Central Command Discovers First Virus to Use PHP Scripting Language
to Infect Computers
PHP.NewWorld Virus represents the first step in a new direction of
virus writing in the year 2001
MEDINA, Ohio, January 5, 2001 - Central Command, a leading provider
of PC anti-virus software and computer security services, and its
partners today announced the discovery of PHP.NewWorld, the first
virus using the Hypertext Preprocessor (PHP) scripting language to
infect computer systems.
PHP (www.php.net) is one of the most popular scripting languages
used in the development of e-commerce and heavy content websites.
It gained its popularity thanks to its user-friendly programming
features, and the incorporation of cross platform compatibility
between Windows, Linux, and UNIX environment features included
within the language.
"Although PHP.NewWorld is currently not a major threat, it marks a
new step toward new virus generation," said Steven Sundermeier,
Product Manager at Central Command, Inc.
The PHP programming language has become a standard in dynamic
website development. A majority of websites that incorporate user
interaction and personalization rely on PHP, making it an appealing
target for virus writers.
"Because the PHP language is absolutely free, we are anticipating
that copycats of this PHP script virus will become prominent and
will have much more damaging consequences in the near future,"
concluded Sundermeier.
PHP.NewWorld is spread to a system when executing an infected
script.
Description of PHP.NewWorld:
Name: PHP.NewWorld
Alias: None
Detection included in AVX Professional: 2001-01-05
Spreading method: uses PHP script functions
Description: PHP.NewWorld looks for .php, .hm, .html or .htt files
in the C:\Windows directory. All files found with these extensions
will become infected. When a user executes a .php file, the virus
body will be executed from an external file and will take full
control. In the case that the string "NewWorld.PHP" is identified
as already existing, the infection routine will not be launched
again. Thus, a file will not get infected twice.
PHP.NewWorld has no activation date. The virus is not able to
spread out from the infected system.
AVX Professional has been updated to detect and remove
PHP.NewWorld. A free 30-day trial version may be downloaded from
www.avx.com or obtained by contacting Central Command toll-free at
866-2-GET-AVX (866-243-8289).
About Central Command: A leader in the anti-virus industry, Central
Command, Inc., a privately held company, was founded in 1990 and
serves home PC users and industrial, government, financial,
education and service firms with virus protection software,
services, and information. The company services customers in over
40 countries and is headquartered in Medina, Ohio.
Central Command, EVRT, Emergency Virus Response Team are trademarks
of Central Command Inc. AVX and AntiVirus eXpert are trademarks of
Softwin SRL, Romania. All other trademarks, trade names, and
products referenced herein are property of their respective owners.
