Depends, if you're dealing with a worm then you don't need to actively download it at all, it'll do the job for you (it might exploit a vulnerability on your web browser's rendering engine, for example, to get onto your computer). It might even be user-friendly enough to piggyback onto an already installed application that you need to give root access to once in a while.