This Trojan will disable antivirus protection. It is a Windows PE EXE file. It is 7 168 bytes in size.
Installation
When launched, the Trojan copies its executable file to the Windows root directory:
%WinDir%\MemChk.exe
In order to ensure that the Trojan is launched automatically when the system…

Related Posts

This entry was posted on Monday, August 27th, 2007 at 6:37 am and is filed under Virus Threats.