Virus.PHP.Virdrus

Technical Details

This is one of the few currently known viruses which infect PHP (Hypertext Preprocessor scripting language) script programs.

The virus only operates in systems that have PHP-interpreter installed.

When launched, the virus searches the current directory for PHP files and infects them by writing itself the the beginning of each file.

Before infecting a file, the virus searches it for the text string

VirusQuest

. If it finds this string, it will not re-infect the file.

The virus contains the following text strings:

Virus: VirusQuest
Written by Dr Virus Quest
Created on 08/09/2003