UNCSPL@UNC.BITNET (Scott P Leslie) (10/15/90)
Hello, I would like information regarding a possible virus. On one of our machines we have a file called DDATE.COM (512 bytes, 11-01-88 creation date). This program displays the message "WHO YOU GONNA CALL? GHOSTBUSTERS!!!!" This is only displayed when the date is set at certain times. Does this sound like any known virus? Please respond via E-Mail. - --- Thank you! Scott P. Leslie (UNCSPL@UNC) User Service Consultant
nol2321%dsacg4.dsac.dla.mil@dsac.dla.mil (Jim Dunn) (10/19/90)
UNCSPL@UNC.BITNET (Scott P Leslie) writes: >Hello, > I would like information regarding a possible virus. On one of >our machines we have a file called DDATE.COM (512 bytes, 11-01-88 >creation date). This program displays the message "WHO YOU GONNA >CALL? GHOSTBUSTERS!!!!" This is only displayed when the date is >set at certain times. > Does this sound like any known virus? Please respond via E-Mail. >- --- >Thank you! Scott P. Leslie (UNCSPL@UNC) User Service Consultant No, this isn't a virus, or even a trojan. That little DDATE.COM file was written originally back in 1985-87, turbo pascal 3.0 source if I recall correctly. Anyway, the program has a built in capability to display a message on the beginning or 1st of every month. The original program, used to have the authors name and phone number. But, of course, it's easily edited using any binary file editor... (I've even edited one myself that used to remind me to pay my rent... :) Also, note that the DDATE.COM program remembers the date of your last use of your PC. It does this by "re-writing" itself on top of itself each time you run it and hit return. Thus the date and time of the program will change each time you run it... This is normal, and shouldn't be mistaken for a bogus. HOWEVER! Now that all this has been said, watch out for ANY program named DDATE.COM or DDATE.EXE that is larger than 512 bytes, OK? (also, you can do away with DDATE as soon as you buy a clock/calendar board, or upgrade to a 286/386 with a clock...) Happy Hunting! Best of skill! :) Jim jdunn@dsac.dla.mil