There are 9 variants in 2 versions, represented by the following:
When the virus is run, it infects every DOS executable in current directory.
For Remember.1081 and variants having larger infection sizes, they also infect C:\COMMAND.COM and corrupt CMOS memory, causing some CMOS settings to lost and the system will fail to recognize the command interpreter after rebooting.
Some infected files may hang the system when run.
These virus do not stay memory resident.
The virus activates on April 24th.
Remember.811, 816 and 818
These variants contain the code of payload and the same activation day but failed to trigger.
Remember.1081, 1087, 1091, 1277, 1283 and 1287
When it is first loaded into memory, it displays the message with a telephone number:
<<< Welcome >>> ================================= The OVEL bbs Tel is 02-927-7432 =================================
It also outputs 3 beeps before returning to DOS.
After that when an infected program is run, the virus types the binary content of the file before executing of the host program.
For some programs, the virus display a message box with some unreadable characters and a beep instead. The following text strings are noticeable:
Remember 4.0 Written by Jean at O.V.E.L
This message box appears differently in some variants.
This family has 9 variants in total:
The virus contains the internal text string:
- List of variants on VX Heaven