On July 19th 2001 “Code-Red” was released to the internet after fourteen hours the worm infected 36,000 hosts. Internet worm procedure that spread autonomously from one host to another, worm requires host computer with an address on the Internet and any of several vulnerabilities to create a big threat environment. To decrease the false alarm in IFCA (Intelligent Failure Connection Algorithm) we proposed server worm register to register the number of the computer that infected by the worm. We are finding SWD (Server Worm Detection) by using IFCA is more reliable because it reduced the false alarm. Also, when the computer infected by the worm many computers that connected throw internet will be received the warning by using our proposed