Re: virus names?

From: Aron Roberts <aron_at_socrates.berkeley.edu>
Date: Mon Nov 08 2004 - 10:31:52 PST

In the message "[Micronet] virus names?", dated 2004-11-08,
tedcrum@socrates.Berkeley.EDU wrote:

>We just got a message from SNS saying that one of our computers is
>infected with a virus detected by "Sophie" as W32/Bagle-AU. It would be
>useful to know what this virus is called by Symantec.
>
>Is "Sophie" a product of Sophos?

   Strictly speaking, no. It's a scanner that uses Sophos' virus
identities (IDEs), however, and is often used with mail servers:

   http://www.vanja.com/tools/sophie/

>If so, can I assume that Symantec calls
>this W32.Beagle.AV ?

   Yes. A Web search can help identify some Rosetta Stones that
translate between the annoyingly varying names (or 'aliases') used by
anti-virus software vendors to describe identical malware. Here are
a cuople of examples for the virus you mention:

   http://secunia.com/virus_information/13041/beagle.av/
   http://www.itc.virginia.edu/desktop/virus/results.php3?virusID=113

Aron Roberts
Workstation Software Support Group

>
>Thanks!
>
>-tc
>
>
>--
>Ted Crum
>tedcrum@socrates.berkeley.edu
>
>------------------------------------------------------------------------
>The following was automatically added to this message by the list server:
>
>For information about Micronet, including subscribing to
>or unsubscribing from its mailing list and finding out
>about upcoming meetings, please visit the Micronet Web site:
><http://micronet.berkeley.edu/>.

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Mon Nov 8 10:34:25 2004

This archive was generated by hypermail 2.1.8 : Mon Nov 08 2004 - 10:34:34 PST