GFI discovers new 'Romeo & Juliet' virus that is not detected by anti-virus programs

London, UK, 17 November 2000 - GFI, leading developer of email content checking & anti-virus gateway software, has discovered a hazardous new email virus that it named the Romeo & Juliet virus. The second virus this year to bear romantic connotations, following the Love Bug last May, Romeo & Juliet is particularly dangerous because current virus scanners cannot detect it.

The virus is transported by an HTML email containing malicious code, an executable file called My Romeo and a compiled help file (.chm) called My Juliet. The Romeo & Juliet virus takes advantage of an exploit described by Georgi Guninski. The HTML code automatically runs an executable file. It then spreads across the Internet by connecting to a number of open relay sites.

"The Romeo & Juliet virus takes email viruses to alarming new dimensions, as it cannot be detected by anti-virus programs," said Nick Galea, CEO of GFI. "It seems to rely on HTML scripts to run an executable file without user intervention. The only way to protect your network against the Romeo & Juliet virus is to block it at server level using a content checking email gateway like Mail essentials, which can be set to filter all mails containing HTML scripts, as well as .chm and .exe attachments."

Newly discovered in the wild, Romeo & Juliet comes hot on the heels of the Hybris worm that made the news earlier this week. Although described as being relatively harmless by anti-virus companies, the Hybris worm is highly sophisticated in format and can update itself as it spreads, with the potential to download dangerous components in the process. In such a case, the Hybrid worm, which is transmitted as an email attachment, could cause untold damage if activated.

"The email viruses emerging today are becoming more complex and are proving ever harder for traditional anti-virus programs to safeguard against. It is no longer enough to rely on anti-virus software alone for protection against email viruses and attacks. Organizations should invest in multi-layered email security to have both anti-virus and content checking filters at server level," Mr. Galea explained.

More information about Mail essentials for Exchange/SMTP and a free evaluation version can be found at http://www.gfi.com/me/index.html. A full version of Mail essentials is available from $350.