Computer Virus Name Generator

Antivirus vendors follow a loose naming convention with up to five parts: malware type (Trojan, Worm, Virus, Ransomware), target platform (Win32, Win64, JS, Android, macOS), family name (a unique word identifying the strain), variant letter (A, B, C...), and an optional suffix like !generic for heuristic detections. Different vendors often give the same malware different names, which is why researchers also use CVE identifiers as a common reference.

A virus attaches itself to a legitimate file and spreads when that file is shared. A worm is self-replicating and spreads across networks without needing a host file. A trojan disguises itself as legitimate software to trick users into installing it. Ransomware is a category of trojan that encrypts files and demands payment.

The family name is the core identifier for a group of related malware samples sharing the same codebase or attack pattern. Family names are often invented words, corrupted spellings of real words, or references to the malware's behavior. Variants of the same family are labeled A, B, C, and so on.

Win32 and Win64 are the most common because Windows is the most targeted desktop OS. Other platforms include JS (JavaScript), Android, macOS, Linux, PDF (malicious document macros), and VBS (Visual Basic Script). The platform part tells analysts which OS or file type is targeted.

No. All names are fictional and randomly assembled. They follow structural conventions used by real antivirus vendors but do not correspond to any actual malware. The tool is designed for creative writing, game development, cybersecurity training materials, and educational demonstrations.

A zero-day exploit targets a vulnerability that is unknown to the software vendor — meaning they have had zero days to patch it. Zero-days are highly valuable to attackers because no patch exists at the time of discovery. They are often sold on underground markets or used by nation-state actors before being publicly disclosed through responsible disclosure or bug bounty programs.

Ransomware encrypts files on the victim's system and demands payment (usually in cryptocurrency) in exchange for the decryption key. Modern ransomware families also exfiltrate data before encrypting, threatening to publish it if the ransom is not paid (double extortion). Notable examples include WannaCry (2017), NotPetya (2017), and LockBit. Regular offline backups are the most effective defense.

Signature-based detection matches files against a database of known malware fingerprints — fast and accurate but blind to new threats. Heuristic detection analyzes behavior patterns and code structure to flag suspicious activity without needing a prior signature. Modern antivirus engines combine both along with sandboxing (running suspected malware in an isolated environment) and machine learning classifiers.