The german antivirus company Avira has published statistics about file extensions used by malware in URLs that may occur in emails or infected websites for January 2010.
The most common extension used by malware is .exe (53.29%) followed by no file extension (18.99%) and the third place goes to .txt (10.37%). ■