SGNET Query Results

Query summary

Selected options: date, avsig

Grouped options: country, avsig

Rate threshold: 1

---

SELECT count(distinct(injection_attack.injection_id)) AS nbs, info_source_maxmind.country AS Country, vt_report_result.signature AS Signature FROM source,tiny_session,injection_attack,vt_report_result,info_source_maxmind WHERE source.source_id=tiny_session.source_id AND tiny_session.tiny_session_id=injection_attack.tiny_session_id AND tiny_session.begin_at>to_date('1-MAR-8') AND tiny_session.begin_at<to_date('31-MAR-8') AND injection_attack.md5=vt_report_result.md5 AND vt_report_result.antivirus='Symantec' AND info_source_maxmind.source_id=source.source_id GROUP BY info_source_maxmind.country, vt_report_result.signature ORDER BY info_source_maxmind.country, count(distinct(injection_attack.injection_id)) DESC

AE

Signature	Number of code injections
found [Backdoor.Trojan]	2

AR

Signature	Number of code injections
found [Backdoor.Trojan]	1
found [W32.Rahack.H]	1

AT

Signature	Number of code injections
found [W32.Rahack.W]	3
found [W32.Spybot.Worm]	2

AU

Signature	Number of code injections
found [W32.IRCbot]	1

BE

Signature	Number of code injections
found [W32.Rahack.W]	1

BG

Signature	Number of code injections
found [W32.Rahack.H]	2

BR

Signature	Number of code injections
found [W32.Rahack.H]	3

CA

Signature	Number of code injections
found [W32.Rahack.H]	3
found [W32.Rahack.W]	6
found [Trojan Horse]	2
found nothing	1

CH

Signature	Number of code injections
found [Backdoor.Trojan]	1
found [W32.Rahack.H]	2
found [W32.Rahack.W]	2

CN

Signature	Number of code injections
found [Backdoor.Trojan]	6
found [W32.Rahack.H]	2
found [W32.Rahack.W]	1

CO

Signature	Number of code injections
found [Trojan Horse]	3

CY

Signature	Number of code injections
found [W32.Rahack.W]	2

CZ

Signature	Number of code injections
found [W32.IRCbot]	1

DE

Signature	Number of code injections
found [Backdoor.Trojan]	2
found [W32.Rahack.H]	5
found [W32.Rahack.W]	5
found [Trojan Horse]	2
found [W32.IRCBot.Gen]	1
found [Backdoor.Graybird!Gen]	1

DK

Signature	Number of code injections
found [Backdoor.Trojan]	8
found [W32.Rahack.H]	7
found [W32.Rahack.W]	5
found [Trojan Horse]	2

DZ

Signature	Number of code injections
found [Backdoor.Graybird!Gen]	3

ES

Signature	Number of code injections
found [W32.Rahack.H]	1
found [W32.Rahack.W]	1
found [W32.Spybot.Worm]	2
found [W32.IRCbot]	3
found [W32.Virut.B]	3

FI

Signature	Number of code injections
found [Backdoor.Trojan]	1
found nothing	1

FR

Signature	Number of code injections
found [Backdoor.Trojan]	18
found [W32.Rahack.H]	19
found [W32.Rahack.W]	12
found [W32.IRCbot]	4
found [Trojan Horse]	7
found nothing	4
found [W32.Virut.B]	1

GB

Signature	Number of code injections
found [Backdoor.Trojan]	5
found [W32.Rahack.H]	3
found [W32.Rahack.W]	8
found [W32.Spybot.Worm]	2
found [W32.IRCbot]	2
found nothing	1
found [W32.Pinfi]	2

HK

Signature	Number of code injections
found [W32.IRCbot]	1

HR

Signature	Number of code injections
found [Backdoor.Trojan]	1
found [W32.Rahack.W]	2

HU

Signature	Number of code injections
found [W32.Rahack.W]	2

IT

Signature	Number of code injections
found [Backdoor.Trojan]	1
found [W32.Rahack.H]	5
found [W32.Rahack.W]	1
found [W32.IRCbot]	3
found nothing	1

JO

Signature	Number of code injections
found nothing	6

JP

Signature	Number of code injections
found [Backdoor.Trojan]	6
found [W32.Rahack.H]	1
found [W32.Rahack.W]	1

KG

Signature	Number of code injections
found [W32.IRCbot]	10

KR

Signature	Number of code injections
found [Backdoor.Trojan]	17
found [W32.Rahack.H]	25
found [W32.Rahack.W]	21
found nothing	4

LT

Signature	Number of code injections
found [Backdoor.Trojan]	1
found [W32.Rahack.W]	2

LV

Signature	Number of code injections
found [W32.Rahack.W]	4

MD

Signature	Number of code injections
found [W32.Rahack.H]	2

MX

Signature	Number of code injections
found [Backdoor.Trojan]	4
found [W32.Rahack.W]	2

NL

Signature	Number of code injections
found [W32.Rahack.W]	1
found [W32.Spybot.Worm]	1
found [W32.IRCbot]	2
found nothing	1

NO

Signature	Number of code injections
found [Backdoor.Trojan]	3
found [Trojan Horse]	1

NZ

Signature	Number of code injections
found [W32.Rahack.W]	1
found nothing	1

PL

Signature	Number of code injections
found [Backdoor.Trojan]	2
found [W32.Rahack.H]	1
found [W32.Rahack.W]	7
found nothing	2

PR

Signature	Number of code injections
found [Backdoor.Trojan]	1
found nothing	1

PT

Signature	Number of code injections
found [Backdoor.Trojan]	1
found [W32.Rahack.H]	1
found [W32.Rahack.W]	2
found [Trojan Horse]	2

RO

Signature	Number of code injections
found [W32.Spybot.Worm]	1
found nothing	5

RU

Signature	Number of code injections
found [Backdoor.Trojan]	3
found [W32.Rahack.W]	4
found [W32.Spybot.Worm]	16
found [W32.IRCbot]	10
found nothing	1
found [W32.IRCBot.Gen]	1

SE

Signature	Number of code injections
found [W32.Rahack.H]	1
found [W32.Rahack.W]	2
found nothing	1

TH

Signature	Number of code injections
found [Backdoor.Trojan]	2
found [W32.Rahack.H]	2

TR

Signature	Number of code injections
found [Backdoor.Trojan]	3
found [W32.IRCbot]	1
found [Trojan Horse]	3
found nothing	2
found [W32.Virut.U]	1

TW

Signature	Number of code injections
found [Backdoor.Trojan]	1
found [W32.Rahack.H]	6
found [W32.Rahack.W]	5

UA

Signature	Number of code injections
found [W32.IRCbot]	11
found nothing	6

US

Signature	Number of code injections
found [Backdoor.Trojan]	24
found [W32.Rahack.H]	24
found [W32.Rahack.W]	19
found [W32.IRCbot]	1
found [Trojan Horse]	5
found nothing	1

VE

Signature	Number of code injections
found [W32.IRCbot]	1

Signature	Number of code injections
found [Backdoor.Trojan]	24
found [W32.Rahack.H]	21
found [W32.Rahack.W]	17
found [Trojan Horse]	5
found nothing	3