July 4, 2013
RIKEN

English/Japanes
ftp.riken.jp

Important notice: virus infection of files hosted on RIKEN's software mirroring site

On June 27, it was discovered that a number of files hosted on the Simtelnet archive of the software mirroring site hosted by RIKEN were infected with viruses. Viruses were discovered in 52 of the 127,846 programs stored in the Simtel archive. The programs in question were deleted along with the directory. There was no illegal access or leak of information from our server. If you have used the Simtel archive on our server, please make sure that none of the files contain viruses (please find a list of infected programs at the end of this notice). We apologize for this incident, and will take measures to prevent any recurrence.

* As explained at http://en.wikipedia.org/wiki/Simtel, Simtel was a large archive of freeware and shareware programs, primarily for Windows and MS Dos. The main site (www.simtel.net) went offline on March 15, 2013. The archive, with approximately 300 GB of programs, was previously mirrored on the RIKEN mirroring site at the following directory: http://ftp.riken.jp/pc/simtelnet. These viruses-infected files were mirrored from ftp://ftp.simtel.net/pub/simtelnet/. The directory has been removed.

The following is a list of infected programs, including the virus with which they were infected and download counts for three months from April 1 to June 30.

                             File

                Virus

Download

simtelnet/winxp/secencr/tsetupsw.exe

not-a-virus:Monitor.Win32.Dafunk

143

simtelnet/winxp/emaispam/win_patch.exe

Trojan-Dropper.Win32.Agent.hl

335

simtelnet/win95/security/winterw.exe

Trojan.Dropper.Agent-115

195

simtelnet/win95/secmisc/3DAlienAquariumTrial.exe

Suspicious.MH690.A

3

simtelnet/winnt/secmisc/3DAlienAquariumTrial.exe

Suspicious.MH690.A

0

simtelnet/winnxp/secmisc/3DAlienAquariumTrial.exe

Suspicious.MH690.A

1

simtelnet/win95/secsys/acespy.exe

Trojan.ADH

2

simtelnet/winxp/secmisc/acespy.exe

Trojan.ADH

1

simtelnet/win95/pim/acnfre2c.zip

Adware.ADH

2

simtelnet/winnt/secsys/activmon.zip

Spyware.ADH

0

simtelnet/winxp/secsys/activmon.zip

Spyware.ADH

1

simtelnet/win95/secmisc/AllsmSetup.exe

Spyware.MySuperSpy

1

simtelnet/winnt/secmisc/AllsmSetup.exe

Spyware.MySuperSpy

3

simtelnet/winxp/secmisc/AllsmSetup.exe

Spyware.MySuperSpy

1

simtelnet/win95/edulang/blpnch10.zip

Adware.ADH

1

simtelnet/winxp/network/eam-download.zip

Spyware.IMonitorPCPro

2

simtelnet/winxp/network/eam-std.zip

Spyware.IMonitorPCPro

1

simtelnet/win95/filemngr/efcwt680.exe

Trojan.Gen

2

simtelnet/winnt/secsys/emailobs.zip

Trojan.ADH.2

0

simtelnet/winxp/network/eMonSetup.zip

Trojan.ADH.2

2

simtelnet/win95/secencr/engi204.exe

Spyware.PaqKeylog

5

simtelnet/winnt/secencr/engi204.exe

Spyware.PaqKeylog

0

simtelnet/winxp/secencr/engi204.exe

Spyware.PaqKeylog

2

simtelnet/win95/edulang/epunch10.zip

Adware.ADH

1

simtelnet/winnt/encode/exescript.exe

TrojanHorse

0

simtelnet/winnt/secencr/flash_exe_encrypter.rar

Trojan.Gen.2

0

simtelnet/winxp/secsys/galaxy_setup.exe

Adware.ADH

0

simtelnet/win95/scrsave/hh2003.zip

SecurityRisk.ADH

1

simtelnet/winnt/scrsave/hh2003.zip

SecurityRisk.ADH

0

simtelnet/winxp/scrsave/hh2003.zip

SecurityRisk.ADH

0

simtelnet/win95/secmisc/hpc_install.exe

Infostealer

1

simtelnet/win95/security/hpc_install.exe

Infostealer

1

simtelnet/winnt/secpass/IMLSetup.exe

Trojan.ADH

0

simtelnet/win95/scrsave/KaleidoMorphTrial.exe

Suspicious.MH690.A

2

simtelnet/winnt/scrsave/KaleidoMorphTrial.exe

Suspicious.MH690.A

0

simtelnet/winxp/scrsave/KaleidoMorphTrial.exe

Suspicious.MH690.A

0

simtelnet/winnt/secmisc/MKeyLogger.exe

Spyware.Keylogger

5

simtelnet/winxp/secmisc/MKeyLogger.exe

Spyware.Keylogger

0

simtelnet/win95/website/myweb53.zip

Trojan.Gen

2

simtelnet/winxp/secsys/nsptrial.zip

Trojan.ADH.2

0

simtelnet/win95/business/pdf-to-image.exe

Trojan.ADH

3

simtelnet/win95/edulang/ppunch31.zip

Trojan.ADH.2

0

simtelnet/win95/scrsave/sexy-female-celebs-screensaver.exe

Trojan.ADH

0

simtelnet/win95/inetsrch/sfind202.zip

Adware.ADH

1

simtelnet/win95/edumisc/shpnch10.zip

Adware.ADH

1

simtelnet/win95/inetsrch/sssit211.zip

Trojan.ADH

0

simtelnet/handheld/handheld/sndmisc/uuds_eng.exe

Trojan.ADH.2

0

simtelnet/handheld/sndmisc/uuds_eng.exe

Trojan.ADH.2

0

simtelnet/win95/edulang/waread31.zip

Adware.ADH

0

simtelnet/winnt/webmisc/WE_Standard.zip

Spyware.Keylogger

1

simtelnet/win95/edulang/rfbiz12.zip

Trojan.ADH.2

0

simtelnet/winxp/sndcapt/youtube-to-iphone.zip

Trojan.ADH.2

3

 

Contact
RIKEN Global Relations and Research Coordination Office
Tel: +81-(0)48-462-1225 / Fax: +81-(0)48-463-3687
Email: pr@riken.jp