Fandom

Malware Wiki

HLLC

1,321pages on
this wiki
Add New Page
Comments0 Share

HLLC (High-Level Language Companion) is a category of viruses written in high level programming language, such as Pascal, C, C++ or Basic. These viruses do not overwrite any file, but they would create new files containing themselves so that the user might not notice.

Behavior Edit

HLLC viruses are not memory resident, once they have been run, they select a random file by capturing its filename, and then to place a file containing the virus. The users might not notice that it is a virus program and they might run them as usual.

For any two executables sharing the same filename in MS-DOS, if the user does not specify which file to run by typing the extension, the DOS executable always run first.

For example, there are both ABC.COM and ABC.EXE in the same directory, when the user types:

C:\TESTDIR>ABC

Then ABC.COM will run first.

The virus takes this advantage, so their target are EXE files instead of DOS executables. By dropping itself into a new DOS executable with the selected EXE file's name. When the user run that program, the virus would execute first, and then the host program.

Not every variant contains a payload.

Variants Edit

There are 207 known variants under this category, here is a part of them:

  • Virus.DOS.HLLC.3431
  • Virus.DOS.HLLC.3612
  • Virus.DOS.HLLC.4194
  • Virus.DOS.HLLC.4416
  • Virus.DOS.HLLC.4688
  • Virus.DOS.HLLC.5792
  • Virus.DOS.HLLC.6752
  • Virus.DOS.HLLC.7421
  • Virus.DOS.HLLC.8304 (Plane)
  • Virus.DOS.HLLC.9472
  • Virus.DOS.HLLC.Aids.8064
  • Virus.DOS.HLLC.April1st
  • Virus.DOS.HLLC.Bizar.27904
  • Virus.DOS.HLLC.Chs.6208
  • Virus.DOS.HLLC.Dear.13277
  • Virus.DOS.HLLC.Elektron.6608
  • Virus.DOS.HLLC.FindMe.12736
  • Virus.DOS.HLLC.Glenn.7584
  • Virus.DOS.HLLC.IMP.4790
  • Virus.DOS.HLLC.Jackpot.8752
  • Virus.DOS.HLLC.Krad.4658
  • Virus.DOS.HLLC.Lerm.41732
  • Virus.DOS.HLLC.Mouse.6688
  • Virus.DOS.HLLC.Nazi.4752

References Edit

Description of HLLC, F-Secure Lab, Online VSUM

Index of HLLC virus, VX Heaven

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.