A type of worm that replicates by sending complete, independent copies of itself over a network.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
For general instructions on disinfecting a local network infection, please see Eliminating A Local Network Outbreak.
When searching our Virus Descriptions database for a specific program (e.g., Net-Worm:W32/Example.A), you may be directed to this page if the overview below sufficiently describes the program. Alternatively, you may be directed to this page if no description matching that specific query is currently available. You can submit a sample of the suspect file to our Response Lab for further analysis via:
A net-worm is a type of worm that finds new host machines to infect by usingnetwork shares -a media (such as a hard drive or server) that can be accessed by multiple computers on a local area network (LAN), such as a company intranet. The net-worm will usually infect the share in order to subsequently infect every computer that accesses the share.
In many cases, corporate computers and servers have a few open shares, making these networks particularly vulnerable and facilitating a net-worm's rapid spread through the network. In more sophisticated cases, net-worms may even contain a list of generic passwords to use in attacking password-protected shares.
Once transferred to another host machine, some net-worms copy themselves to startup folders of different users on remote computers. In this case they can start every time a user is logged on to the machine.
A net-worm may also include a malicious payload, such as dropping keylogger program on the infected computer, or attempting to connect it to a remote server.
For more information, see Terminology: Net-Worm.