CME is only for high-profile outbreaks. It is impossible to assign an ID for EVERY virus, because there is nobody has/knows about every virus. In fact antivirus companies are reluctant to share more than a few virus samples with each other, let alone US Government (who runs CME program). And then like the poster above said, even if they had all been numbered, media will still call them "Sex and Rock'n'Roll virus on the loose".
Actually it is a worm. Virus infects files. Worms spreads copies of itself. Hence: mass-mailing worm is correct. Network worms are typically the ones that exploit a software vulnerability to spread, IM, P2P and email worms don't. http://www.informit.com/guides/printerfriendly.asp ?g=security&seqNum=23
Re:Naming Worms - Virii's pride
on
Name That Worm
·
· Score: 1
Actually names will be like W32/Bagle.A!CME-123 or WORM_BAGLE.B!M123 etc... either that or name will continue to be W32/Bagle.A but it will have an ALIAS of CME-123 on the antivirus vendor website.
As someone who works in the industry I can comment: CARO developed the naming standard (e.g. W32/FamilyName.Variant@reference) not the actual names for the malware. CARO members run a discussion forum that actually will decide which new malware warrants a new CME IDs. So CARO and other Antivirus groups all collaborate on this.
Simpsons@mm is an AppleScript worm that targets the Macintosh platform. It may open Microsoft Outlook Express or Entourage, and send a copy of itself with the original message to everyone in your address book. The name of the script is "Simpsons Episodes." This worm does not appear to be particularly malicious, and is similar to other mass-mailing worms that affect Window's computers such as VBS.LoveLetter
http://securityresponse.symantec.com/avcenter/venc/data/mac.simpsons@mm.html
Slashdot Mirror
CME is only for high-profile outbreaks. It is impossible to assign an ID for EVERY virus, because there is nobody has/knows about every virus. In fact antivirus companies are reluctant to share more than a few virus samples with each other, let alone US Government (who runs CME program). And then like the poster above said, even if they had all been numbered, media will still call them "Sex and Rock'n'Roll virus on the loose".
Actually it is a worm. Virus infects files. Worms spreads copies of itself. Hence: mass-mailing worm is correct. Network worms are typically the ones that exploit a software vulnerability to spread, IM, P2P and email worms don't. http://www.informit.com/guides/printerfriendly.asp ?g=security&seqNum=23
Actually names will be like W32/Bagle.A!CME-123 or WORM_BAGLE.B!M123 etc... either that or name will continue to be W32/Bagle.A but it will have an ALIAS of CME-123 on the antivirus vendor website.
As someone who works in the industry I can comment: CARO developed the naming standard (e.g. W32/FamilyName.Variant@reference) not the actual names for the malware. CARO members run a discussion forum that actually will decide which new malware warrants a new CME IDs. So CARO and other Antivirus groups all collaborate on this.
Simpsons@mm is an AppleScript worm that targets the Macintosh platform. It may open Microsoft Outlook Express or Entourage, and send a copy of itself with the original message to everyone in your address book. The name of the script is "Simpsons Episodes." This worm does not appear to be particularly malicious, and is similar to other mass-mailing worms that affect Window's computers such as VBS.LoveLetter http://securityresponse.symantec.com/avcenter/venc /data/mac.simpsons@mm.html