Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Sylvia


Aliases:


Sylvia
Holland Girl

Malware
Virus
W32

Summary

This virus is a bit unusual, to say the least. It contains the following message:

This
     program
is
  infected
          by
a
 HARMLESS
         Text-Virus V2.1
 Send a FUNNY postcard to : Sylvia Verkade,
    Duinzoom 36b,
    3235 CD Rockanje
    The Netherlands.
 You might get an ANTIVIRUS program.....

It will display this message when an infected program is executed, but if the above text is tampered with, the following message, (which is stored in an encrypted form) will appear instead:

FUCK YOU LAMER !!!!
         system halted...$

Some people have a weird sense of humor...



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details

Two versions are known, only slightly different - possibly modified to avoid some anti-virus program. When an infected program is run, the virus will seek out up to 5 .COM files to infect. It will search drive C: and the current drive. The three system files, COMMAND.COM, IBMBIO.COM and IBMDOS.COM are not infected. The virus adds 1301 bytes to the beginning of the files it infects (and also 31 bytes to the end), but does no other damage. The girl mentioned above exists, but she says that she has no idea who the author is, although there is a rumor he is her ex-boyfriend.







Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.