Exploit:PHP/Preamble is a detection for a family of various PHP scripts. The scripts are used to test whether a particular site is vulnerable for a Remote File Inclusion (RFI) exploitation.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
More scanning & removal options
More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.
You may also refer to the Knowledge Base on the F-Secure Community site for more information.
The scripts belonging to this family are usually used to test whether a site or a webpage is vulnerable to a Remote File Inclusion (RFI) vulnerability.
The scripts test various methods an attacker can use to introduce a malicious backdoor script onto the affected server.