When cybersecurity analysts turned their attention to a representative sample of frequently infected computers, the results were stark: 18 distinct malware samples emerged, split into high‑risk viruses and medium‑risk threats.

The scan’s findings are neatly arranged in the table below:

| # | Malware Type | Risk Level | |---|--------------|------------| | 1 | Virus | HIGH | | 2 | Virus | HIGH | | 3 | Adware | Medium | | 4 | Virus | HIGH | | 5 | Malcode | Medium | | 6 | Adware | Medium | | 7 | Virus | HIGH | | 8 | Virus | HIGH | | 9 | Adware | Medium | |10 | Virus | HIGH | |11 | Keylogger | Medium | |12 | Adware | Medium | |13 | Trojan | Medium | |14 | Virus | HIGH | |15 | Virus | Medium | |16 | Adware | Medium | |17 | Scareware | Medium | |18 | Malware | Medium |

The seven high‑risk entries—numbers 1, 2, 4, 7, 8, 10, and 14—represent the most dangerous payloads in the sample. According to the Expel Quarterly Threat Report (Q1 2024), high‑risk malware typically includes USB Initial Access Tools (USB IATs), Remote Access Tools (RATs), and other IATs that allow threat actors to gain immediate and persistent footholds in corporate networks.

Among the high‑risk samples is the long‑standing Trojan Win32/Tiggre!rfn. Removal guides describe it as capable of executing a wide range of malicious actions on a victim’s machine, and its presence in the scan underscores the ongoing danger posed by legacy trojan families that can slip past conventional antivirus signatures.

The remaining eleven entries fall into the medium‑risk category, encompassing a mix of adware, keyloggers, trojans, scareware, and generic malware. Adware—software that automatically displays advertisements—does not qualify as a virus but is considered a potentially unwanted program (PUP). While it can degrade performance and bombard users with intrusive ads, it is generally less destructive than viruses or trojans.

Keyloggers, which covertly record keystrokes, also appear in the medium‑risk group. They can facilitate credential theft but are typically less damaging than ransomware. The scan also features a single “Malcode” entry (5) and a “Scareware” entry (17), illustrating how malware authors continue to diversify their tactics. Scareware, which masquerades as legitimate security alerts to trick users into downloading malicious software, remains a common vector for user‑targeted attacks.

These findings echo broader industry observations. The 2026 Security Detectives blog lists the most dangerous new malware threats, noting that many variants exploit social engineering and bundled installers. Meanwhile, the Malware Tips website warns that fake “Your Windows Computer Is At High Risk” pop‑ups are designed to lure users into installing malware.

The scan also highlights the necessity of layered defenses. Wikipedia explains that effective protection against malware typically involves antivirus software, firewalls, regular patching, secure network configurations, and user‑awareness training. The Expel report stresses that high‑risk IATs can evade traditional detection, underscoring the need for advanced threat‑intelligence platforms.

In sum, the 18‑entry scan demonstrates that high‑risk viruses remain a primary concern for both organizations and consumers, while a broader array of medium‑risk threats continues to proliferate. Cybersecurity professionals are advised to keep defenses current, monitor for known high‑risk signatures, and educate users about deceptive tactics such as scareware and fake security alerts.

As threat actors refine their IATs and weave more sophisticated social‑engineering techniques into their campaigns, the malware landscape will likely evolve further. Ongoing research and threat‑intelligence sharing will be essential to mitigate the risks uncovered in this scan.