Encyclopedia

Hybris.A

 
Threat LevelHigh threatDamageSevereDistributionNot widespread
Common name:Hybris.A
Technical name:W32/Hybris
Threat level:Medium
Alias:Hybris.A, I-Worm/Hybris, W32/Hybris.gen@M, W32/Hybris.A-m, W32/Hybris.B-m, W32/Hybris.D-m, Enano, Blancanieves, W32/Hybris.Wsock, VBS/Hybris
Type:Worm
Effects:  It infects files with an EXE extension. It controls outbound e-mail in order to send itself out. It shows an animated spiral on the Windows desktop.

Affected platforms:

Windows XP/2000/NT/ME/98/95

Detection updated on:June 12, 2005
StatisticsNo
Yes, using TruPrevent Technologies
Country of origin:BRAZIL
Family:HYBRIS

Brief Description 

    

Hybris.A is a worm that reaches computers in a file attached to an e-mail message. The sender of this message is Hahaha < hahaha@sexyfun.net > and the subject of the message in English is Snowwhite and the seven dwarfs-The REAL story!, but there are also versions in Spanish, Portuguese and French.

The danger of Hybris.A lies in its capacity to spread. It does this by controlling the e-mail message sent from infected computers. When the user sends an e-mail message, the worm waits a while and then sends another message.

When Hybris.A activates, it infects files with an EXE extension. Every November 24, it also displays an animation of a spiral on the Windows desktop.

Visible Symptoms 

    

The message carrying Hybris.A is easy to recognize because it always has the subject Snowwhite and the seven dwarfs-The REAL story! and the sender is always Hahaha < hahaha@sexyfun.net >. This message is also sent in Spanish, Portuguese and French. For information on the versions in these languages, click here.

When it activates, Hybris.A shows an animated spiral on the Windows desktop every November 24.

Last updated:  12/06/2005 

Virus News

3/10/09.-More than 10 Million Worldwide Were Actively Exposed to Identity Theft in 2008

3/5/09.-Cyber-crooks manipulate Internet searches to sell fake antivirus products

3/2/09.-VideoPlay adware infections grew 400% in February through malicious use of Web 2.0 pages

[+ Noticias]