A program that uses computer or network resources to make complete copies of itself, then distributes the copies to other connected computers or devices.
Security programs will sometimes unintentionally identify a clean program or file as malicious if its code or behavior is similar to a known harmful program or file. This is known as a False Positive. In most cases, a False Positive is fixed in a subsequent database release.
Usually, updating your F-Secure security product to use the latest database is enough to resolve the issue. You can check by first updating your F-Secure security product to use the latest detection database updates, then rescanning the file.
After checking, if you still believe the file is incorrectly detected, you can submit a sample of it to F-Secure Labs for re-analysis.
NOTE If the file was moved to quarantine, you will need to first collect the file from quarantine before you can submit it.
If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.
Find the latest advice in our Community Knowledge Base.
See the manual for your F-Secure product on the Help Center.
Submit a file or URL for further analysis.
A worm is a program that replicates by using a computer's resources to make copies of itself, then spreading those copies to any other accessible computers or devices on a connected network.
Worms are often spread disguised as a tantalizing video or image file, or as a legitimate program. This is a common social engineering tactic to trick users into running the file and unwittingly infecting their own device or account.
Worms have been found spreading on almost every kind of network. The most common way they spread is over the Internet or via emails, but mobile networks have also seen their fair share of worms. Social media networks such as Facebook or Twitter and instant messaging channels have also been used to distribute worm copies. In these cases, the worm is usually designed to take control of an account on the social network, rather than a device.
Worms are often classified into sub-types based on the network they use to spread. These are just a few of the possible types:
Usually, worms will focus on spreading over one network – for example, just over the Internet or over a specific social media network. Some more advanced worms will try and spread over multiple networks for maximum impact.
A device that has been infected by a worm may have its performance reduced, as the worm is using the machine's resources to copy itself. A network that has multiple infected devices on it may also suffer performance issues, as its bandwidth and resources are taken up by worm copies being distributed to connected devices.
The disruption to the device or network can be severe enough that the device or network cannot function normally. If the device or network belongs to a business or government, the disruption can have severe real-world consequences. In extreme cases, if enough devices or networks are affected in a country or region, the worm is considered an epidemic, or even a pandemic.