%%File: VIRS0741.TXT
%%Name/Aliases: Sylvia V2.1,Holland Girl
%%Platform: PC/MS-DOS
%%Type: Program., 
%%Disk Location: COM application.
%%Features: Memory resident; TSR.
%%Damage: Corrupts a program or overlay files.
%%Size: 1332, 1321
%%See Also: 
%%Notes: The virus infects only COM-files with less  than 30 KB; it does 
not infect COMMAND.COM,  IBMBIO.COM, IBMDOS.COM.  1301 bytes of the 
virus-code are written  in front of and 31 bytes are written behind  the 
original code; files are only infected once, because the virus checks 
the existence of its  signature (808h) at the beginning of the file.  
When an infected file is started, the virus  tries to infect 5 COM-files 
on default drive.
The virus displays the following message :  "FUCK YOU LAMER !!!! (CRLF)  
system halted..."  and stops system by jumping into an endless loop.  
The message is encoded in the program. In this  version (V2.1), the 
message typical for original   Sylvia virus ("This program is infected 
by a   HARMLESS ... ") is NOT displayed.
After being activated, the virus checks itself by creating a check-sum 
of the first 144 words.  When the check-sum is incorrect (# 46A3h) the  
damaging part of the virus is activated.  "FUCK YOU LAMER !!!! (CRLF)  
system halted", displayed on screen.    Typical texts in Virus body 
(readable with Hexdump-facilities) :
                           1. "39 38 39 38 4F 45 4F 52 61 59 1E 56 5D 5A 
52 61 62" (encoded text)
                           2. 'Text-Virus V2.1'
                           3. 'Sylvia Verkade'
808h at beginning of file.