On Thu, 26 Feb 2004, Andrew McCall wrote:

> Hi,
>
> Can anyone tell me why the virus names within ClamAV are different from ones
> from other virus vendors?
>
> For example, W32.Netsky.B (as called by Sophos, McAfee etc.) is detected and
> named Worm.Somefool by ClamAV.
>

There is no organized naming coordination between AV vendors, they all use
whatever name they see fit. It's not just Clam that sometimes uses
different names you'll also see different commercial vendors use different
names for the same virus.
Often a lot of vendors will initially use their own names, then later
rename the virus to the name used by those that detected it first, but
that is not always the case.

In short. Don't expect any two AV programs to use the same name for a
virus.

I'm currently working on a "virus info" site for Clam that'll attempt to
cross reference the names used by various vendors so you'll have a central
location for looking up names and aliases. It'll take a while before it's
done, since my time it limited.


/Jesper Juhl



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to