Endpoint Protection

A quick question. I've tried searching online and couldn't find a solid answer so I figured I'd ask here.

Can a virus or trojan that has infected a system, freely change the "last modified" or "created date" of the infected files, to any date it wishes?
 

E.g. A file in C:\Documents and Settings\profile\virus.file has a last modified date of 04-25-2001. Is this actually when the file was last modified? Or can the virus itself falsify that date value?

Thanks,

found this tool; can be done by a virus easily.

http://www.online-tech-tips.com/computer-tips/how-to-change-the-last-modified-date-creation-date-and-last-accessed-date-for-files-and-folders/

Yes there are file infectors which can do this ..however you can look at th file signature (Manfacturer ) to see if its good or bad file..Who can check this using Autoruns ( if it is runnin in the memory or is hooked to any process )

https://www-secure.symantec.com/connect/articles/how-find-suspected-threats-your-computer

Can a virus or trojan that has infected a system, freely change the "last modified" or "created date" of the infected files, to any date it wishes?

Yes... with the latest blended threats in circulation its very easy for them to achieve this.