Get documents about "Computer Virus Incident Report for August 2012 1. Virus Detection
Shared by: linxiaoqin
-
Stats
- views:
- 2
- posted:
- 1/26/2013
- language:
- English
- pages:
- 5
Document Sample
Attachment 1
Computer Virus Incident Report for August 2012
1. Virus Detection Count by Month
2. Virus Report Count by Month
-1-
Attachment 1
3. Virus Report Count by Year
-2-
Attachment 1
4. Viruses Reported in August 2012
50 types of viruses were reported in August, with 814 reports related to Windows/DOS and 141
reports to script virus and macro virus and 6 reports to PDA virus.
i） Windows The symbol * indicates a new virus
Windows/DOS virus Report count Script virus Report count
W32/Mydoom 210 VBS/Solow 5
W32/Netsky 180 WM/Cap 3
W32/Autorun 66 VBS/Mondezimia 1
W32/Mytob 63 W97M/Smac 1
W32/Downad 62 VBS/LOVELETTER 1
W32/Bagle 51 VBS/SST 1
W32/Klez 28
W32/Sality 20
W32/Fbound 14 Subtotal (6 types) 12
W32/Virut 14
W32/Mumu 14 Macro virus Report count
W32/Funlove 11 XM/Laroux 62
W32/Gammima 11 XM/Mailcab 61
W32/Lovgate 10 W97M/Lexar 4
W32/IRCbot 8 XF/Sic 2
W32/Chir 7
W32/Licum 5
W32/Imaut 5
W32/Sohanad 4
W32/Badtrans 3
W32/Korgo 3 Subtotal (4 types) 129
W32/Palevo 3
Perl/Santy 2 ii)PDA Report count
W32/Nuwar 2 AndroidOS/Lotoor 4
W32/Mabezat 2 AndroidOS/Fakeinst 1
W32/Stration 2 AndroidOS/Adware 1
W32/Dotex 2
W32/Fakerecy 2
W32/Fujacks 2
W32/Hybris 1
W32/Whybo 1 Subtotal (3 types) 6
W32/Rontokbro 1
W32/Nimda 1 iii) Macintosh Report count
W32/Sobig 1 None
W32/Bacterra 1
W32/Stuxnet 1 iv) OSS (OpenSourceSoftware):Unix including
W32/Swen 1 Linux and BSD Report count
None
< Reference information >
・ W indows/DOS Virus
A virus designed to work in the W indows
environment and the MS-DOS environment.
・ Macro Virus
A virus designed to exploit the macro feature of
Microsoft Word/ Excel etc
Subtotal (37 types) 814 ・ Script Virus
Note: Detection count includes A virus written in a simplified programming
that of the virus's subspecies language that does not require source code to
be converted into machine code.
-3-
Attachment 1
Note: denotation in the virus name column has the following meaning:
Code Meaning
W32 Works in the Windows32- bit environment
XM Abbreviated form of ExcelMacro for Microsoft Excel95/97
WM Abbreviated form of WordMacro for Microsoft Word95/97
W97M Abbreviated form of Word97Macro for Microsoft Word97
X97M Abbreviated form of Excel97Macro for Microsoft Excel97
VBS Written in Visual Basic Script(VBS)
Wscript Works in the Windows Scripting Host environment (excluding VBS)
AndroidOS Works in the Android OS environment
XF Works under Microsoft Excel95/97. Abbreviated form of ExcelFormula.
5. Report Count by Report Submitter
Reports from corporate users marked the highest count, accounting for about 98 percent.
Report count
Report submitter Aug. 2012 Jul. 2012 Aug. 2011 (the same month a
(previous month) year ago)
Corporate user 940 97.8% 838 95.6% 883 94.8%
Individual user 1 0.1% 0 0.0% 0 0.0%
Education
20 2.1% 39 4.4% 48 5.2%
institution
Total 961 877 931
6. Repot Count by Route of Infection (Finding)
As the route of infection (finding), e-mail marked the highest count, accounting for about 91 percent.
Report count
Route of infection (finding) Aug. 2012 Jul. 2012 Aug. 2011 (the same month
(previous month) a year ago)
E-mail 875 91.1% 762 86.9% 851 91.4%
Downloading (*) 5 0.5% 7 0.8% 8 0.9%
External Media 0 0.0% 1 0.1% 1 0.1%
Network 81 8.4% 106 12.1% 71 7.6%
Unknown/other routes 0 0.0% 1 0.1% 0 0.0%
Total 961 877 931
(*) Including those that were infected by accessing a Web Page
7. Number of PCs Infected
Report count
Number of PCs infected Aug. 2012 Jul. 2012 Aug. 2011 (the same month a
(previous month) year ago)
0 961 100.0% 875 99.8% 930 99.9%
1 0 0.0% 1 0.1% 1 0.1%
2–4 0 0.0% 0 0.0% 0 0.0%
5–9 0 0.0% 1 0.1% 0 0.0%
10 – 19 0 0.0% 0 0.0% 0 0.0%
20 - 49 0 0.0% 0 0.0% 0 0.0%
50 or more 0 0.0% 0 0.0% 0 0.0%
Total 961 877 931
-4-
Attachment 1
Computer Virus Incident Reporting Program
This program was established and enforced in April 1990 by the Ministry of Economy, Trade and Industry
(METI) according to its computer virus prevention guidelines and encourages those who detected
computer viruses to report them to IPA so that the recurrence or the spread of such infection can be
prevented.
While IPA responds individually to each report submitter, it also establishes countermeasures against
virus incidents, based the reports submitted. Submitted reports are carefully handled to protect the privacy
of report submitters and used solely for the purpose of analyzing damage situation and periodically
releasing our findings.
Computer Virus Prevention Guidelines:
Established on July 7, 1995 (Ministry of International Trade and Industry (MITI) release No. 429)
Revised on September 24, 1997 (MITI release No. 535)
Final revision on December 28, 2000 (MITI release No. 952)
The One Designated by the Minister of Economy, Trade and Industry:
January 5, 2004 (METI release No. 2)
Contact to:
IT Security Center, Information-technology Promotion Agency,
Japan (IPA/ISEC)
Kagaya/Aoki
Tel: +81-3-5978-7591; Fax: +81-3-5978-7518;
E-mail:
-5-
