Trojan.PeacommRisk Level 3: Moderate

Question

Be on the alert for Trojan.Peacomm

Answer

This question was answered on January 22, 2007. Much of the information contained herein may have changed since posting.

According to Symantec:

Discovered: January 19, 2007

Updated: January 22, 2007 03:22:36 PM GMT

Also Known As: CME-711 [Common Malware Enumeration], TROJ_SMALL.EDW [Trend Micro], Small.DAM [F-Secure], Downloader-BAI [McAfee], Troj/Dorf-Fam [Sophos]

Type: Trojan Horse

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

Trojan.Peacomm is a Trojan horse that drops a driver program file to download additional security threats.

Trojan.Peacomm reportedly arrives as an attachment to a spammed email with the following characteristics:

Subject (One of the following):

A killer at 11, he's free at 21 and kill again!

U.S. Secretary of State Condoleezza Rice has kicked German Chancellor Angela Merkel

British Muslims Genocide

Naked teens attack home director.

230 dead as storm batters Europe.

Re: Your text

Radical Muslim drinking enemies's blood.

Chinese missile shot down Russian satellite

Chinese missile shot down Russian aircraft

Chinese missile shot down USA aircraft

Chinese missile shot down USA satellite

Russian missile shot down USA aircraft

Russian missile shot down USA satellite

Russian missile shot down Chinese aircraft

Russian missile shot down Chinese satellite

Saddam Hussein safe and sound!

Saddam Hussein alive!

Venezuelan leader: "Let's the War beginning".

Fidel Castro dead.

Attachment (One of the following):

FullVideo.exe

Full Story.exe

Video.exe

Read More.exe

FullClip.exe

GreetingPostcard.exe

MoreHere.exe

FlashPostcard.exe

GreetingCard.exe

ClickHere.exe

ReadMore.exe

FlashPostcard.exe

FullNews.exe

Note: Due to a substantial increase in activity, Symantec Security Response raised this threat to category 3 on January 22, 2007.

Author

Posted by Ken of Data Doctors on January 22, 2007