Dr.Web virus classification
"HLL." (High Level Language) - the viruses written in high level programming languages (such as C, C++, Pascal, Basic, etc). In some cases the code of the compiled HLL-viruses is packed with different compression utilities (PKLITE, LZEXE, DIET, etc).
There are several classes of HLL-viruses:
- "HLLC." (High Level Language Companion) - the virus which employ an infection algorithm based on manipulation of filenames in the file system. Generally, the HLLC-viruses rename the original executable file (or move it to another folder) and then use the original executable file name to create the copy of the virus in its place.
- "HLLO." (High Level Language Overwriting) -the viruses which overwrite the data of the affected file.
- "HLLP." (High Level Language Parasitic) - the viruses which infect executable files without any critical damage of the original data of the affected file.
- "HLLW." (High Level Language Worm) - the viruses which do not need any host file to spread. They just copy themselves to disk directories.
- "HLLM." (High Level Language MassMailing Worm) - the virus worm programs of mass distribution written in high level programming languages.