| Description:
|
Details
Win32.Ennumi.2761
This is a dangerous non memory-resident Win32 virus.
It searches all hard drives for PE files to infect.
It searches the Windows directory for a file named immune. If this file exists, the virus will not infect anything.
When infecting, the virus writes itself to the end of files.
Infection depends on the time shown by the local system clock. If the time shown is before 1100, no files will be infected. If the time shown is between 1100 and 1400, the virus will infect files in the Windows directory. If the time shown is between 1400 and 1900, si*pi.dll files will be infected. If any other time is shown, the virus will search for these files to infect later.
The virus code contains errors. |
