Re: Name that worm--plan looks to cut through chaos

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 09/25/05

  • Next message: optikl: "Re: Opera browser is not free..."
    Date: Sun, 25 Sep 2005 12:57:54 GMT

    From: "Imhotep" <>

    | "Zotob.E, Tpbot-A, Rbot.CBQ and IRCbot.worm: all names given to a single
    | worm that wreaked havoc in Windows 2000 systems last month. Among the
    | plethora of identifiers, perhaps the most useful--CME-540--didn't make an
    | impact."
    | "But that's about to change. CME-540 was the tag attached to the worm by the
    | Common Malware Enumeration initiative, which is just emerging from its test
    | phase. Next month, the U.S. Computer Emergency Readiness Team plans to
    | officially take the wraps off the effort, meant to reduce the confusion
    | caused by the different names security companies give worms, viruses and
    | other pests."
    | Imhotep

    It is interesting to note, I could find no data at the US CERT web site on "Common Malware
    Enumeration" except pointing to MITRE --

    MITRE shows CME has been around since at least June 8, 2005.


  • Next message: optikl: "Re: Opera browser is not free..."