GETDATE Utility --------------- GetDate is a directory and file listing utility. You could use it as a simple, yet effective antiviral tool, against viruses that use the date or time stamp of a file for marking an infection. There are viruses that use the file creation date or time to mark files they already infected. An educated inspection of the files' date and time stamp will often reveal an infection. For example, Satan Bug, Natas, Tremor and Frodo, all add 100 years to the date. The dodgy date passes unnoticed since only the last two digits of the date are shown under the DIR command. Sometimes the seconds are used by the virus as the marker, the seconds too are not shown under the DIR command, only the hour and minutes. Some viruses set the seconds to 60, instead of 00, or to a value greater than 60. Tequila and Delwin, for example, set the seconds field of files they infected to 62. Others set the seconds to a specific yet legitimate value from 00 to 59. HD Euthanasia (Hare Krsna), for example, sets the seconds of the files that it already infected to 34. Where applicable, GETDATE can contain a virus outbreak and stop it right at onset, long before virus-specific solutions are available. Viruses like Satan Bug, NATAS and others that affected tens of thousands of computers all over the world could be stopped before anyone ever knew their name. GETDATE is a must to help-desk personnel, to system administrators and savvy users. The GETDATE utility can be used for: Inspecting the full date and time stamp of files, including the digits of thousands and hundreds years, as well as the seconds. Such inspection may reveal a pattern that can be used in fast cleaning. Renaming the files that have a dodgy date or time stamp, or a specified value in the seconds setting. The extension name is changed, after prompting the user, to *.??~, i.e. the last character is changed to tilde (~). Executable files will thus be rendered inert, in case they are infected. Dodgy dates and time, as well as files having the specified seconds field setting, are highlighted. Files with the hidden or system attribute set are listed as well, displayed in a different color. Command line options: The first command line parameter specifies the files to list. With no command line parameters, GETDATE assumes the *.* global filespec. A directory should be specified with '\' at both ends, e.g. \DOS\, otherwise only the directory filename itself will be listed. GETDATE will prompt if to rename files that have a date later than year 2080 or the seconds set to 60 or higher. In addition, you may wish to rename files that have a specific value in the seconds field, 34 for example, like in HD Euthanasia's case. The seconds value should always be specified as the SECOND command line parameter. For example: GETDATE C:\DOS\ 34 To list lower directories as well, just change to the directory from which to start and add /S to GETDATE's command line. To sweep a whole drive, change to the root directory and issue GETDATE with the /S subdirectories switch. The /X express switch can be used where large number of files need processing, like with file servers or in large partitions. GETDATE will then pause only to prompt on exception (dodgy date or time stamp) or on files with the specified seconds set. In its standard mode, GetGate will pause at screen length intervals. GETDATE is copyright (c) 1996 with all rights reserved to NetZ Computing, Israel, and is distributed as freeware. The algorithms used in the GETDATE utility are derived from InVircible.