Summary

PHP/Neworld is a virus written with PHP.

Additional Details

VARIANT:

Newold.A

PHP/Neworld.A infects all files with ".php", ".html", ".htm" and ".htt" in "C:\Windows" directory.

Like the first PHP virus, Pirus.A, Neworld.A appends reference to the virus code placed in a separate file.

This file is named "neworld.php".

The virus code contains the following texts:

    Neworld.PHP
    Welcome To The New World Of PHP Programming

An infected file contains also the following comment:

    <!-- Neworld.PHP - Made By Xmorpfic, The Black Cat Virii Group. --->

[Analysis: Katrin Tocheva and Sami Rautiainen, F-Secure; January 2001]