I wouldn't normally suggest changing the signature name for a virus because it is very common for different virus scanners to call the same virus by different names, and sometimes it's nice just to be diferent ;); however with SCO.A/MyDoom I think there would be some merit in changing the name reported by ClamAV to MyDoom.A.
Although MyDoom is not the definitive name for this virus (it's also known as Novarg & even Mimail.R), it /is/ the name that has been widely used in the media and in recent CERT advisories, so it's the name people know. I've had a large number of enquiries from my users asking what this SCO.A virus is - most of them have tried searching on the web but haven't found any information. It has been more confusing for them because I use two virus scanners in a chain and when SCO.A arrives in a bounce message, it's the second scanner that detects it and that reports it as MyDoom. The original virus update did suggest that the name could change to be more in line with other scanners. Submission: 756 Sender: David Submitted virus name: Unknown Virus Virus name: Worm.SCO.A Added: Yes Note: The name may change once other av-scanners start to detect this. The currently used name was suggested by Tomasz Kojm due to its content. Any thoughts ? Andy ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
