Virus Alert: Nothing Romantic About New Romeo & Juliet Virus; GFI Discovers New 'Romeo & Juliet' Virus That is Not Detected by Anti-Virus Programs.

Business Editors

LONDON--(BUSINESS WIRE)--Nov. 17, 2000

GFI, leading developer of email content checking & anti-virus gateway software, has discovered a hazardous new email virus that it named the Romeo & Juliet virus.

The second virus this year to bear romantic connotations, following the Love Bug last May, Romeo & Juliet is particularly dangerous because current virus scanners cannot detect it.

The virus is transported by an HTML email containing malicious code, an executable file called My Romeo and a compiled help file (.chm) called My Juliet. The Romeo & Juliet virus takes advantage of an exploit described by Georgi Guninski. The HTML code automatically runs an executable file. It then spreads across the Internet by connecting to a number of open relay sites.

"The Romeo & Juliet virus takes email viruses to alarming new dimensions, as it cannot be detected by anti-virus programs," said Nick Galea, CEO of GFI. "It seems to rely on HTML scripts to run an executable file without user intervention. The only way to protect your network against the Romeo & Juliet virus is to block it at server level using a content checking email gateway like Mail essentials, which can be set to filter all mails containing HTML scripts, as well as .chm and .exe attachments."

Newly discovered in the wild, Romeo & Juliet comes hot on the heels of the Hybris worm that made the news earlier this week. Although described as being relatively harmless by anti-virus companies, the Hybris worm is highly sophisticated in format and can update itself as it spreads, with the potential to download dangerous components in the process. In such a case, the Hybrid worm, which is transmitted as an email attachment, could cause untold damage if activated.

"The email viruses emerging today are becoming more complex and are proving ever harder for traditional anti-virus programs to safeguard against. It is no longer enough to rely on anti-virus software alone for protection against email viruses and attacks. Organizations should invest in multi-layered email security to have both anti-virus and content checking filters at server level," Mr. Galea explained.

More information about Mail essentials for Exchange/SMTP and a free evaluation version can be found at http://www.gfi.com/mesindex.htm. A full version of Mail essentials is available from $350.

GFI (www.gfi.com) has six offices in the US, UK, Germany, France, Australia and Malta, and has a worldwide network of distributors. GFI is the developer of FAXmaker, Mail essentials and LANguard, and has supplied applications to clients such as Microsoft, Sage, London Fire Brigade, BMW, the US IRS, Siemens, Digital, Ericsson, NASA, Olivetti, and the USAF. GFI has won the Microsoft Fusion 2000 (GEM) Packaged Application Partner of the Year award, and was named one of 1999's fastest growing software companies for Windows by Microsoft Corp. and CMP Media.

For more information and review copies: Send e-mail to [e-mail].