Endpoint Protection

 View Only
  • 1.  McAfee vs Symantec - Virus Names

    Posted Jan 03, 2013 07:03 AM

    Im currently in the process of moving a large number of nodes from McAfee to Symantec.  I have a lot of Virus Detection information for McAfee detections and im searching round trying to find a decent webpage/table to show the equivalent name in SEPM.

    Any Suggestions

     

    All the best for 2013

    Fal



  • 2.  RE: McAfee vs Symantec - Virus Names

    Posted Jan 03, 2013 07:05 AM

    You won't find much other than looking on their site. They may give a "Name used by other vendor" description.

    There is no standard naming convention between AV companies. Been a problem for a long long time.



  • 3.  RE: McAfee vs Symantec - Virus Names

    Posted Jan 03, 2013 07:12 AM

    Yes ive been using their NAI site but its very hit and miss sad.

     



  • 4.  RE: McAfee vs Symantec - Virus Names

    Posted Jan 03, 2013 07:12 AM

    Hi,

     

    Always Competitive company detect virus another company product.



  • 5.  RE: McAfee vs Symantec - Virus Names

    Posted Jan 03, 2013 08:17 AM

    And until a governing body overseas this, it will continue to be. Here's a good resource:

    http://www.avien.net/



  • 6.  RE: McAfee vs Symantec - Virus Names

    Trusted Advisor
    Posted Jan 03, 2013 10:04 AM

    Hello,

    Virus naming coventions are different from company to company.

    For Symantec, check these Articles:

    Naming convention for statically named virus definition update files

    http://www.symantec.com/docs/TECH161663

    Virus Naming Conventions

    http://www.symantec.com/security_response/virusnaming.jsp

    When there is a Virus detected by Symantec, the Symantec website gives more insight / write up on what would be other Antivirus companies be calling the same detection as.

    For example:

    Infostealer.Dexter

    http://www.symantec.com/security_response/writeup.jsp?docid=2012-121219-2643-99

    states

    Also Known As: BKDR_DEXTR.A [Trend]

    Hope that helps!!



  • 7.  RE: McAfee vs Symantec - Virus Names

    Posted Jan 03, 2013 09:26 PM

    There's no such table exist, i think the only way is to google up the concerned McAfee virus name at VirusTotal.com.... from here you will see all kind of name for different vendor...

     

    Sample for "Conficker" at McAfee.... you'll see "Downadup" at Symantec.... etc etc

     

    https://www.virustotal.com/file/AA0BBAECB678868E1E7F57C7CA9D61B608B3D788BE490790EB1D148BEADF4615/analysis/