Microsoft’s latest Security Intelligence Report (SIRv11) has found software exploits play a much smaller part in malware infections than previously thought. The vast majority of malware infections detected by the company’s Malicious Software Removal Tool (MSRT) for the first half of 2011 depended on user interaction or an abuse of the Windows AutoRun feature to infect PC. Despite the fear surrounding software exploits, attacks depending on these barely registered, recording just 5.6 percent of infections. Not a single example of the most common malware types incorporating the method.”]

