Win32/Ennumi [Threat Name] go to Threat
Win32/Ennumi.A [Threat Variant Name]
| Category | virus |
| Size | 2761 B |
| Aliases | Virus.Win32.Ennumi.2761 (Kaspersky) |
| W32.Ennumi (Symantec) | |
| Win32.Immune.2761 (Dr.Web) | |
| Win32.Ennumi.2761 (BitDefender) |
Short description
Win32/Ennumi.A is a file infector.
File infection
The virus searches for available local and removable drives.
The virus infects files with the following extensions:
- .exe
Files are infected by adding a new section that contains the virus .
The host file is modified in a way that causes the virus to be executed prior to running the original code.
Other information
The virus quits immediately if any of the following folders/files is detected:
- %windir%\immune
The virus searches local drives for files with the following file extensions:
- .dll
The virus can modify the following files:
- *.dll
The virus shuffles addresses of the exported functions.