This is a mid level IT support question. It's all classified as malware, but trojans do not replicate or spread. This they cannot infect other devices or networks. A worm can be classified as either or. For example the SQL slammer worm could spread to other sql devices via tcp ports, but would never show up on a virus scanner.