Worms vs Virus what's the difference?

6

3

I don't understand very well the difference between viruses ans worms, it seems that worms don't need any host to duplicate himself.

But somebody can explain it? It means that a worm IS a soft? and not the virus?

In case of worms you can find files containing the worm himself? Thanks a lot for responses..

bAN

Posted 2009-10-09T16:30:59.953

Reputation: 1 646

Question was closed 2012-08-21T22:10:32.780

1If you cut a worm's head off, it grows another. Same with the malware variant. – Phoshi – 2009-10-09T16:47:54.193

Answers

7

The one thing that distinguishes a Worm from a Virus (and that gives the name "worm" to a virus-like malware), is the fact a worm doesn't need to attach itself to another executable in order to spread across a network.

Worms are thus meant to spread over a network (with or without code meant to damage the computers they infect). Their code is tailored for network spreading. They will always damage the network by increasing the bandwidth usage. Some may even have code meant to provoke denial of service attacks (DOS) by clogging the network bandwidth.

Virus, on the other hand, need an executable image to spread within a system. They will spread to other executables within the same computer (they will attach themselves to those executables which become infected and able to spread the virus). And they spread to other computers as these executables are passed to them by any means (download, on a CD or floppy disk) and executed.

A Dwarf

Posted 2009-10-09T16:30:59.953

Reputation: 17 756

3In essence this is correct, but I'm not sure about a virus needing an executable. I would say that a worm spreads, normally by more than one means. A virus sets up an infection vector that passively waits to be transported. Thus, a worm may transport viruses (and they often do). – harrymc – 2009-10-09T17:10:19.967

1I agree harry. Similarly, a virus could conceivably include code to generate a worm. The classical distinctions are becoming blurred as new methods are achieved. However, I think it is still possible to look at the detailed parts of a... multi-purpose(?) malware and identify them by name if we keep to their modus-operandi. – A Dwarf – 2009-10-09T17:55:03.777

1

Worms are computer programs that replicate themselves. Technically, the definition doesn't require them to be malicious. http://en.wikipedia.org/wiki/Computer_worm

The definition of virus changes depending on who you ask. To some people, any annoying/harmful software can be called a virus; more strictly, viruses require a host to be sent to a new location. http://en.wikipedia.org/wiki/Computer_virus

Here's another page with succinct definitions: http://www.smartcomputing.com/techsupport/detail.aspx?guid=&ErrorID=23245

I remembered after posting my initial answer that the IEEE published a formal definition at one point, but when I just Googled for it, the article required a subscription. If someone has IEEE access, or is willing to shell out $19, here's the link: http://www2.computer.org/portal/web/csdl/doi/10.1109/ICONS.2008.37

Pops

Posted 2009-10-09T16:30:59.953

Reputation: 7 353

-1

A worm is a kind of virus. And what A Dwarf earlier described as a 'virus' is actually called a 'file virus'. There are many types of viruses. Worms, file viruses, bootsector viruses, trojan horses are just a few types of viruses.

So, 'virus' is the general name of unwanted, self-spreading pieces of software. And 'worm' is a specific type of virus.

Hiawatha

Posted 2009-10-09T16:30:59.953

Reputation: 11