AhnLab said Wednesday that almost half of all SpyEye domains are located in the United States.

The South Korean company's malicious packet analysis system, AhnLab Packet Center, also reported that Russia is a distant second with 7% of SpyEye domains and the Ukraine was third with 6%. SpyEye is a banking Trojan.

The "10310" variant on SpyEye was found to be the most distributed version at 34.5%, followed by "10299" and "10290" at almost 15% each.

AhnLab provides an online security product that includes a secure browser, anti-keylogger, firewall and anti-virus/spyware.