Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Looking through the questions in IT security, I found out that there is no answer which cover this question in depth.

I am aware of the answer and just hope to see something detailed about:

  • main differences
  • tendencies in work
  • purpose
  • how to protect
  • how it is duplicating
share|improve this question

closed as not constructive by Rory Alsop Dec 17 '12 at 12:30

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

I don't know why anyone cares about the VWT designation anymore. It's for the most part a moot point as most of the powerful threats released now are a hybrid of all three, often served off of infection servers that are able to probe the OS, installed services, and versions of plugins/browser objects; immediately calculating the top most usable vulnerabilities that particular machine has. Also, what comes in is better termed to be a loader which then phones home to determine the VWT package needed to be delivered. Arguing whether it's a Virus, Worm or Trojan is often rather a moot point. – Fiasco Labs Dec 17 '12 at 2:53
You seem to have put a remarkably small amount of effort into looking up something which has an abundant amount of information available on the first page of a Google search. – Jules Dec 17 '12 at 6:30
@JulesMazur most probably you have not even put an effort to read the question. It was mentioned there that I know the answer and posting the question only because I think it will be beneficial to have such post on IT security. – Salvador Dali Dec 17 '12 at 10:09
Salvador - I don't think this question really has much meaning any more. The terminology exists and is easily googled, but it doesn't add anything to a security professional. These titles don't form part of a defence plan, instead you implement controls on the possible activities and channels. Closed as NC. – Rory Alsop Dec 17 '12 at 12:30

These days most threats do not fall into any single of these categories, almost all will fall into more than one. These are called "blended threats" or more often simply just malware. It's rare that you see malware that only can replicate itself in one way, that's why malware is such a problem.

To be honest these terms don't mean much anymore, as there are many threats out there that don't fall into any of these categories, or more than one of these categories. You have to expect that malware will have several methods of spread. Malware may first be run by an unsuspecting user opening a PDF file from an email, but then spread to other systems over the network and USB sticks. Or it may arrive in a USB stick and spread itself by emailing a PDF to all known contacts.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.