揭开木马的神秘面纱一.htm

可以对黑客编程有一定的了解

port 1042 - Bla<br> 
port 1045 - Rasmin<br> 
port 1090 - Xtreme<br> 
port 1170 - Psyber Stream Server, Streaming Audio trojan, Voice<br> 
port 1234 - Ultors Trojan<br> 
port 1243 - SubSeven<br> 
port 1245 - VooDoo Doll<br> 
port 1269 - Mavericks Matrix<br> 
port 1349 (UDP) - BO DLL<br> 
port 1492 - FTP99CMP<br> 
port 1509 - Psyber Streaming Server<br> 
port 1600 - Shivka-Burka<br> 
port 1807 - SpySender<br> 
port 1981 - Shockrave<br> 
port 1999 - BackDoor<br> 
port 1999 - TransScout<br> 
port 2000 - TransScout<br> 
port 2001 - TransScout<br> 
port 2001 - Trojan Cow<br> 
port 2002 - TransScout<br> 
port 2003 - TransScout<br> 
port 2004 - TransScout<br> 
port 2005 - TransScout<br> 
port 2023 - Ripper<br> 
port 2115 - Bugs<br> 
port 2140 - Deep Throat, The Invasor<br> 
port 2155 - Illusion Mailer<br> 
port 2283 - HVL Rat5<br> 
port 2565 - Striker<br> 
port 2583 - WinCrash<br> 
port 2600 - Digital RootBeer<br> 
port 2801 - Phineas Phucker<br> 
port 2989 (UDP) - RAT<br> 
port 3024 - WinCrash<br> 
port 3128 - RingZero<br> 
port 3129 - Masters Paradise<br> 
port 3150 - Deep Throat, The Invasor<br> 
port 3459 - Eclipse 2000<br> 
port 3700 - Portal of Doom<br> 
port 3791 - Eclypse<br> 
port 3801 (UDP) - Eclypse<br> 
port 4092 - WinCrash<br> 
port 4321 - BoBo<br> 
port 4567 - File Nail<br> 
port 4590 - ICQTrojan<br> 
port 5000 - Bubbel, Back Door Setup, Sockets de Troie<br> 
port 5001 - Back Door Setup, Sockets de Troie<br> 
port 5011 - One of the Last Trojans (OOTLT)<br> 
port 5031 - NetMetro<br> 
port 5321 - Firehotcker<br> 
port 5400 - Blade Runner, Back Construction<br> 
port 5401 - Blade Runner, Back Construction<br> 
port 5402 - Blade Runner, Back Construction<br> 
port 5550 - Xtcp<br> 
port 5512 - Illusion Mailer<br> 
port 5555 - ServeMe<br> 
port 5556 - BO Facil<br> 
port 5557 - BO Facil<br> 
port 5569 - Robo-Hack<br> 
port 5742 - WinCrash<br> 
port 6400 - The Thing<br> 
port 6669 - Vampyre<br> 
port 6670 - DeepThroat<br> 
port 6771 - DeepThroat<br> 
port 6776 - BackDoor-G, SubSeven<br> 
port 6912 - Shit Heep (not port 69123!)<br> 
port 6939 - Indoctrination<br> 
port 6969 - GateCrasher, Priority, IRC 3<br> 
port 6970 - GateCrasher<br> 
port 7000 - Remote Grab, Kazimas<br> 
port 7300 - NetMonitor<br> 
port 7301 - NetMonitor<br> 
port 7306 - NetMonitor<br> 
port 7307 - NetMonitor<br> 
port 7308 - NetMonitor<br> 
port 7789 - Back Door Setup, ICKiller<br> 
port 8080 - RingZero<br> 
port 9400 - InCommand<br> 
port 9872 - Portal of Doom<br> 
port 9873 - Portal of Doom<br> 
port 9874 - Portal of Doom<br> 
port 9875 - Portal of Doom<br> 
port 9876 - Cyber Attacker<br> 
port 9878 - TransScout<br> 
port 9989 - iNi-Killer<br> 
port 10067 (UDP) - Portal of Doom<br> 
port 10101 - BrainSpy<br> 
port 10167 (UDP) - Portal of Doom<br> 
port 10520 - Acid Shivers<br> 
port 10607 - Coma<br> 
port 11000 - Senna Spy<br> 
port 11223 - Progenic trojan<br> 
port 12076 - Gjamer<br> 
port 12223 - Hack?9 KeyLogger<br> 
port 12345 - GabanBus, NetBus, Pie Bill Gates, X-bill<br> 
port 12346 - GabanBus, NetBus, X-bill<br> 
port 12361 - Whack-a-mole<br> 
port 12362 - Whack-a-mole<br> 
port 12631 - WhackJob<br> 
port 13000 - Senna Spy<br> 
port 16969 - Priority<br> 
port 17300 - Kuang2 The Virus<br> 
port 20000 - Millennium<br> 
port 20001 - Millennium<br> 
port 20034 - NetBus 2 Pro<br> 
port 20203 - Logged<br> 
port 21544 - GirlFriend<br> 
port 22222 - Prosiak<br> 
port 23456 - Evil FTP, Ugly FTP, Whack Job<br> 
port 23476 - Donald Dick<br> 
port 23477 - Donald Dick<br> 
port 26274 (UDP) - Delta Source<br> 
port 29891 (UDP) - The Unexplained<br> 
port 30029 - AOL Trojan<br> 
port 30100 - NetSphere<br> 
port 30101 - NetSphere<br> 
port 30102 - NetSphere<br> 
port 30303 - Sockets de Troi<br> 
port 30999 - Kuang2<br> 
port 31336 - Bo Whack<br> 
port 31337 - Baron Night, BO client, BO2, Bo Facil<br> 
port 31337 (UDP) - BackFire, Back Orifice, DeepBO<br> 
port 31338 - NetSpy DK<br> 
port 31338 (UDP) - Back Orifice, DeepBO<br> 
port 31339 - NetSpy DK<br> 
port 31666 - BOWhack<br> 
port 31785 - Hack'a'tack<br> 
port 31787 - Hack'a'tack<br> 
port 31788 - Hack'a'tack<br> 
port 31789 (UDP) - Hack'a'tack<br> 
port 31791 (UDP) - Hack'a'tack<br> 
port 31792 - Hack'a'tack<br> 
port 33333 - Prosiak<br> 
port 33911 - Spirit 2001a<br> 
port 34324 - BigGluck, TN<br> 
port 40412 - The Spy<br> 
port 40421 - Agent 40421, Masters Paradise<br> 
port 40422 - Masters Paradise<br> 
port 40423 - Masters Paradise<br> 
port 40426 - Masters Paradise<br> 
port 47262 (UDP) - Delta Source<br> 
port 50505 - Sockets de Troie<br> 
port 50766 - Fore, Schwindler<br> 
port 53001 - Remote Windows Shutdown<br> 
port 54320 - Back Orifice 2000<br> 
port 54321 - School Bus<br> 
port 54321 (UDP) - Back Orifice 2000<br> 
port 60000 - Deep Throat<br> 
port 61466 - Telecommando<br> 
port 65000 - Devil<br> 
　　注：开了上面的端口未必就是中了木马，有的端口本来就是正常的端口，只是被木马利用了，有的防火墙也会打开一些端口来监控（很无聊的做法），判断木马是一门较深的学问，如果你有什么疑问和建议，请和我联系。<br>
</p>