Worm naming: an example

Discussion in 'malware problems & news' started by FanJ, Jan 25, 2004.

Thread Status:
Not open for further replies.
  1. FanJ

    FanJ Guest

    Sometimes you see that different companies give different names to viruses.

    Reuters published recently an article about it:
    http://www.reuters.com/newsArticle.jhtml?type=technologyNews&storyID=4178039

    In this thread I don't want to talk about which exact name is used, but more about the structure used by different companies.

    There are a lot of different kind of viruses.
    In this thread I restrict myself to worms.

    The purpose of this thread is to show you the structure used by the companies for "worm-naming".

    I am well aware that I might have missed a lot of issues involving this topic.
    So feel free to give your comment !

    I will use as example the recent Beagle worm; maybe I should have chosen another example.

    I could well have missed some AVs/ATs, and/or their names for this worm, or have made another mistake; again: feel free to post them.
     
  2. FanJ

    FanJ Guest

    [table]
    [tr][td]a2[/td][td]Worm.Win32.Bagle[/td][/tr]
    [tr][td]AntiVir/AVPE[/td][td]Worm/Bagle.A[/td][/tr]
    [tr][td]Avast[/td][td]Win32:Beagle[/td][/tr]
    [tr][td]AVG[/td][td]I-Worm/Bagle[/td][/tr]
    [tr][td]Bit Defender[/td][td]Win32.Bbgle.A@mm[/td][/tr]
    [tr][td]BOClean[/td][td]BEAGLE[/td][/tr]
    [tr][td]Command[/td][td]W32/Bagle.A@mm[/td][/tr]
    [tr][td]Dr. Web[/td][td]Win32.HLLM.Beagle.15872[/td][/tr]
    [tr][td]eTrust EZ; CA[/td][td]Win32.Bagle.A[/td][/tr]
    [tr][td]F-PROT[/td][td]W32/Bagle.A@mm[/td][/tr]
    [tr][td]F-Secure[/td][td]Bagle[/td][/tr]
    [tr][td]KAV[/td][td]I-Worm.Bagle[/td][/tr]
    [tr][td]McAfee[/td][td]W32/Bagle@MM[/td][/tr]
    [tr][td]NAV[/td][td]W32.Beagle.A@mm[/td][/tr]
    [tr][td]NOD32[/td][td]Win32/Bagle.A[/td][/tr]
    [tr][td]Norman[/td][td]W32/Bagle.A@mm[/td][/tr]
    [tr][td]Panda[/td][td]W32/Bagle.A.worm[/td][/tr]
    [tr][td]PestPatrol[/td][td]?[/td][/tr]
    [tr][td]RAV[/td][td]Win32/Bagle.A@mm[/td][/tr]
    [tr][td]Sophos[/td][td]W32/Bagle-A[/td][/tr]
    [tr][td]Tauscan[/td][td]?[/td][/tr]
    [tr][td]TDS[/td][td]Worm.Bagle[/td][/tr]
    [tr][td]The Cleaner[/td][td]Bagle[/td][/tr]
    [tr][td]TrendMicro[/td][td]WORM_BAGLE.A[/td][/tr]
    [tr][td]TrojanHunter[/td][td]Worm.Bagle.100[/td][/tr]
    [tr][td]Trojan Remover[/td][td]Worm/Gable[/td][/tr]
    [tr][td]Vexira[/td][td]Worm/Bagle.A[/td][/tr]
    [/table]
     
  3. the Tester

    the Tester Registered Member

    Joined:
    Jul 28, 2002
    Posts:
    2,854
    Location:
    The Gateway to the Blue Hills,WI.
    Hi Fanj.

    This is an interesting topic.
    I have a question about part of the names for worms in general.

    What does W32 and Win32 mean?
     
  4. FanJ

    FanJ Guest

    Hi Tester,

    I assume it means "Windows 32-bit Operating System".
     
  5. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    Correct FanJ. At least for Symantec. :D
    http://securityresponse.symantec.com/avcenter/vnameinfo.html

    But probably for the rest as well.

    Regards,

    Pieter
     
  6. the Tester

    the Tester Registered Member

    Joined:
    Jul 28, 2002
    Posts:
    2,854
    Location:
    The Gateway to the Blue Hills,WI.
    Thank you Fanj and Pieter.
     
Loading...
Thread Status:
Not open for further replies.