Sylvia Virus

Virus Name: Sylvia Aliases: Holland Girl V Status: Rare Discovered: December, 1989 Symptoms: .COM growth; TSR Origin: Netherlands Eff Length: 1,332 Bytes Type Code: PRsC - Resident Parasitic .COM Infector Detection Method: ViruScan, F-Prot, AVTK, NAV, Sweep, IBMAV, PCScan, NAVDX, ChAV, NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, IBMAV/N Removal Instructions: F-Prot, or delete infected files General Comments: The Sylvia, or Holland Girl, virus was first reported by Jan Terpstra of the Netherlands. This virus is memory resident and infects only .COM files, increasing their size by 1,332 bytes. The virus apparently does no other damage, and does not infect COMMAND.COM. The virus's name is due to the fact that the virus code contains the name and phone number of a girl named Sylvia in Holland, along with her address, requesting that post cards be sent to her. The virus is believed to have been written by her ex-boyfriend. Known variant(s) of Sylvia are: Sylvia 2: The Sylvia 2, or Holland Girl 2, virus is a modified version of the Sylvia virus described above. This variant is a non-resident infector of .COM files, including COMMAND.COM. Execution of an infected program will result in up to four .COM programs becoming infected. These programs may be located in the C: drive root directory, or the current drive's current directory. Infected programs will have a file length increase of 1,332 bytes with the virus being located at the beginning of the file. The following text strings can be found within the viral code, along with Sylvia's last name and full address which is not being repeated here: "This program is infected by a HARMLESS Text Virus V2.1" "Send a FUNNY postcard to : Sylvia" "You might get an ANTIVIRUS program....." Origin: New Brunswick, Canada January, 1991.