Re: Question on virus/worms

On Thu, 2007-02-08 at 18:44 +0100, Seak, Teng-Fong wrote: > My company's got a web site using PHP. But the server is actually > an IIS 5 sitting inside a Win2K server. So naturally, I'm using php dll > filter. (Please don't tell me to use Apache because we need IIS for > other services). This server also has got an anti-virus installed > (McAfee to be exact). > > Since more than a year, I've got several warnings from McAfee > telling me that it was able to catch some virus/worms which were inside > the computer. Here're their names: > PHP/Chaploit > Perl/BackDoor-CXY.gen > PHP/BackDoor.gen > BackDoor-CUS!php Trojan > > Do they mean anything to anyone of you? Do you know how they've got > inside the computer? Is there anything to do to prevent that? Are they > known PHP virus/worms to PHP community? Did you bother to google any of them? I just punched PHP/BackDoor.gen into Google and got a wealth of information. Cheers, Rob. -- .------------------------------------------------------------. | InterJinn Application Framework - http://www.interjinn.com | :------------------------------------------------------------: | An application and templating framework for PHP. Boasting | | a powerful, scalable system for accessing system services | | such as forms, properties, sessions, and caches. InterJinn | | also provides an extremely flexible architecture for | | creating re-usable components quickly and easily. | `------------------------------------------------------------'