The first php virus PHP.Pirus was discovered
Source: http://www.sarc.com/avcenter/venc/data/php.pirus.html
Discovery time: 2000-9-11
Last updated: 2000-11-13 0 4:02:47 PM (Pacific Standard Time)
PHP.Pirus is the first virus discovered written in PHP. It looks for extensions .php and .htm file and insert code to call yourself. This virus can only be used on servers with php as the interpreter. You cannot get the virus by visiting a web page that is infected by it.
Type: virus
Infection length: 718 bytes
Virus discovery time: 2000-11-13
Level of harm: Crazy level: low;
Destruction level: low;
Spread : Low
Insanity Level:
Infected Computers: 0-49
Infected Sites: 0-2
Geographical Distribution: Low
Prevention: Easy
Elimination: Easy
Technical description:
This virus is written in PHP and is 718 bytes in length
When it attacks, it looks for files ending in .php and .htm in the current directory. If a writable file is found, It first determines whether the file is infected. If it is not infected, it will insert a line in the file and give priority to virus file
elimination:
The name of the virus file may change, so to completely eliminate it, you must:
1. Delete the original virus file
2. Remove the virus code in all infected php and html files
If the virus file name is assumed to be virus.php, then the following statements in all infected files must be deleted
/php>
Original author: Eric
Source: http://www.sarc.com/avcenter/venc/data/php.pirus.html