VIRUS ALERT No.49 -- 24th. November
2000
Brief Description
Romeo and Juliet Virus
GFI, a leading developer of email content checking &
anti-virus gateway software, has discovered a hazardous new email virus that it
named the Romeo & Juliet virus. The second virus this year to bear romantic
connotations, following the Love Bug last May, Romeo & Juliet is particularly
dangerous because current virus scanners cannot detect it.
The virus is transported by an HTML email containing malicious code, an
executable file called My Romeo and a compiled help file (.chm) called My Juliet.
The Romeo & Juliet virus takes advantage of an exploit described by Georgi
Guninski. The HTML code automatically runs an executable file. It then spreads
across the Internet by connecting to a number of open relay sites.
"The Romeo & Juliet virus takes email viruses to alarming new dimensions, as it
cannot be detected by anti-virus programs," said Nick Galea, CEO of GFI. "It
seems to rely on HTML scripts to run an executable file without user intervention.
The only way to protect your network against the Romeo & Juliet virus is to block
it at server level using a content checking email gateway like Mail essentials,
which can be set to filter all mails containing HTML scripts, as well as .chm and
.exe attachments."
Newly discovered in the wild, Romeo & Juliet comes hot on the heels of the
Hybris worm that made the news earlier this week. Although described as being
relatively harmless by anti-virus companies, the Hybris worm is highly
sophisticated in format and can update itself as it spreads, with the potential to
download dangerous components in the process. In such a case, the Hybrid
worm, which is transmitted as an email attachment, could cause untold damage if
activated.
"The email viruses emerging today are becoming more complex and are proving
ever harder for traditional anti-virus programs to safeguard against. It is no longer
enough to rely on anti-virus software alone for protection against email viruses and
attacks. Organizations should invest in multi-layered email security to have both
anti-virus and content checking filters at server level," Mr. Galea explained.
DO NOT OPEN THIS EMAIL --
DESTROY IT IMMEDIATELY
We thank you ALL for your kind votes which made this site FIRST in two categories.
A 10 vote = Very Good
A 1 vote = Waste of cyber Space !
ALL those sending emails of thanks are kindly requested to indicate whether these are for publication.
IMPORTANT NOTICE:
ALL those who are receiving this advise
and in the "name" field they find 'FAILED' and a 6 or 8 digit figure
after it, should be advised that at least once, emails to that address
have been received back by us. As the list of subscribers now exceeds 100,000, and since this
is a free service, we kindly urge you to become a registered
subscriber to this service and ensure delivery by subscribing under
a reliable email address. WE REGRET THAT AS AFTER THIS ISSUE,
ALL ADDRESSES THAT ARE NOT DELIVERABLE WILL BE REMOVED FROM THE LIST.
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty
of any kind. In no event shall we be liable for any damages whatsoever
including direct, indirect, incidental, consequential, loss of business profits
or special damages.
PLEASE ADVISE ALL YOUR FRIENDS ON YOUR LIST
PLEASE ALSO NOTE THE FOLLOWING:
1) You are currently SUBSCRIBED to our mailing list
2) If you are receiving more than one copy of this warning please click here
3) If you DO NOT wish to receive anymore of these alerts, please click here
4) YOUR friends are also welcome to be on the VIRUS ALERT but an email has to be
sent to the Webmaster by themselves so that a record of all requests can be kept in case
somebody cries "SPAM" ! Simply click here
and send the email as it appears.
5)THIS IS A FREE SERVICE RUN IN THE PUBLIC INTEREST BY
6) ALSO PLEASE BE ADVISED THAT YOUR EMAIL WILL
NEVER BE SOLD, EXCHANGED OR IN ANYWAY WHATSOEVER DISCLOSED TO ANYBODY ELSE.
******
Fabian Brincat
Webmaster
Fabian Enterprises Ltd.
SEE PREVIOUS VIRUS ALERT
RETURN TO VIRUS ALERT MAIN INDEX
©ALL MATERIAL IS PROTECTED BY COPYRIGHT LAWS AND MAY NOT BE REPRODUCED IN ANY FORM WHATSOEVER WITHOUT THE PRIOR WRITTEN CONSENT OF THE WEBMASTER.
