Win32/Ennumi [Threat Name] go to Threat

Win32/Ennumi.A [Threat Variant Name]

Category virus
Size 2761 B
Detection created Mar 27, 2015
Detection database version 11387
Aliases Virus.Win32.Ennumi.2761 (Kaspersky)
  W32.Ennumi (Symantec)
  Win32.Immune.2761 (Dr.Web)
  Win32.Ennumi.2761 (BitDefender)
Short description

Win32/Ennumi.A is a file infector.

File infection

The virus searches for available local and removable drives.


The virus infects files with the following extensions:

  • .exe

Files are infected by adding a new section that contains the virus .


The host file is modified in a way that causes the virus to be executed prior to running the original code.

Other information

The virus quits immediately if any of the following folders/files is detected:

  • %windir%\­immune

The virus searches local drives for files with the following file extensions:

  • .dll

The virus can modify the following files:

  • *.dll

The virus shuffles addresses of the exported functions.

Please enable Javascript to ensure correct displaying of this content and refresh this page.