Clandestine 1.5.1
(Backdoor.Win32.RSC.151)
(TrojanDropper.Win32.Small.f for server)

by Exhumed

Compressed with ASPack

Released in December 2001

more versions 


Servers:
C:\WINDOWS\SYSTEM\UPDATE.EXE
C:\WINDOWS\SYSTEM\WIN32.EXE

size: 149.124 bytes

port: 3006 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run


MegaSecurity