PHP/Virdrus

This page shows details and results of our analysis on the malware PHP/Virdrus

Download Current DAT: 6618

Threat Detail

Malware Type: Virus

Malware Sub-type: PHP Script

Discovery Date: 2003-10-10

Next Steps:

Overview
Characteristics
Symptoms
Method of Infection
Removal

Overview

This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.

Minimum DAT

4301 (2003-10-31)

Updated DAT

4298 (2003-10-15)

Minimum Engine

5.1.00

File Length

863 Bytes

Description Added

2003-11-06

Description Modified

2003-11-06

Malware Proliferation

Characteristics

This threat is detected as PHP/Virdrus. PHP is a server-side scripting language used to generate dynamic Web page content.

PHP/Virdrus may prepend its code to all .php files in the current directory.

Symptoms

.PHP files containing the string:

// Virus: VirusQuest
// Written by Dr Virus Quest
// Created on 08/09/2003

Method of Infection

Executing an infected .php file.

Removal

All Users:
Use current engine and DAT files for detection. Delete any file which contains this detection.