Top ten viruses and hoaxes reported to Sophos in July 2002

July 31, 2002 Sophos Press Release

Politically motivated virus makes it into the top three

This is the latest in a series of monthly charts counting down the ten most frequently occurring viruses and hoaxes as compiled by Sophos, a world leader in corporate anti-virus protection.

For July 2002, the chart is as follows, with the most frequently occurring virus at number one:

Position Last
month
Malware Percentage of reports
11W32/Klez-H
   17.7%
25W32/Frethem-Fam
   17.0%
36W32/Yaha-E
   16.8%
43=W32/Badtrans-B
   5.8%
52W32/ElKern-C
   3.7%
67W32/Magistr-B
   2.5%
7Re-entryW32/Hybris-B
   1.9%
8Re-entryW32/Klez-E
   1.7%
9Re-entryW32/Nimda-A
   1.5%
10Re-entryW32/Magistr-A
   1.3%
Others30.1%

"While Klez tops the virus chart again this month, more recent discoveries Frethem and Yaha are close on its heels," said Graham Cluley, senior technology consultant at Sophos Anti-Virus. "Yaha came to prominence as a politically motivated virus, launching a rudimentary denial of service attack on the Pakistan government's website and encouraging Indian hackers and virus writers to join forces and attack Pakistan."

"Arriving in an email with the subject 'Re: Your password', Frethem relies on a simple psychological trick to entice users to open the email. The worm is contained in an attached EXE file. As ever, blocking unwanted file types at the gateway would deal with these viruses."

The top ten hoaxes reported to Sophos during July 2002 are as follows:

"JDBGMGR has dominated the hoax chart since its discovery in May," continued Cluley. "The prevalence of "'A Virtual Card for you' and "'Budweiser frogs screensaver' several years after they originated highlights both the severity of hoaxes and how far we still have to go in educating users in safe computing practices. Unlike viral code, hoaxes are not detected or disabled by anti-virus software, so can continue to clog up email bandwidth longer than many true viruses. To prevent this, computer users should refrain from forwarding virus warnings to their friends and colleagues."

810 new viruses were discovered and protected against by Sophos during July 2002.

The total number of viruses Sophos now detects and protects against is 75281.

More information about Klez.

Graphics of the virus top ten chart are available here.

More information about safe computing, including anti-hoax policies.