W95.Hybris.gen

Due to a decreased rate of submissions, Symantec Security Response has downgraded this threat from a Category 3 to a Category 2 as of January 6, 2004.

W95.Hybris is a worm that spreads by email as an attachment to outgoing email messages.

The email message or subject may include, but is not limited to:

• hahaha@sexyfun.net
• Snow White and the Seven dwarves

The attachment may have one of several different names, including, but not limited to:

• anpo porn(.scr
• atchim.exe
• branca de neve.scr
• dunga.scr
• dwarf4you.exe
• enano porno.exe
• joke.exe
• midgets.scr
• sexy virgin.scr

Symantec has created an interactive tutorial to help you get rid of this worm.

Protection

• Initial Rapid Release version September 25, 2000
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version September 25, 2000
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date September 25, 2000

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: More than 1000
• Number of Sites: More than 10
• Geographical Distribution: Medium
• Threat Containment: Moderate
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: High