Virus Name: Sylvia
Aliases: Holland Girl
V Status: Rare
Discovered: December, 1989
Symptoms: .COM growth; TSR
Eff Length: 1,332 Bytes
Type Code: PRsC - Resident Parasitic .COM Infector
Detection Method: ViruScan, F-Prot, AVTK, NAV, Sweep, IBMAV, PCScan,
NShld, LProt, Sweep/N, Innoc, NProt, AVTK/N,
Removal Instructions: F-Prot, or delete infected files
The Sylvia, or Holland Girl, virus was first reported by Jan Terpstra
of the Netherlands. This virus is memory resident and infects only
.COM files, increasing their size by 1,332 bytes. The virus
apparently does no other damage, and does not infect COMMAND.COM.
The virus's name is due to the fact that the virus code contains the
name and phone number of a girl named Sylvia in Holland, along with
her address, requesting that post cards be sent to her. The virus
is believed to have been written by her ex-boyfriend.
Known variant(s) of Sylvia are:
Sylvia 2: The Sylvia 2, or Holland Girl 2, virus is a modified
version of the Sylvia virus described above. This variant is
a non-resident infector of .COM files, including COMMAND.COM.
Execution of an infected program will result in up to four
.COM programs becoming infected. These programs may be
located in the C: drive root directory, or the current drive's
current directory. Infected programs will have a file length
increase of 1,332 bytes with the virus being located at the
beginning of the file. The following text strings can be
found within the viral code, along with Sylvia's last name
and full address which is not being repeated here:
"This program is infected by a HARMLESS Text Virus V2.1"
"Send a FUNNY postcard to : Sylvia"
"You might get an ANTIVIRUS program....."
Origin: New Brunswick, Canada January, 1991.