- Ah (computer virus)
Computer virus
Fullname = Ah
Common name = Ah
Technical name = Jerusalem.Ah
Family = N/A
Aliases = David-1173, Tuesday
Classification =Virus
Type =DOS
Subtype = COM infector. Buggy, causes system hangs.
IsolationDate = 1991
Isolation = Unknown
Origin =Italy
Author = Unknown, notDavid Grant and thePCVRF Ah (also known as "Tuesday" and "Jerusalem.Ah") is a very buggy
computer virus which infectsCOM file s includingcommand.com . Ah is based on the V1024 virus, and originated inItaly on May, 1991. When the first program infected with Ah is executed, Ah will install itself memory resident at the top of system memory, but below the 640KDOS boundary. After it is memory resident, Ah will infect .COM programs over 1K in length when they are executed. Infected programs will increase in size by 1,173byte s, though the file length increase will be hidden if Ah is resident. Their date and time in the DOS directory will appear to be unaltered, though if the program's original time was 12:00a, it will now be blank. The virus will be located at the beginning of infected programs. Total system and available free memory, as indicated by the DOS CHKDSK program, will decrease by 1,216 bytes.Interrupt s 08 and 21 will be hooked by the virus. Systems infected with Ah will experience frequent systemhang s. These hangs occur when the user attempts to execute a .COM program which is infected with Ah. They may also occur when the virus attempts to infect an uninfected program. System hangs occur so frequently with Ah that the virus is very noticeable. The Ah virus activates on Tuesdays, at which time it will attempt to format the first few tracks of the systemhard disk .The following text string is found in infected files:
*"(C) David Grant Virus Research 1991 PCVRF Disribuite this virus freely!!! ...ah...John...Fuck You!"Ah is believed to have been created by the same person as several other viruses from Italy, including Smack and Enigma. David Grant and the PCVRF had nothing to do with its creation.
The Ah virus has also been associasted with the 'mole' movement of computer viruses suspected to be lead by Lee Morton a potential cross dressing hacker.The only information known on Lee Morton is a note left after then famous 'davgreen' virus that read : "The secrecy is killing me"
External links
* [http://www.probertencyclopaedia.com/L21.HTM Computer Viruses (A)] , by Probert Encyclopedia
* [http://vil.nai.com/vil/content/v_98147.htm Ah virus] , by McAfee
Wikimedia Foundation. 2010.