Information about the W32/Peacomm Trojan:

W32/Peacomm is a Trojan. The Trojan will infect Windows systems and spreads through email.

The Subject of the infected mail may be any of the following;

Venezuelan leader: "Let's the War beginning".
U.S. Southwest braces for another winter blast. More then 1000 people are dead.
The commander of a U.S. nuclear submarine lunch the rocket by mistake.
The Supreme Court has been attacked by terrorists. Sen. Mark Dayton dead!
Third World War just have started!
U.S. Secretary of State Condoleezza Rice has kicked German Chancellor Angela Merkel
Saddam Hussein safe and sound!
Saddam Hussein alive!
Russian missile shot down USA satellite
Russian missile shot down USA aircraft
Russian missile shot down Chinese satellite
Russian missile shot down Chinese aircraft
Re: Your text
Radical Muslim drinking enemies's blood.
Naked teens attack home director.
Fidel Castro dead.
Chinese missile shot down USA satellite
Chinese missile shot down USA aircraft
Chinese missile shot down Russian satellite
Chinese missile shot down Russian aircraft
British Muslims Genocide
A killer at 11, he's free at 21 and kill again!
230 dead as storm batters Europe.

The name of the infected attachment will be any of the following:

Video.exe
ReadMore.exe
Read More.exe
MoreHere.exe
GreetingPostcard.exe
GreetingCard.exe
FullVideo.exe
FullNews.exe
FullClip.exe
Full Story.exe
FlashPostcard.exe
FlashPostcard.exe
ClickHere.exe

Upon execution, the Trojan copies the following files in Windows System folder.

wincom32.sys
peers.ini

It modifies the registry at the following locations to start the new service:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wincom32\