Virus Database

Psyco.804

Description Psyco.804

It is not a dangerous nonmemory resident parasitic virus. It searches for C:COMMAND.COM and .COM files of current directory, and writes itself to the end of the file. It contains the text strings:
INFECT
COMMAND.COM

It decrypts and displays the message:
Psyco ITALY!

Check other viruses! Be aware! Use Antiviral Software

PHP.Neworld

Description PHP.Neworld

This is script virus written in PHP scripting language. It uses the same infection technology as first known PHP virus PHP.Pirus: it appends to files an "include" instruction that refers to main virus code.
The virus infects .PHP, .HTML, .HTM, .HTT files in the C:Windows directory.
The virus contains the texts:
Neworld.PHP
Welcome To The New World Of PHP Programming
neworld.php
Neworld.PHP Virus - Made By Xmorfic, www.shadowvx.com/bcvg, Black Cat Virii Group.

PHP.Pirus

Description PHP.Pirus

This is the first known virus infecting PHP script programs (Hypertext Preprocessor scripting language, see http://www.php.net for more details). It was discovered in October 2000.
When the virus is activated, it looks for all .PHP and .HTM files in current directory and infects them. The infection is done in quite silly way. The virus does not write its complete code to the file, but just a reference to the virus file: the virus adds one command to the end of the file, and that is "include virus file" command that refers to virus code.
When an affected file is opened, the PHP scripting machine processes that "include" command as well, gets (reads) complete virus code from virus file and activates it.
As a result, the virus copy presents on the computer in just one instance. All infected files just refers to that copy. Because of that infection way the virus cannot spread from a computer to other computers, but is able to operate inside one computer only.
The virus contains the text "pirus.php".

Home