Sophos

Troj/PhpShell-G

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems
  • Windows
  • Macintosh
  • Unix
Included in our products from August 2008 (4.32)
Protection available since 30 March 2008 22:32:59 (GMT)
Last updated 27 June 2008 10:17:19 (GMT)
Detected by All Sophos products

Action

More Information

Troj/PhpShell-G is a backdoor Trojan for platforms supporting PHP.

Troj/PhpShell-G contains the following functionality:

- reports the capabilities of the PHP interpreter
- discover database functions available to the current PHP install
- server IP address
- bind and listen to an arbitrary port
- edit files on the server
- download files from the server which it has permission to
- execute arbitrary code
- targets suid, configuration, password and history files

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer