1. Win32/Bundpil Previous Ranking: 1 Percentage Detected: 2.99% Win32/Bundpil.A is a worm that spreads via removable media. The worm contains an URL address, and it tries to download several files from the address. The files are then executed and the HTTP protocol is used.  The worm may delete the following folders: *.exe *.vbs *.pif *.cmd … More Monthly Threat Report: May 2014