Trojan.Comet.A

Trojan.Comet.A is a malicious Trojan first released in July 2010. This Trojan has gone on to infect thousands of PCs worldwide, and is regarded as a severe threat to healthy PCs. Trojan.Comet.A also operates under various aliases, some of which are:

BKDR_COMDAR.SMI (Trend Micro)
Backdoor.Win32.Agent.axgv (Kaspersky)
Troj/KeyLog-MN (Sophos)

This Trojan will give complete control and access over to remote hackers. These hackers will use the PC to perform any actions they wish, which may include using it as part of Denial of Service (DoS) attacks. Because of its seditious infection, users may find it difficult to get rid of Trojan.Comet.A without some help. The following system modifications should be a clear indication of Trojan.Comet.A on the system:

The presence of the following files:
c:\test\svchost.exe

The presence of the following registry modifications:

Adds value: "dkrtt"
With data: "c:\test\svchost.exe"
To subkey: HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Adds value: "DisableTaskMgr"
With data: "1"
To subkey: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

The Trojan will disable the system utility Task Manager and contact its remote host at infinitypro.hopto.org using port 5555 on the system. Usually Trojan.Comet.A will contact its developers at this domain for the following reasons:

To report a new infection to its developers
To receive configurations and other data from the developers
To download and execute further malware to the system, including arbitrary files and updates
To receive more instructions from the remote attacker and to upload stolen data from the infected PC

It will also spy on the user and log keys of the keyboard. It will relay sensitive private info like financial information and usernames and passwords to its developers, which puts the user at risk of identity theft.

In order to get rid of Trojan.Comet.A, invest in a powerful security tool which will not only get rid of the threat, but also restore the PC’s security and privacy and protect against similar attacks in future.