WORM Confusion?

[Beno]

Hi,

smartcomputing.com sources tell me that a worm is a type of virus that is self replicating and uses a network to self replicate however it does not infect other files.

Then they go ahead and give an example of a worm virus called VBS/LoveLetter. It was described as having a nude picture of Jennifer Lopez and when activated overwrites all file on a system with specific extensions therefore making them useless I guess!

What I don't understand is, how could this be considered a worm when its definition says that it does not infect other files. I thought a worm was a virus that kept replicating until you got a sort of DOS attack that chewed system resources until it crashed.

Can someone fill me in here

Cheers

Beno

------------------
Have a nice day

[mjc]

I guess that "worms" are kind of like the worms in an apple...they will go through your hard drive searching for a specific file or type of file and then delete it (most often), and the worm itself sends out a new copy of itself. Other virii "infect" a file by adding pieces of their own code to a certain type of file, and then that file sends out copies of the virus.

------------------
mjc
Links list:Computer Links (http://www.dreamwater.org/tech/mjc/index.htm)

Celts are the men that heaven made mad, For all their battles are merry and their songs are all sad.

[YODA74]

Virus
A computer virus is a program that is designed to replicate itself and spread from file to file, usually attaching itself to applications. When this application is run, it can infect other files on a user's disk. By definition, human interaction is necessary for a virus to spread to another user's files. This can be performed by downloading files, trading diskettes with others, copying files to/from file servers, or sending e-mail attachments.

Worm
A computer worm also infects other computers, but it is spread to other computers on a network automatically and without the action of humans. This allows computer worms to spread more rapidly than computer viruses. A worm doesn't alter or delete files but instead they reside in memory eat up system resources, and slow down your computer. To protect against a worm, networked users must keep up with operating system patches and updates and be aware of any suspicious traffic.

Trojan Horse
A Trojan Horse is a program that initially appears useful or benign and fools a user into running it. But while it runs, it could be allowing "back door" access to your computer by hackers or destroying files on your hard disk. For protection a gainst a Trojan Horse, users must be suspicious of any unknown program and be sure it is safe before running it.

If you go to one of McGafee or Norton they probobly can give a better definition than I can.


------------------
Treading,Troden,Trails
HERE (http://www.davematthewsband.com)

[Beno]

Thanks mjc but that really doesn't answer my question because it is going against the definition stated in the first paragraph of my initial post.

You see your saying that worms do in fact infect other files by destroying them or changing there extensions whereas other people say that worms don't infect other files.

Who do I believe??

Beno

------------------
Have a nice day

[Beno]

Thanks YODA,

so would you agree that a virus that changes file extensions is a worm or is not a worm. I agree with what your saying but when you have good sources saying something else that can be a little misleading, you tend to get slightly confused.

------------------
Have a nice day

[Gallaeglagh]

I think the answer to your question is that the worm by itself just propagates itself. It's code that spreads normally through an address book. However most worms also include a payload which of course most often is some nasty virus.

------------------
To Beer, the cause of and solution to all of life's problems - Homer Simpson

[YODA74]

yup your welcome but i don't know what you consider a good source,as far as being confused aren't we all,But kinda looks like i know the difference between a worm
and a pilot knob.and no if it changes files i wouldn't think it's a worm.i would lean more twords a Virus or a Trojan but thats also not saying that a worm cannot have a virus connected to it nor a trojan.as to where it could open a back door or move files but on it's own as far as i know it does not infect a file on it's own.

------------------
Treading,Troden,Trails
HERE (http://www.davematthewsband.com)



[This message has been edited by YODA74 (edited 12-15-2001).]

[mjc]

A worm can delete a file, that doesn't change the file, just its location...a worm won't actually put its code into a file, just move, delete or change the extension (the file is not infected just renamed so it is no longer findable). They are working with a pretty narrow definition of infection...meaning that the malware (virus, worm, trojan...whatever), if it actually inserts code into a file then it is not a worm.

------------------
mjc
Links list:Computer Links (http://www.dreamwater.org/tech/mjc/index.htm)

Celts are the men that heaven made mad, For all their battles are merry and their songs are all sad.

[Beno]

Thanks mjc and the rest of the gang,

thats much clearer to me now!

:-))

Beno

------------------
Have a nice day

[Paul Komski]

My pennyworth.

...a worm is a type of virus that is self replicating and uses a network to self replicate however it does not infect other files.

I think the only thing wrong with this quote is that it is incomplete and should have finished ... not infect other files in order to replicate.

The main essence of any virus (computer or biological) is its ability to self replicate. Some even go as far as to say that computer and biological viruses are essentially the same thing and both are forms of life!!

Just as with biological viruses, what happens when infection takes place and what gets infected depends on both the virus and the host. Classic computer viruses are self-replicating executables, whilst eMail worms replicate by replicating eMails and some dont consider this to be true self-replication.

Viruses and worms can both "infect" files and can do harm in a number of ways. But it is the methodology of replication that allows the distinction between them to be made; and sometimes worms are viruses as well. Well (LOL) thats how I see it http://www.PCGuide.com/ubb/tongue.gif People tend to think that because these entities do harm they are thereby viruses etc. But it would be quite easy to create viruses that were benign or even beneficial!! But thats evolution after all. http://www.PCGuide.com/ubb/wink.gif http://www.PCGuide.com/ubb/wink.gif http://www.PCGuide.com/ubb/wink.gif

Angelic script-kiddies of the future could be writing viruses to kill malignant computer viruses, if they must find something for their "idle" hands to do.

------------------
Take nice care of yourselves - Paul

[Beno]

Thanks for the reply Paul

I think there seems to be a lot of people that are slightly confused by this concept by the amount of replies!!

Beno

------------------
Have a nice day