- Discovered:
- September 25, 2000
- Updated:
- February 13, 2007 11:34:43 AM
- Also Known As:
- W32.Hybris.gen, W32.Hybris.22528.dr, W32/Hybris.gen@M [McAfee], I-Worm.Hybris [Kaspersky], WORM_HYBRIS [Trend], W32/Hybris-A [Sophos], Win32.Hybris [CA], Full Moon
- Type:
- Worm
- Systems Affected:
- Windows 95, Windows 98, Windows Me
Due to a decreased rate of submissions, Symantec Security Response has downgraded this threat from a Category 3 to a Category 2 as of January 6, 2004.
W95.Hybris is a worm that spreads by email as an attachment to outgoing email messages.
The email message or subject may include, but is not limited to:
- hahaha@sexyfun.net
- Snow White and the Seven dwarves
The attachment may have one of several different names, including, but not limited to:
- anpo porn(.scr
- atchim.exe
- branca de neve.scr
- dunga.scr
- dwarf4you.exe
- enano porno.exe
- joke.exe
- midgets.scr
- sexy virgin.scr
Symantec has created an interactive tutorial to help you get rid of this worm.
Antivirus Protection Dates
- Initial Rapid Release version September 25, 2000
- Latest Rapid Release version August 20, 2008 revision 017
- Initial Daily Certified version September 25, 2000
- Latest Daily Certified version August 20, 2008 revision 016
- Initial Weekly Certified release date September 25, 2000
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: More than 1000
- Number of Sites: More than 10
- Geographical Distribution: Medium
- Threat Containment: Moderate
- Removal: Moderate
Damage
- Damage Level: Low
Distribution
- Distribution Level: High
Writeup By: Cary Ng



