Know Your Malware: Stark Removal

Stark is a trojan, which provides the attacker with unauthorized remote access to a compromised computer and steals user confidential information. Once executed, the parasite secretly installs itself to the system and displays a message asking the user to enter his e-mail address and mail server details. Then it starts to record keystrokes and take screenshots of user activity. Gathered data is sent to a predetermined e-mail address using an integrated mail engine. Stark is able to terminate running processes of antivirus software. It automatically runs on every Windows startup.

Related files: kernel32.dli

Stark properties:
• Allows remote user connection
• Takes and sends out screenshots of user activity
• Sends out logs by FTP or email
• Logs keystrokes
• Hides from the user
• Stays resident in background Remove Stark, removal instructions

Linked by shanmuga Sunday, 6th November 2005 10:57AM