:Trojan.Win32.Generic 8.0257%
Heur.Win32.Trojan.Generic 6.3747%
Trojan-Dropper.Win32.Small.axv 3.2791%
Trojan-Dropper.Win32.Agent.zje 2.7517%
Trojan-Downloader.Win32.Agent.wxq 2.7058%
Trojan-Downloader.Win32.Agent.ansh 2.7058%
Heur.Win32.Invader 2.0179%
Trojan-DDoS.Win32.Agent.ei 1.5363%
HEUR:Trojan.Win32.Invader 1.4676%
Net-Worm.Win32.Kido.eo 1.1236%
Backdoor.Win32.VB.iqo 1.1236%
Trojan.Win32.Agent.ceaj 0.986%
Trojan-Downloader.Win32.FraudLoad.ehp 0.9172%
Trojan.Win32.Agent.ceau 0.8255%
HEUR:Trojan-Downloader.Win32.Generic 0.7567%
Trojan-Downloader.Win32.Injecter.crw 0.6191%
Trojan-Downloader.Win32.Injecter.cqd 0.5733%
Trojan-Downloader.Win32.FraudLoad.eiq 0.5274%
not-a-virus:AdWare.Win32.Shopper.ar 0.5274%
Trojan-Downloader.Win32.Agent.bjts 0.4815%
Heur.Win32.Downloader 0.4357%
Trojan-Downloader.Win32.CodecPack.fus 0.4127%
Rootkit.Win32.Podnuha.bsd 0.3898%
Trojan.Win32.Agent.cexo 0.321%
Trojan-Downloader.Win32.Small.jqz 0.2981%
Trojan-Downloader.Win32.Agent.bjhd 0.2752%
Trojan-Downloader.Win32.FraudLoad.eih 0.2752%
not-a-virus:AdWare.Win32.Agent.lmz 0.2064%
Trojan-Dropper.Win32.VB.yab 0.1834%
Trojan-Downloader.Win32.FraudLoad.eik 0.1834%
Trojan-Spy.Win32.Ardamax.e 0.1605%
MultiPacked.Multi.Generic 0.1605%
Net-Worm.Win32.Kido.dam.y 0.1605%
Trojan-GameThief.Win32.Magania.baex 0.1376%
Trojan-Downloader.Win32.FraudLoad.ehz 0.1376%
Trojan.Win32.Agent2.ils 0.1376%
Net-Worm.Win32.Kido.fc 0.1376%
Trojan.Win32.Buzus.fit 0.1376%
Trojan-PSW.Win32.IMMultiPass.od 0.1376%
not-a-virus:AdWare.Win32.Shopper.v 0.1147%
Trojan-Downloader.MSIL.Agent.bn 0.1147%
Trojan-GameThief.Win32.WOW.bie 0.1147%
Trojan.Win32.Tdss.abzl 0.1147%
Virus.Win32.Sality.z 0.1147%
not-a-virus:FraudTool.Win32.MalwareDoctor.d 0.1147%
Trojan.Win32.Buzus.axkt 0.0917%
Backdoor.Win32.Agent.aexg 0.0917%
Trojan-Dropper.Win32.Small.ayg 0.0917%
Packed.Win32.Black.d 0.0917%
Trojan.Win32.Pakes.lmb 0.0917%
Trojan.Win32.Agent.cbst 0.0917%
not-a-virus:AdWare.Win32.OneStep.z 0.0917%
Trojan-Downloader.Win32.Geral.hu 0.0917%
Hoax.MSIL.BadJoke.Agent.s 0.0917%
SuspiciousPacker.Multi.Generic 0.0917%
Trojan.Win32.Monder.cavv 0.0688%
Trojan.Win32.Buzus.avhh 0.0688%
Trojan-Downloader.Win32.FraudLoad.eil 0.0688%
Trojan-Downloader.Win32.Agent.bvpa 0.0688%
Trojan-Downloader.Win32.Horst.bc 0.0688%
Backdoor.Win32.Inject.aav 0.0688%
Trojan.Win32.VB.odh 0.0688%
Trojan-Spy.Win32.Ardamax.n 0.0688%
Trojan.Win32.Dialer.ext 0.0688%
Trojan-Downloader.JS.Agent.gj 0.0688%
Trojan.Win32.Agent.arjp 0.0688%
Trojan-Dropper.Win32.Microjoin.ap 0.0688%
not-a-virus:Client-IRC.Win32.mIRC.631 0.0688%
HEUR:Worm.Win32.Generic 0.0688%
not-a-virus:AdWare.Win32.SaveNow.cp 0.0688%
Trojan-Dropper.Win32.Agent.doi 0.0688%
Trojan.Win32.Agent2.hmp 0.0688%
Virus.Win32.Sality.aa 0.0688%
HEUR:Trojan.Win32.StartPage 0.0688%
Heur.Win32.Backdoor.Generic 0.0688%
Backdoor.Win32.Hupigon.aovn 0.0688%
Trojan-GameThief.Win32.Lmir.cny 0.0459%
Trojan-Dropper.Win32.ExeBinder.e 0.0459%
not-a-virus:FraudTool.Win32.PrivacyCenter.k 0.0459%
Packed.Win32.Black.a 0.0459%
not-a-virus:FraudTool.Win32.ErrorDoctor.d 0.0459%
Trojan.Win32.Tdss.abwc 0.0459%
Trojan-Downloader.Win32.Agent.akwa 0.0459%
Virus.Win32.Alman.b 0.0459%
Trojan-Banker.Win32.Banker.adks 0.0459%
not-a-virus:AdWare.Win32.Sahat.as 0.0459%
Packed.Win32.Krap.n 0.0459%
Backdoor.Win32.Bifrose.foo 0.0459%
not-a-virus:FraudTool.Win32.InternetAntivirus0.0459%
Backdoor.Win32.Rbot.jxa 0.0459%
Trojan-Dropper.Win32.Tiny.cf 0.0459%
Trojan-PSW.Win32.LdPinch.afeb 0.0459%
Trojan-Dropper.Win32.VB.jue 0.0459%
not-a-virus:NetTool.Win32.Portscan.c 0.0459%
Trojan.Win32.Monder.byqu 0.0459%
Trojan.Win32.Delf.kym 0.0459%
Net-Worm.Win32.Koobface.in 0.0459%
Trojan.Win32.Agent.ccpe 0.0459%
Virus.Win32.VB.ki 0.0459%

Read More

Cyber-war Malaysia and Indonesia

Cyber-war Malaysia and Indonesia, as if there is no letup. In addition to 'the nerve fiber' on Facebook, virtual dedemit also do actions to 'rough up' hundreds of sites Malaysia.

Data on the Zone-H.org, a site that records actions defacement of the web virtual dedemit, indicates that the perpetrators named Basher13 indeed perform actions on the Malaysia site (domain. My). One of them even get a star rating as a 'Special Defacement' (the action of the important sites).

Action according to Zone-H worthy stars that can alter the display on the site Customspg.gov.my. This is the official site Customs Pulau Pinang. However, after the crop be (Cache) Google, the site has been moved to Kastampg.gov.my. Site Kastampg.gov.my is not one victim Basher 13 and can still be accessed normally.

Action against sites Basher13 Malaysia (. My), which has been verified by Zone-H of 10 new actions. While deployed to the online forum of 236 sites, with 82 of them ending. My.

Read More