Memory Lapse Virus
Virus Name: Memory Lapse
Aliases: Memory Lapse-323
V Status: Rare
Discovered: June, 1993
Symptoms: .COM file growth
Origin: Unknown
Eff Length: 323 Bytes
Type Code: PNC - Parasitic Non-Resident .COM Infector
Detection Method: ViruScan, F-Prot, Sweep, AVTK, IBMAV, NAV,
NAVDX, VAlert, PCScan, ChAV,
NShld, Sweep/N, AVTK/N, NProt, IBMAV/N, Innoc, NAV/N,
LProt
Removal Instructions: Delete infected files
General Comments:
The Memory Lapse, or Memory Lapse-323, virus was submitted in
June, 1993. Its origin or point of isolation is unknown. Memory
Lapse is a non-resident, direct action infector of .COM programs,
but not COMMAND.COM.
When a program infected with the Memory Lapse virus is executed,
this virus will infect three .COM programs located in the current
directory. Infected programs will have a file length increase of
323 bytes with the virus being located at the end of the file. The
program's date and time in the DOS disk directory listing will not
be altered. The following text strings are visible within the viral
code in all Memory Lapse infected programs:
"*ML.C?M COMMAND."
"Memory Lapse.323A (05/28/93)"
"Copyright (c) 1993 Memory Lapse"
It is unknown what Memory Lapse may do besides replicate.
Known variant(s) of Memory Lapse are:
Memory Lapse-375: A later version of the Memory Lapse virus,
this variant also infects three .COM programs when an
infected program is executed. Infected programs will
have a file length increase of 375 bytes with the
virus being located at the end of the file. The
following text strings are encrypted within the viral
code and are not visible within infected programs:
"*ML.C?M COMMAND."
"Memory Lapse.375A (05/29/93)"
"Copyright (c) 1993 Memory Lapse"
Origin: Unknown June, 1993
See: Chromo 1.0