An evasion technique that allows a virus to avoid standard interfaces so it can infect files and go unnoticed by a behaviour blocker. tunnelling viruses try to intercept the actions before the anti-virus software can detect the malicious code. One technique used by attackers is tunnelling malicious communications through the standard port of another application (e.g., port 80 for HTTP) to avoid firewalls.