Sybari Reports Virus in the Wild; AnnaKournikova.jpg.vbs.

Business Editors

E.Northport, N.Y.--(BUSINESS WIRE)--Feb. 12, 2001

Antigen File Filtering Feature Insures User Protection From

Latest Virus Wave

Sybari Software, Inc., the premier anti-virus and security specialist for groupware solutions, reports on another Internet worm virus in the wild.

The "Anna Kournikova" virus is an e-mail worm VBS file. The virus lures users into activating it by pretending to be a JPEG graphic of Russian tennis player Anna Kournikova. Sybari recommends Antigen users create a rule with their Antigen File Filtering (AFF) feature to insure that this virus does not infiltrate their messaging infrastructure.

"Once again having the AFF proves to be a key element in protecting corporations from the onslaught of this growing e-mail virus war," said Tom Buoniello, vice president of product management, Sybari Software, Inc. "While network administrators using traditional anti-virus solutions are racing to beat this virus from hitting their networks, our customers can put our file filtering feature into effect and remain protected."

The Antigen File Filtering (AFF) enables you to filter an email attachment by filename, with wild cards, and by file type. This unique feature will delete and/or quarantine file attachments meeting the filter criteria of messages entering or exiting groupware environments. Attachments may be scanned by actual name (such as Melissa or Worm) or by file type (.jpg, vbs., exe., etc.). If files are sent in a ZIP archive, the AFF will scan each separate file enclosed in the archive. Once a matching file is detected, the AFF will automatically delete or quarantine it depending on the criteria specified by the administrator. The intended recipient will then receive a notification within their message alerting them that the file was deleted or quarantined. If a file is quarantined, a copy will be kept and may be opened by the administrator. The administrator also has the option to forward the quarantined attachment to the intended recipient after being reviewed.

POSTED ALERT VBS/SST-A VBS/SST, Kalamar.A, Calamar E-MAIL CHARACTERISTICS E-mail Subject: Here you have, ;0) E-mail Body: Hi: Check This! Attachment Names: AnnaKournikova.jpg.vbs Subject line: Here you have, ;0) Message text: Hi: Check This! Description

This e-mail worm VBS file has been seen in the wild. The virus lures users into activating it by pretending to be a JPEG graphic of Russian tennis player Anna Kournikova. The first time the attached file is executed it mails itself to everybody in your Outlook address book. The worm makes changes to the Registry, creating an entry called HKCU\software\OnTheFly. On the 26th of January the worm attempts to connect to a website in the Netherlands, www.dynabyte.nl

Sybari supported updated AV engine signature files have been posted on the Sybari Software website and are available for immediate download. Sybari also

recommends that if transferring these types of files is not part of your day-to-day business, create a file filter rule for all .jpg and .vbs files. Currently Sybari has not reported any outbreaks. To protect your environment from this new variant and for information on other variants, please add the Sybari website: http://www.sybari.com to your browser Favorites.

PRICING AND AVAILABILITY

Antigen for Exchange and Notes is currently shipping. Antigen is available as a two-year renewable license based on the number of users protected within an organization. Pricing is discounted by volume with a per user range of $ 27.50-$ 7.50 per user. Sybari offers additional pricing and support options as "trade-up" pricing for products from vendors such as Network Associates (NASDAQ:NETA), Symantec (NASDAQ:SYMC) and Trend Micro (NASDAQ:TMIC). For more information on Antigen and its more complex features, please visit the Sybari website at http://www.sybari.com or send an email to [e-mail].

ABOUT SYBARI

Since 1995, Sybari has been investigating and providing solutions for groupware-based viruses and security threats. Today, over four million groupware seats are virus-free as a result of Sybari's Antigen technology. Sybari produces Antigen for Notes and Antigen for Exchange, which is distributed in more than 50 countries through their worldwide offices and distribution network. Sybari is headquartered in E.Northport, New York with its International headquarters in Madrid, Spain. Sybari's clients include IBM, Dell, Compaq, Merrill Lynch, JD Power, Amazon, Nortel, Visa, Tosco, Lufthansa, US Federal Government, Union Pacific, Getronics, Target, Mayo Foundation, Eastman Chemical, Con Edison, Sony and Texaco. Evaluation copies of Antigen for Notes or Exchange are available for download from the Sybari Web site--http://www.sybari.com. Sybari's many strategic partners include Lotus Development (NYSE:IBM), Microsoft (Nasdaq:MSFT), Computer Associates (NYSE:CA), Compaq (NYSE:CPQ) and Sun Microsystems (Nasdaq:SUNW).

Other products and company names mentioned herein may be trademarks of their respective owners.