TROJ_AGENT.THK

This Trojan arrives as a file dropped by PE_CORELINK.C-O.

It hides files related to PE_CORELINK.C-O and TROJ_CORELINK.D to help perpetuate their propagation and infection routines.

It prevents the execution of certain driver files, most of which are used to diagnose system infection. It also modifies several DLL files if it finds them running on memory. These DLL files are found be related to other malware. This Trojan undermines their execution presumably to hog system resources.

Related Items