compressed with UPX

more versions

Backdoor.Win32.Snart.a:
size: 12,800 bytes

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "LogitechMouse"
data: %trojan path% 

attempts to connect to an IRC server


tested on Windows XP
April 07, 2005