Clandestine 3.0
(TrojanDropper.Win32.Small.f for Server)
(Backdoor.Win32.VB.iy for Client)

by Exhumed

Written in Visual Basic, compressed with ASPack

Released in December 2001

more versions 


Server:
dropped file:
C:\WINDOWS\SYSTEM\CONTROL.EXE

size: 127.510 bytes

port: 22456 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run


MegaSecurity