What is a computer worm? A computer worm is a self-replicating computer program. What does this mean for us normal people? This means that this is a bit of computer code (the stuff that makes the computer work inside the hardware) that will copy and paste itself without any help. Basically, if it sits on a computer without an internet connection, it does nothing. However, if you've got an internet connection, this program will copy and then paste itself onto other computers over the internet. Now, it used to be that programs like this would only work over a network of computers (a network is just a bunch of machines connected together one way or the other). With the sophistication of today's society, these computer worms have gotten much worse.
In today's society, computer worms come with larger payloads than before. What is a payload? A payload is a code designed to do more than just spread the worm. It could range from anything such as deleting files on the infected system, implanting another virus on the system, encrypting files that you dont want encrypted, or even causing severe system meltdowns. The most common type of payload in a computer worm is the backdoor payload. What this does is infect your system with the worm, drop it's payload, and the install a backdoor on your system. It's just like the backdoor at your house. It opens up to the back of your home and most of the time, that door opens without your knowledge because you trust that it's only opening because of one reason. Someone you trust has come or gone through it.
Well, same principle. The backdoor of your computer is only supposed to open because you trust it. Well, the worms "backdoor" payload exploits this trust. However, there is such a good thing as a "Good Guy Computer Worm." We'll be discussing that now. Xerox PARC began with the very first research on computer worms and have had several successful attempts to create useful worms. For example, the Nachi family of worms tries to download and install priority patches for Microsofts HotFix's. It does this by exploiting the vulnerabilities that those hotfix's are for. You see, Microsoft doesn't always send out or download all of the necessary fixes that are needed for your computer, so what do they do? The worm exploits those vulnerabilities and forces Microsoft to send you the HotFix for it.
As far as protecting against worms, the best thing to do is make sure that any vulnerability fix that your operating system (more commonly referred to as your OS) has all of the necessary vulnerability fixes. By doing this, you're helping the computer community get closer and closer to what we call a "zero day exploit." This "zero day exploit" is more or less the exploit that doesn't last more than 24 hours. Also, always remember to keep your anti-virus and anti-spyware programs up to date (we'll go over those an article or two down the road).