PHP.NewWorld

PHP.NewWorld is the second PHP virus that has been discovered. PHP is a server-side scripting language that is used for dynamic Web page generation. The virus searches for .php, .htm, .html, and .htt files in the C:\Windows folder, and if found, inserts code in these files to call itself. The virus executes only on servers with PHP interpreters.

This virus cannot be contracted by simply visiting an infected Web page.

Protection

• Initial Rapid Release version January 11, 2001
• Latest Rapid Release version July 12, 2008 revision 018
• Initial Daily Certified version January 11, 2001
• Latest Daily Certified version July 12, 2008 revision 019
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low