Trojan.Peacomm ( Storm Trojan )

Technical Name: Trojan.Peacomm, CME-711, TROJ_SMALL.EDW, Small.DAM, Downloader-BAI, Troj/Dorf-Fam

Threat Level: Medium

Type: Trojan Horse

Systems Affected: Windows All

Additional info: This trojan arrives as an email with the following subject and attached files:
Subject:
- A killer at 11, he's free at 21 and kill again!
- U.S. Secretary of State Condoleezza Rice has kicked German Chancellor Angela Merkel
- British Muslims Genocide
- Naked teens attack home director.
- 230 dead as storm batters Europe.
- Re: Your text

Attachment: FullVideo.exe, Full Story.exe, Video.exe, Read More.exe, FullClip.exe

HOW TO REMOVE Trojan.Peacomm:

1. Temporarily Disable System Restore (Windows Me/XP). [how to]
2. Update the virus definitions.
3. Reboot computer in SafeMode [Restart -> press F8 -> select Safe mode]
4. Run a full system scan and clean/delete all infected files
5. Delete any values added to the registry. [Start -> Run -> regedit]
   Navigate to the subkey and delete the value:
   %HKEY_LOCAL_MACHINE%\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
   Value: "Default" = "System:kd???.exe"

   Navigate to and delete the following registry subkeys:
   %HKEY_ALL_USERS%\Software\DirectVideo
   %HKEY_CLASSES_ROOT%\DirectVideo
   %HKEY_CLASSES_ROOT%\DirectVideo\CLSID
   %HKEY_LOCAL_MACHINE%\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectVideo

6. Exit registry editor and restart the computer.
7. In order to make sure that Trojan.Peacomm is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.