[HRPM] PHP Virus

[chicks at chicks.net]

This amuses me.

-- 
</chris>

Those who cannot remember the past are doomed to buy Microsoft products.

---------- Forwarded message ----------
Date: Fri, 5 Jan 2001 10:46:48 -0500
From: List Manager <listmanager at avx-listserver.com>
To: avx-news at avx-listserver.com
Subject: AVX-News for 01/05/2001

AVX.COM Newsletter  
==================
Central Command - Without us, there's no defense.

You are receiving this newsletter because you subscribed to the AVX.COM
newsletter at http://www.avx.com. This is an open-subscription
mailing list. If you do not want to receive this newsletter please see
the bottom of this message for instructions on how to remove your
e-mail address from this mailing list.

Virus Protection for the Real World.

If you suspect a virus infection you can download a free time limted,
fully functional trial version of AVX Professional antivirus
software from http://www.avx.com

Visit AVX.COM online http://www.avx.com

==================


 
Central Command Discovers First Virus to Use PHP Scripting Language 
to Infect Computers  

PHP.NewWorld Virus represents the first step in a new direction of 
virus writing in the year 2001  

MEDINA, Ohio, January 5, 2001 - Central Command, a leading provider 
of PC anti-virus software and computer security services, and its 
partners today announced the discovery of PHP.NewWorld, the first 
virus using the Hypertext Preprocessor (PHP) scripting language to 
infect computer systems.  

PHP (www.php.net) is one of the most popular scripting languages 
used in the development of e-commerce and heavy content websites. 
It gained its popularity thanks to its user-friendly programming 
features, and the incorporation of cross platform compatibility 
between Windows, Linux, and UNIX environment features included 
within the language.  

"Although PHP.NewWorld is currently not a major threat, it marks a 
new step toward new virus generation," said Steven Sundermeier, 
Product Manager at Central Command, Inc.  

The PHP programming language has become a standard in dynamic 
website development.  A majority of websites that incorporate user 
interaction and personalization rely on PHP, making it an appealing 
target for virus writers.  

"Because the PHP language is absolutely free, we are anticipating 
that copycats of this PHP script virus will become prominent and 
will have much more damaging consequences in the near future," 
concluded Sundermeier.  

PHP.NewWorld is spread to a system when executing an infected 
script.  

Description of PHP.NewWorld:

Name: PHP.NewWorld
Alias: None
Detection included in AVX Professional: 2001-01-05
Spreading method: uses PHP script functions

Description: PHP.NewWorld looks for .php, .hm, .html or .htt files 
in the C:\Windows directory. All files found with these extensions 
will become infected. When a user executes a .php file, the virus 
body will be executed from an external file and will take full 
control. In the case that the string "NewWorld.PHP" is identified 
as already existing, the infection routine will not be launched 
again. Thus, a file will not get infected twice.  

PHP.NewWorld has no activation date. The virus is not able to 
spread out from the infected system.  

AVX Professional has been updated to detect and remove 
PHP.NewWorld. A free 30-day trial version may be downloaded from 
www.avx.com or obtained by contacting Central Command toll-free at 
866-2-GET-AVX (866-243-8289).  

About Central Command: A leader in the anti-virus industry, Central 
Command, Inc., a privately held company, was founded in 1990 and 
serves home PC users and industrial, government, financial, 
education and service firms with virus protection software, 
services, and information. The company services customers in over 
40 countries and is headquartered in Medina, Ohio.  

Central Command, EVRT, Emergency Virus Response Team are trademarks 
of Central Command Inc. AVX and AntiVirus eXpert are trademarks of 
Softwin SRL, Romania. All other trademarks, trade names, and 
products referenced herein are property of their respective owners.


==================

Central Command, Inc. respects your online privacy. You at anytime
can easily remove your e-mail address from the AVX-News mailing list
by sending an e-mail message To: avx-news-request at avx-listserver.com
and in the body of the message include the following replacing
"e-mail at domain.com" with your e-mail address.

unsubscribe avx-news e-mail at domain.com

You will receive a confirmation message about your successful
removal from AVX-News.

Central Command, PerfectSupport, EVRT, Emergency Virus Response
Team, Virus Protection for the Real World, Without us, there's
no defense. are trademarks of Central Command Inc. AVX and
AntiVirus eXpert are trademarks of Softwin SRL, Romania. All
other trademarks, trade name and product names are property of
their respective owners. Copyright (C) 2000 Central Command Inc.
All rights reserved.