HEADS UP - viruses in password protected zip files

[mikea]

On Mon, Mar 01, 2004 at 12:50:50PM +0100, Peter Peters wrote:
> On Mon, 1 Mar 2004 11:29:29 +0100, you wrote:
>
> >Hi!
> >
> >> Its in our top10 of today:
> >>
> >> 4747    W32/Netsky.B at mm
> >> 1275    W32/Swen.A at mm
> >> 404     W32/Sober.C at mm
> >> 337     W32/Mydoom.A at mm
> >> 200     W32/Netsky.C at mm
> >> 126     W32/Bugbear.B at mm
> >> 96      W32/Bagle.F at mm
> >> 57      W32/Bagle.E at mm
> >> 49      W32/Mydoom.E at mm
> >> 19      W32/Mimail.J at mm
> >
> >The G one also just came in twice:
> >
> >2       W32/Bagle.G at mm
>
> We got
> 12 removed
>      12 W32/Bagle.E at mm
> 1 removed
>      10 W32/Bagle.F at mm
>       8 W32/Bagle.C at mm
> 4 removed
>       4 W32/Bagle.D at mm
> 9 removed
>       1 W32/Bagle.G at mm

Here at WeBuildHighways, it's a lot like this:

$ FOUNDnow
#               This is /home/mikea/bin/FOUND.
#               Start Input Phase on 2004.60 (2004 Mar 1) at 13:08:49 local
Worm.Bagle.A3                           1 every     1.88 hours
Worm.Bagle.E                            1 every     1.01 hours
Worm.Bagle.F                            1 every     1.88 hours
Worm.Mydoom.F                           1 every    52.59 minutes
Worm.SCO.A                              1 every    13.15 hours
Worm.SomeFool                           1 every    10.11 minutes
Worm.SomeFool.B                         1 every    56.34 minutes
Worm.SomeFool.B-petite                  1 every    19.72 minutes
Total                                   1 every     4.51 minutes

Now, does anyone have a pointer to translating from ClamAV's malware
names to, say, Norton's, so I can see how our stats compare to others?

--
Mike Andrews
mikea at mikea.ath.cx
Tired old sysadmin