Event ID - 10607

Port No10607
Service NameComa
RFC Doc0
ProtocolTCP
DescriptionWorks on Windows 95 and 98. It does not work on Windows NT because of the API code used in the trojan.
Reference LinkComa
Attackb>Registers:
HLM\Software\Microsoft\Windows\CurrentVersion\Run

Files:
Coma.zip - 143,105 bytes Comaclient.exe - 215,552 bytes Comserv.exe - 148,480 bytes Msvbvm50.dll - Mswinsck.ocx - Msgsvr36.exe -

Actions:
Remote Access

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.