Worm naming: an example

Sometimes you see that different companies give different names to viruses.

Reuters published recently an article about it:
http://www.reuters.com/newsArticle.jhtml?type=technologyNews&storyID=4178039

In this thread I don't want to talk about which exact name is used, but more about the structure used by different companies.

There are a lot of different kind of viruses.
In this thread I restrict myself to worms.

The purpose of this thread is to show you the structure used by the companies for "worm-naming".

I am well aware that I might have missed a lot of issues involving this topic.
So feel free to give your comment !

I will use as example the recent Beagle worm; maybe I should have chosen another example.

I could well have missed some AVs/ATs, and/or their names for this worm, or have made another mistake; again: feel free to post them.

 

[table]
[tr][td]a2[/td][td]Worm.Win32.Bagle[/td][/tr]
[tr][td]AntiVir/AVPE[/td][td]Worm/Bagle.A[/td][/tr]
[tr][td]Avast[/td][td]Win32:Beagle[/td][/tr]
[tr][td]AVG[/td][td]I-Worm/Bagle[/td][/tr]
[tr][td]Bit Defender[/td][td]Win32.Bbgle.A@mm[/td][/tr]
[tr][td]BOClean[/td][td]BEAGLE[/td][/tr]
[tr][td]Command[/td][td]W32/Bagle.A@mm[/td][/tr]
[tr][td]Dr. Web[/td][td]Win32.HLLM.Beagle.15872[/td][/tr]
[tr][td]eTrust EZ; CA[/td][td]Win32.Bagle.A[/td][/tr]
[tr][td]F-PROT[/td][td]W32/Bagle.A@mm[/td][/tr]
[tr][td]F-Secure[/td][td]Bagle[/td][/tr]
[tr][td]KAV[/td][td]I-Worm.Bagle[/td][/tr]
[tr][td]McAfee[/td][td]W32/Bagle@MM[/td][/tr]
[tr][td]NAV[/td][td]W32.Beagle.A@mm[/td][/tr]
[tr][td]NOD32[/td][td]Win32/Bagle.A[/td][/tr]
[tr][td]Norman[/td][td]W32/Bagle.A@mm[/td][/tr]
[tr][td]Panda[/td][td]W32/Bagle.A.worm[/td][/tr]
[tr][td]PestPatrol[/td][td]?[/td][/tr]
[tr][td]RAV[/td][td]Win32/Bagle.A@mm[/td][/tr]
[tr][td]Sophos[/td][td]W32/Bagle-A[/td][/tr]
[tr][td]Tauscan[/td][td]?[/td][/tr]
[tr][td]TDS[/td][td]Worm.Bagle[/td][/tr]
[tr][td]The Cleaner[/td][td]Bagle[/td][/tr]
[tr][td]TrendMicro[/td][td]WORM_BAGLE.A[/td][/tr]
[tr][td]TrojanHunter[/td][td]Worm.Bagle.100[/td][/tr]
[tr][td]Trojan Remover[/td][td]Worm/Gable[/td][/tr]
[tr][td]Vexira[/td][td]Worm/Bagle.A[/td][/tr]
[/table]

 

Hi Fanj.

This is an interesting topic.
I have a question about part of the names for worms in general.

What does W32 and Win32 mean?

 

Hi Tester,

I assume it means "Windows 32-bit Operating System".

 

Correct FanJ. At least for Symantec.
http://securityresponse.symantec.com/avcenter/vnameinfo.html

But probably for the rest as well.

Regards,

Pieter

 

Thank you Fanj and Pieter.