Halka Family
Description Halka Family
These are not dangerous (except "Halka.474") nonmemory resident parasitic viruses. "Halka.474,720" are encrypted ones. They search for the files and write themselves to the end of the file. "Halka.474" infects EXE files, other viruses infect .COM files.
"Halka.474" erases the disk sectors.
On December, 31th the viruses display the messages:
"Halka.720":
Este es el virus 786 Version 2.01
Encriptado variable
Echo por --> _¡X__ [_x_]/A.H.D. HALKA/. Industria Argentina
Quemen al muñeco del `94!
"Halka.1000":
Este es el virus 786 Version 1
Echo por --> _¡x__ [_x_]/A.H.D. HALKA/. Industria Argentina
Quemen al muñeco del `94!
OHH NO, ME HA DESCUBIERTO!!!
Some viruses contain the additional text strings:
"Halka.474":
Red October (C) >D.V< 1994
Catch if you can
"Halka.720":
MALDITO, ME HA DESENCRIPTADO!! :{{
Aqui no estoy! <|-)
Check other viruses! Be aware! Use Antiviral Software
PolyEngineSGen.DSCE
Description PolyEngineSGen.DSCE
DSCE (Dark Slayer Confusion Engine) is a polymorphic generator like the MtE or TPE ones. It creates the decryption routine and encrypts the virus body, then the virus saves this part of code in file on infection. This generator contains the internal string:
DSCE v1.0
PolyEngineSGen.PME.b
Description PolyEngineSGen.PME.b
PME (Phantasie Mutation Engine) is the polymorphic generator. It creates the decryption routine and encrypt the virus body, then the virus saves that code to the file. There are two versions of that generator, their code contains the strings:
PME v1.00 (C) Jan 1995 By Burglar
PME v1.01 (C) Feb 1995 By Burglar
|