Can we please

have some coordination between the A/V outfits so there's only *one* name for every virus, not two or three? Even the Reg hacks haven't agreed on what to call it.

Assuming what they found is a 'machines infected' counter, I think they're interpreting it the wrong way, given the discrepancy between counter totals and unique IPs seen. It could be counting the number of machines attacked, whether or not it's successful. Alternatively, the virus could attack a machine, then query it to confirm that it was successfully infected. If the target was already infected, it would still be counted as a successful attack. This would substantially over-count the number of infections as it spreads across a corporate network.