Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It infects files with an EXE extension. It controls outbound e-mail in order to send itself out. It shows an animated spiral on the Windows desktop.|
|First detected on:|
|Detection updated on:||June 6, 2003|
Hybris.Plugin is a worm that reaches computers in a file attached to an e-mail message. The sender of this message is Hahaha < firstname.lastname@example.org > and the subject of the message in English is Snowwhite and the seven dwarfs-The REAL story!, but there are also versions in Spanish, Portuguese and French.
The danger of Hybris.Plugin lies in its capacity to spread. It does this by controlling the e-mail message sent from infected computers. When the user sends an e-mail message, the worm waits a while and then sends another message.
When Hybris.Plugin activates, it infects files with an EXE extension. Every November 24, it also displays an animation of a spiral on the Windows desktop.
The message carrying Hybris.Plugin is easy to recognize because it always has the subject Snowwhite and the seven dwarfs-The REAL story! and the sender is always Hahaha < email@example.com >. This message is also sent in Spanish, Portuguese and French. For information on the versions in these languages, click here.
When it activates, Hybris.Plugin shows an animated spiral on the Windows desktop every November 24.