It turns out this is not exactly a trojan, but rather an attack tool for the recent tconx attack. Please, if you're running a version of samba prior to 2.2.8a, upgrade immediately! -- Martin