Know Your Malware: Stark Removal


Stark is a trojan, which provides the attacker with unauthorized remote access to a compromised computer and steals user confidential information. Once executed, the parasite secretly installs itself to the system and displays a message asking the user to enter his e-mail address and mail server details. Then it starts to record keystrokes and take screenshots of user activity. Gathered data is sent to a predetermined e-mail address using an integrated mail engine. Stark is able to terminate running processes of antivirus software. It automatically runs on every Windows startup.

Related files: kernel32.dli

Stark properties:
Allows remote user connection
Takes and sends out screenshots of user activity
Sends out logs by FTP or email
Logs keystrokes
Hides from the user
Stays resident in background Remove Stark, removal instructions

Linked by shanmuga Sunday, 6th November 2005 10:57AM