A worm is a self-reproducing program that does not infect other programs as a virus will.
Worms are usually seen on networks and on multi-processing operating systems, where the worm will create copies of itself that are also executed. Each new copy will create more copies quickly clogging the system. Keep in mind, however, that most PCs are connected to a network (the Internet) and so are targets for worms.
The so-called ARPANET/INTERNET “virus” was actually a worm. It created copies of itself through the network, eventually bringing the network to its knees. It did not infect other programs as a virus would, but simply kept creating copies of itself that would then execute and try to spread to other machines.
Some newer macro viruses also send their infected documents over the Internet to others who then infect their systems and spread the virus further. Some have classed these as worms. However, because these programs require a host in order to spread (even though they send themselves and the host over a network) Computer Knowledge (and most anti-virus researchers) puts these beasts into the virus category. But, you can see where distinctions between categories can get blurred.
The newer script worms don’t help clarify the classification issue. Many of these are sent as a VisualBasic Script (VBS) file attached to an E-mail message. If you click on the attachment to open it the script runs and will often send the script to addresses in your E-mail address book; thus spreading itself. Technically, these would be worms but are often called viruses.
Bottom line: Don’t really try to make a firm distinction between a worm and a virus. You’ll just get frustrated. Call it a virus and be done with it but understand, deep down, that it just might be a worm.
Summary
- A worm is a self-reproducing program.
- They usually spread via networks but remembers most PCs are connected to a network (the Internet).
 Software Threats |
|
 |
 |
| Trojans | Virus Droppers |