Sybari Reports Klez.H Mass Mailing Worm Virus is Spreading Rapidly; Antigen's Unique Worm Purge & File Filtering Features Ensure User Protection From Another E-Mail Worm Virus.

Business Editors & High-Tech Writers

EAST NORTHPORT, N.Y.--(BUSINESS WIRE)--April 18, 2002

Sybari Software Inc., the premier developer of comprehensive antivirus, security and content-filtering solutions for leading collaborative and messaging systems, today reports that the mass e-mail worm virus known as Klez.H is spreading via the Internet. The worm is also known as Klez.K, Klez.G and Klez.I.

The worm arrives in an e-mail message with one of 120 possible subject lines. There are 18 different standard subject headings, including "let's be friends," "meeting notice," "some questions," and "honey." On top of those, seven other patterns exist, such as "a x game" and "a x patch," where x can be one of 16 different words, including "new," "WinXP," and the name of any of six major antivirus companies. It is also capable of infecting files on shared network drives and copies itself to the Windows registry and modifies the registry so that the virus will execute each time the machine boots up. Klez.H also attempts to disable any antivirus software resident on the machine.

"By enabling either Antigen File Filtering(tm) or Antigen Worm Purge(tm) and updating to the latest antivirus signature files, our users can depend on Antigen to automatically purge all e-mail messages carrying this potentially devastating and high activity expeditious worm," said Joe Licari, director of product management for Sybari Software Inc.

Sybari's Antigen for Microsoft Exchange has consistently demonstrated its ability to protect networks and defend against e-mail viruses such as Klez.H. Antigen includes two robust content management features: Antigen File Filtering(tm) (AFF) and message filtering by sender, domain and subject line. AFF enables administrators to proactively filter e-mail based on several filters including attachment filename, wildcards, and by file type. Antigen 6.5 also includes Antigen Worm Purge(tm), a proactive safeguard tool that allows network administrators to prevent the overload of virus-generated messages churned out when worm viruses are unleashed in an environment. Worm Purge deletes messages containing worm viruses in their entirety and prevents new worm threats from spreading before scanner engines can be updated. Antigen also offers the Antigen Central Manager (ACM), named configuration templates and file filter sets, Message Transfer Agent (MTA) connector message scanning, and support for Microsoft's VS API 2.0.

Joe Licari, Director of Product Management of Sybari Software Inc. is available to discuss this latest worm virus, providing insight on:

-- What can be done to prevent the spread of this virus.

-- How companies can protect themselves from viruses prior to virus definitions
being available.

-- What companies should do if their networks are or become infected.

-- What other kinds of intrusions are likely to strike corporations.

Currently, Sybari has not reported outbreaks among Antigen users. To protect your environment from this new variant and for information on other variants, please add the Sybari Web site: http://www.sybari.com to your browser Favorites.

Pricing and Availability

Antigen 6.5 for Microsoft Exchange and Antigen 6 for Lotus Domino are currently shipping. The suggested retail price for Antigen, to protect 250 users within an organization, is $5,750.00 with a two-year renewable license (prices are quoted in US dollars, for local pricing please contact your local Sybari office). Discounted pricing is available based on volume. For product "trade-up" from vendors such as Network Associates (NYSE:NET), Symantec (Nasdaq:SYMC), and Trend Micro (Nasdaq:TMIC), Sybari offer's additional pricing and support options. For more information on Antigen and its award-winning features, contact Sybari at [e-mail] or download an evaluation copy at www.sybari.com.

About Sybari

Since 1995, Sybari has the led the market in providing innovative solutions to groupware-based virus and security threats. Today, over 6 million Microsoft Exchange/Outlook and Lotus Domino/Notes seats are virus-free as a direct result of Sybari's Antigen technology. Sybari's Antigen is unsurpassed in providing protection of corporate messaging environments. Antigen's unique architecture institutes a preemptive line of defense from viruses and malicious code. Antigen for Microsoft Exchange and Antigen for Lotus Domino are distributed in more than 50 countries through Sybari's worldwide locations and distribution network. Sybari is headquartered in East Northport, New York with an EMEA headquarters in Madrid, Spain and additional offices in Singapore, Australia, Brazil and Mexico. Sybari's clients include Amazon.com, Compaq, Con Edison, Dell, Deloitte & Touche, Eastman Chemical, Getronics, JD Power, Lufthansa, Mayo Foundation, Merrill Lynch, Nortel, Pirelli, Reckitt Benckiser, Sony, Tosco, US Federal Government and Visa. Sybari's many strategic partners include Lotus Development (NYSE:IBM), Microsoft (Nasdaq:MSFT), Computer Associates (NYSE:CA), Compaq (NYSE:CPQ), Sophos Inc., Network Associates Inc. (NYSE:NET), and Norman Data Defense Systems (Oslo Bors:NOR).

Sybari and Antigen are registered trademarks of Sybari Software Inc.

Other products and company names mentioned herein may be trademarks of their respective owners.