Name: Snow Category: RAT Alias: BackDoor-ASI trojan, Backdoor.Snowdoor.22, Backdoor.Snowdoor.25, Backdoor.Snowdoor.27, Backdoor.Snow Advice: Remove Risk: Elevated Risk Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. Description: Signatures: process: client.exe: MD5 Hash: aeb8131114954e47eaa... process: log.exe: MD5 Hash: b739693af6495134c00... process: client.exe: MD5 Hash: 44b87b2a19abe87ed0b... process: client.exe: MD5 Hash: 802812a394e96afa7cd... process: client.exe: MD5 Hash: 57d7eb67de772f00e30... process: ipserver.exe: MD5 Hash: 6ad4debcdbfa0448035... process: client.exe: MD5 Hash: 8f2f93460c742b96cda... process: ipserver.exe: MD5 Hash: c5bf57f32411541042e... process: client.exe: MD5 Hash: 2766f2569f23ef5d44d... process: ipserver.exe: MD5 Hash: 6de8fe8ff63631a9627... process: client.exe: MD5 Hash: e9947cc7ba732c9c81a... process: ipserver.exe: MD5 Hash: 64a5e4673fd58d15a65... process: client.exe: MD5 Hash: 542e5e0310f3afece1c... process: ipserver.exe: MD5 Hash: 78f49c32bb78e50ee54... process: client.exe: MD5 Hash: 063b9d413487c1e0a96... process: ipserver.exe: MD5 Hash: 5d261cda1f5eebe4225... process: client.exe: MD5 Hash: 80331ed295800f6270b... process: ipserver.exe: MD5 Hash: 1b94f74c7c5330fd28b... process: client.exe: MD5 Hash: 8512bedf50d45c26f08... process: ipserver.exe: MD5 Hash: cf6ed3c4836e1406d4a... process: client.exe: MD5 Hash: 2993058d07d49e5ee53... process: ipserver.exe: MD5 Hash: dde4b21fdbe0f5248d6... process: client.exe: MD5 Hash: a588929a057dea54186... process: ipserver.exe: MD5 Hash: 8c484663b7b574349d5... process: client.exe: MD5 Hash: 36e3326a934209202bb... process: ipserver.exe: MD5 Hash: 7675577ac98dc9aecfd... process: client.exe: MD5 Hash: f4f7dab69c25629f7ad... process: ipserver.exe: MD5 Hash: 2021fdf52d26ba0c333... process: client.exe: MD5 Hash: 64512fdb46c504b0f4e.. Type: RAT - A Remote Administration Tool (RAT) is a Trojan type of software that when run, provides an attacker with the capability of remotely controlling a user's computer (victim) over the Internet. The attacker usually has full access to functions on the victim's computer. The victim's computer usually listens on the Internet for the attacker's commands.