New Virus Threat Upgraded -Trojan.Peacomm

[Kathryn41 3,205]

(Note: the links referred to in the message won't work but you can get the full information by following the URL link at the bottom)

"In order to ensure you are informed of the latest online threats, we wanted to alert you that Symantec Security Response raised the risk level of Trojan.Peacomm from a category 2 out of 5, to a category 3 threat, due to the speed and volume in which it is being aggressively spammed across the Internet. The Trojan, which was first spotted January 17, 2007 has been raised to a higher category following a sustained increase in new versions of the attack which appeared over the weekend as the malware author responded to improvements in protection made by security companies by adjusting his tactics.

Trojan.Peacomm is one of a number of spamming Trojan horse programs Symantec has seen lately that appear to originate from Russia and are clearly aimed at making money for the author by pumping up penny stocks. The victim is enticed through social engineering techniques to open an attachment, which typically appears to be a video clip on a recent, newsworthy event.

The trojan horse arrives as an attachment to an email purporting to contain a video of one of several different recent news stories. The email itself will have no message body, but will have one of several subject lines such as "A killer at 11, he's free at 21 and kill again!," "Fidel Castro Dead," "Re: Your Text." For a complete list of subject lines, please click here.

Symantec’s new technology, Symantec Online Network for Advanced Response (SONAR), which is included in Norton AntiVirus™ 2007 and Norton Internet Security™ 2007, helped to detect an increase in activity around supporting files dropped by Trojan.Peacomm early last week, before the threat was seen in the wild.

If your security software is up-to-date, but you are concerned you are infected, you can run LiveUpdate or download the removal tools.

Run LiveUpdate™

Virus Definitions are available via the LiveUpdate™ or the Security Response Website.

Removal Tool

If your computer has already been infected, click here to use our virus removal tool now.

To reduce the possibility of being affected by Trojan.Peacomm, Symantec Security Response advises users to do the following:

Keep antivirus and IPS detection signatures updated.

Never click on attachments or web links from unsolicited emails.

Regularly apply security patches and updates to all major software installed on the computer.

Use a security solution that contains antivirus and client firewall technologies, such as Symantec Client Security™ or Norton Internet Security™, to protect against today's known and tomorrow's unknown threats."

http://www.symantec.com/enterprise/securit...-99&tabid=1

Edited January 25, 2007 by Kathryn41