| #

## Malware Naming

Malware, with the exception of boot sector viruses and some file infectors, is named according to the following format:
`PREFIX_THREATNAME.SUFFIX`
The suffix used in the naming convention indicates the variant of the threat. The suffix assigned to a new threat (meaning the binary code for the threat is not similar to any existing security risks) is the alpha character "A." Subsequent strains are given subsequent suffixes, for example, "B", "C", "D". Occasionally a threat is assigned a special suffix, (`.GEN`, for generic detection or `.DAM` if the variant is damaged or malformed).

Prefix | Description
--- | ---
No prefix | Boot sector viruses or file infector
1OH | File infector
ADW | Adware
ALS | Auto-LISP script malware
ATVX | ActiveX malicious code
BAT | Batch file virus
BHO | Browser Helper Object - A non-destructive toolbar application
BKDR | Backdoor virus
CHM | Compiled HTML file found on malicious websites
COOKIE | Cookie used to track a user's web habits for the purpose of data mining
COPY | Worm that copies itself
DI | File infector
DIAL | Dialer program
"DOS, DDOS" | Virus that prevents a user from accessing security and antivirus company websites
ELF | Executable and Link format viruses
EXPL | Exploit that does not fit other categories
FLOODER | "Tool that allows remote malicious hackers to flood data on a specified IP, causing the target system to hang"
FONO | File infector
GCAE | File infector
GENERIC | Memory-resident boot virus
HKTL | Hacking tool
HTML | HTML virus
IRC | Internet Relay Chat malware
JAVA | Java malicious code
JOKE | Joke program
JS | JavaScript virus
NE | File infector
NET | Network virus
PALM | Palm PDA-based malware
PARITY | Boot virus
PE | File infector
PERL | "Malware, such as a file infector, created in PERL"
RAP | Remote access program
REG | Threat that modifies the system registry
SPYW | Spyware
SYMBOS | Trojan that affects telephones using the Symbian operating system
TROJ | Trojan
UNIX | Linux/UNIX script malware
VBS | VBScript virus
WORM | Worm
"W2KM, W97M, X97M, P97M, A97M, O97M, WM, XF, XM, V5M" | Macro virus