Threat Information for "Trojan.Starman"

Removal Top

StopSign will automatically remove this infection with a paid membership.

Summary Top
  • Name: Trojan.Starman
  • Aliases:Worm/Rbot.50176.5 W32/Trojan.MEX Win32:Rbot-CXU IRC/BackDoor.SdBot2.KWD Backdoor.RBot.F Win32.Rbot.
  • Date Discovered: 2007-02-15
  • Protection Added: 2007-02-20
Description Top 
-- Ease of Removal

1: Runs as a service
2: Injects DLLs into running processes
3: Consistent file contents
4: File names uniquely generated

-- Privacy Risks/Security Changes

1: Transmits personal data to remote computers
2: Opens backdoors

-- Damage/Intrusion/Annoyance

1: Creates new files

-- Propagation/Saturation

1: Infects from an email attachment
2: Spreads to other computers on the same network
3: Infects through a blind IP address attack
Technical Details Top
  • Added Registry Key:
    Key: HKCR\CLSID\*\LocalServer32
  • Added Registry Key:
    Key: HKLM\SOFTWARE\Classes\CLSID\*\LocalServer32