Trojan.DOW.NetPatch

Class Trojan
Platform DOW
Description

Technical Details


Text (c) Future Time di Paolo Monti


This trojan was released as a “wonderful” patch for Netscape. Actually, it
changes the system date launching the system shell (i.e. COMMAND.COM /C
DATE=18/04/2097), clears the screen (COMMAND.COM /C CLS) and creates in the
current directory two files with unusual names. One file has size of 0
bytes. The other one is 21 bytes long and contains the text:


NETSCAPE IS PATCHED

As side note: the “DATE” command doesn’t work with 4DOS, that for
default uses another format to set the date (i.e. DATE=dd-mm-yy). The
trojan finds COMMAND.COM consulting the COMSPEC enviroment’s variable.