A net-worm is a type of worm that finds new host machines to infect by using network shares -a media (such as a hard drive or server) that can be accessed by multiple computers on a local area network (LAN), such as a company intranet. The net-worm will usually infect the share in order to subsequently infect every computer that accesses the share.
Security programs will sometimes unintentionally identify a clean program or file as malicious if its code or behavior is similar to a known harmful program or file. This is known as a False Alarm or False Positive (FP).
In most cases, a False Positive is fixed in a subsequent database release.
Usually, updating your F-Secure security product to use the latest database is enough to resolve the issue.
If you suspect a detected file is a False Positive, you can check by first updating your F-Secure security product to use the latest detection database updates, then rescanning the file.
After checking, if you still believe the file is incorrectly detected, you can submit a sample of it to F-Secure Labs for re-analysis.
NOTE If the file was moved to quarantine, you will need to first collect the file from quarantine before you can submit it.
If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.
Microsoft also provides enterprise-level instructions for excluding files from scanning by antivirus software.
Find the latest advice in our Community Knowledge Base.
See the manual for your F-Secure product on the Help Center.
Submit a file or URL for further analysis.
In many cases, corporate computers and servers have a few open shares, making these networks particularly vulnerable and facilitating a net-worm's rapid spread through the network. In more sophisticated cases, net-worms may even contain a list of generic passwords to use in attacking password-protected shares.
Once transferred to another host machine, some net-worms copy themselves to startup folders of different users on remote computers. In this case they can start every time a user is logged on to the machine.
A net-worm may also include a malicious payload, such as dropping keylogger program on the infected computer, or attempting to connect it to a remote server.
For more information about worms, see Article: Worms.
Date Created: -
Date Last Modified: -