FANDOM


Virus.DOS.AH.2241 or AH is a virus that runs on MS-DOS.

Payload

AH is a memory resident encrypted parasitic stealth virus. It hooks INT 21h and writes itself to the end of .COM and .EXE files that are accessed. When an infected file is opened, the virus disinfects it and infects on closing. On Sundays the virus erases data on the hard drive and displays the message:

Stealth Replication Engine 1.0

The virus also contains the internal text strings:

*Stealth Replication Engine. V1.0

*Anti-Heuristics routine (C) 1993

*(F-PROT is OBSOLETE)*

Media