Backdoor.Win32.Kalash:
port: 113 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Service" 

Pops up a self closing DOS box.
Tries to connect to specified IRC server and joins a channel to listen for commands
Can be used for DDOS