A network worm is usually a standalone program that tries to copy itself to other computers connected to the same LAN (Local Area Network). Such worms travel from one computer to another using shares. A share is a media (hard drive for example) or part of it that can be accessed by everyone or only by users with specific access rights. In many cases corporate computers and servers have a few open shares and that eases a worm’s task to infect a network. Cleaning of a network work outbreak in many cases requires to take a network down and to disinfect all infected computers one by one.

Infections from network worms are frequently traced back to mobile or remote workers; their PCs are less likely to have AV protection and up-to-date security. Often infections from such sources break out long after the initial viral onslaught.

Here are some examples:

• Korgo Network Worm
• Sasser Network Worm
• Blaster Network Worm
• SQL Slammer Network Worm
• Code Red Network Worm

Updated On: 12.07.20