Fizzer Virus Spreading Fast; Sybari's Antigen Delivers Unique Features to Ensure User Protection from This Hard Hitting E-Mail Worm Virus.

Business Editors/High-Tech Writers

EAST NORTHPORT, N.Y.--(BUSINESS WIRE)--May 13, 2003

Sybari Software, Inc., the developer of Antigen, a comprehensive antivirus, content-filtering, anti-Spam, and e-mail security solution for leading messaging and collaboration environments, today reports on the e-mail virus known as W32/Fizzer, which is rapidly spreading throughout the Internet.

Fizzer (W32/Fizzer.A@mm), also known as W32/Fizzer-A, W32/Fizzer@MM and @Win32.Fizzer is a mass-mailing worm that spreads via e-mail.

"Organizations need to protect themselves from this virus which debilitates user productivity," said Joe Licari, director of product management for Sybari Software, Inc. "By enabling either Antigen File Filtering(TM) or Antigen Worm Purge(TM) and updating to the latest antivirus signature files, our users can depend on Antigen to automatically purge all e-mail messages carrying this potentially dangerous worm," added Licari.

Sybari's Antigen has consistently demonstrated its ability to protect networks and defend against e-mail viruses such as Fizzer. Antigen includes two robust content management features: Antigen Worm Purge(TM) and Antigen File Filtering(TM) (AFF). Antigen Worm Purge(TM) is a proactive safeguard tool against worms burrowing into e-mail networks. Antigen Worm Purge enables network administrators to prevent the overload of virus-generated messages that can be churned out when worm viruses are unleashed in an environment. Worm Purge deletes messages containing worm viruses in their entirety and prevents new worm threats from spreading through messaging environments. AFF enables administrators to proactively filter e-mail based on several filters including subject line, attachment filename, wildcards, and file type.

POSTED ALERT

Details

The email subject line, message text and attachment name are randomly constructed using long lists of strings.

Example message text strings are:

"So how are you?"

"Check it out"

"There is only one good, knowledge, and on evil, ignorance"

"I sent this program (sparky) from anonymous places on the net" "you must not show this to anyone" "Today is a good day to die" "thought I'd let you know" "The way to gain a good reputation is to endeavor to be what you desire ..." "Filth is a death" "wie geht es Ihnen?" "Philosophy imputes, reinterprets faith" "If you don't like it, just delete it" "delete this as soon as you look at it" "Did you ever stop to think that viruses are good for the economy? ..." "the incredibly bright faith" "you don't have to if you don't want to" "I wonder what can be so bad ..." "Watchin' the game, having a bud." "the attachment is only for you to look at" "Let me know what you think of this..."

E-mail Body:

The peace

lautlach

I sent this program (Sparky) from anonymous places on the net There is only one good, knowledge, and one evil, ignorance. Nein

E-mail Attachments:

Attachments names have an extension of EXE, COM, PIF or SCR and may be combined with INI to give a double extension of INI.EXE, INI.COM, INI.PIF or INI.SCR.

Description:

W32/Fizzer-A is a worm with IRC backdoor Trojan functionality. The worm spreads by e-mailing itself to contacts in the Microsoft Outlook and Windows address books and to random e-mail addresses at the following domains:

msn.com

hotmail.com

yahoo.com

aol.com

earthlink.net

gte.net

juno.com

netzero.com

More Info:

http://www.sybari.com/alerts

List Maintenance:

http://www.sybari.com/support/support_list.asp

Joe Licari, Director of Product Management of Sybari Software, Inc. is available to discuss this latest worm virus, providing insight on:

-- What can be done to prevent the spread of this virus

-- How companies can protect themselves from viruses prior to

virus definitions being available.

-- What companies should do if their networks are or become

infected

-- What other kinds of intrusions are likely to strike

corporations

Currently Sybari has not reported outbreaks amoung Antigen users. To protect your environment from this new variant and for information on other variants, please add the Sybari website: http://www.sybari.com to your browser Favorites.

ABOUT SYBARI

Since 1995, Sybari has led the market in providing innovative solutions that protect leading messaging and collaboration environments from viruses and security threats Today, over 8 million messaging and collaboration server users are virus and spam free, as a direct result of Sybari's Antigen technology. Sybari's Antigen is unsurpassed in providing protection of corporate messaging environments. Antigen's unique architecture institutes a preemptive line of defense from viruses and malicious code. Antigen for Microsoft Exchange, Antigen for SharePoint Portal Server, and Antigen for Lotus Domino are distributed in more than 50 countries through Sybari's worldwide locations and distribution network. Sybari is headquartered in East Northport, New York with an EMEA headquarters in Amsterdam, the Netherlands and additional offices in Spain, United Kingdom, Germany, France, Italy, Dubai, Singapore, Australia, Japan, Brazil and Mexico. Sybari's clients include Amazon.com, Hewlett-Packard, Con Edison, Dell, Deloitte & Touche, Eastman Chemical, Getronics, JD Power, London Underground, Lufthansa, Mayo Foundation, Merrill Lynch, Nortel, Pirelli, Reckitt Benckiser, Sony, Superdrug, Tosco, US Federal Government, and Visa. Sybari's many strategic partners include Lotus Development (NYSE:IBM), Microsoft (NASDAQ:MSFT), Dell Computer Corporation (Nasdaq:DELL), IMLogic, Inc., Computer Associates (NYSE:CA), Hewlett-Packard (NYSE:HPQ), Kaspersky Labs, Sophos, Inc., Perot Systems Corporation (NYSE: PER) and Norman Data Defense Systems (Oslo Bors: NOR).

Sybari and Antigen are trademarks or registered trademarks of Sybari Software, Inc. All other company or product names mentioned are used for identification purposes only and may be trademarks or registered trademarks of their respective owners.