| Portas
Usadas |
Proto-
colo |
Nome
do Trojan |
Onde
ele altera o Registro * |
Nome
do Server do Trojan |
| 1001 |
TCP |
Der
Spacher 3 |
n.d. |
n.d. |
| 1001 |
TCP |
SK
Silencer |
n.d. |
Server.exe
(34304Kb) |
| 1001 |
TCP |
Web
Ex |
HKLM\S\M\W\CV\Run |
Task_Bar.exe
(100864Kb) |
| 1010 |
TCP |
Doly
Trojan |
HKLM\S\M\W\CV\Run |
tesk.exe
(169472Kb) |
| 1011 |
TCP |
Doly
Trojan |
HKLM\S\M\W\CV\Run |
tesk.exe
(169472Kb) |
| 1012 |
TCP |
Doly
Trojan |
HKLM\S\M\W\CV\Run |
tesk.exe
(169472Kb) |
| 1015 |
TCP |
Doly
Trojan |
HKLM\S\M\W\CV\Run |
tesk.exe
(169472Kb) |
| 1020 |
TCP |
Vampire |
n.d. |
n.d. |
| 1024 |
TCP |
NetSpy |
HKLM\S\M\W\CV\Run |
server.exe
(25088Kb) ou server.exe (31744Kb) |
| 1024 |
TCP |
Psyber
Stream Server |
n.d. |
Wave.exe
(38400Kb) e wave.dll (27648Kb) |
| 1024 |
TCP |
Voice |
n.d. |
Wave.exe
(38400Kb) e wave.dll (27648Kb) |
| 1027 |
TCP |
ICQ
(www.mirabilis.com) |
n.d. |
n.d. |
| 1029 |
TCP |
ICQ
(www.mirabilis.com) |
n.d. |
n.d. |
| 1032 |
TCP |
ICQ
(www.mirabilis.com) |
n.d. |
n.d. |
| 1033 |
TCP |
NetSpy |
HKLM\S\M\W\CV\Run |
server.exe
(25088Kb) ou server.exe (31744Kb) |
| 1034 |
TCP |
MyDoom.O |
n.d. |
n.d. |
| 1042 |
TCP |
Bla |
n.d. |
n.d. |
| 1045 |
TCP |
Rasmin |
n.d. |
n.d. |
| 1050 |
TCP |
MiniCommand |
n.d. |
n.d. |
| 1080 |
TCP |
WinHole |
n.d. |
n.d. |
| 1080 |
TCP |
WinGate
(socks-proxy) |
n.d. |
n.d. |
| 1082 |
TCP |
WinHole |
n.d. |
n.d. |
| 1090 |
TCP |
Xtreme |
n.d. |
n.d. |
| 1095 |
TCP |
RAT |
n.d. |
n.d. |
| 1097 |
TCP |
RAT |
n.d. |
n.d. |
| 1098 |
TCP |
RAT |
n.d. |
n.d. |
| 1099 |
TCP |
RAT |
n.d. |
n.d. |
| 1170 |
TCP |
Psyber
Stream Server |
n.d. |
Wave.exe
(38400Kb) e wave.dll (27648Kb) |
| 1170 |
TCP |
Streaming
Audio trojan |
n.d. |
n.d. |
| 1170 |
TCP |
Voice |
n.d. |
Wave.exe
(38400Kb) e wave.dll (27648Kb) |
| 1200 |
UDP |
NoBackO |
n.d. |
n.d. |
| 1201 |
UDP |
NoBackO |
n.d. |
n.d. |
| 1207 |
TCP |
SoftWAR |
n.d. |
n.d. |
| 1234 |
TCP |
Ultor's
Trojan |
n.d. |
t5port.exe
(33792Kb) |
| 1243 |
TCP |
BackDoor-G |
n.d. |
n.d. |
| 1243 |
TCP |
SubSeven |
HKLM\S\M\W\CV\Run
ou HKLM\S\M\W\CV\RunServices ou * |
Server.exe
(24064Kb) |
| 1243 |
TCP |
SubSeven
Apocalypse |
n.d. |
n.d. |
| 1245 |
TCP |
Voodoo
Doll |
n.d. |
adm.exe
(36864Kb) |
| 1269 |
TCP |
Mavericks
Matrix |
n.d. |
n.d. |
| 1313 |
TCP |
NETrojan |
n.d. |
n.d. |
| 1349 |
UDP |
Back
Orifice DLL |
n.d. |
n.d. |
| 1492 |
TCP |
FTP99cmp |
HKLM\S\M\W\CV\Run |
FTP99cmp.exe
(369185Kb) |
| 1509 |
TCP |
Psyber
Stream Server |
n.d. |
Wave.exe
(38400Kb) e wave.dll (27648Kb) |
| 1600 |
TCP |
Sivka-Burka |
n.d. |
hs.exe
(267264Kb) |
| 1807 |
TCP |
SpySender |
HKLM\S\M\W\CV\Run |
client.exe
(498176Kb) |
| 1969 |
TCP |
OpC
BO |
n.d. |
n.d. |
| 1981 |
TCP |
ShockRave |
HKLM\S\M\W\CV\RunServices |
shockrave.exe
(38912Kb) |
| 1999 |
TCP |
BackDoor |
HKLM\S\M\W\CV\Run |
icqnuke.exe
(10240Kb), readme.exe (102400Kb) |
| 1999 |
TCP |
TransScout |
n.d. |
n.d. |
| 2000 |
TCP |
Der
Spacher 3 |
n.d. |
n.d. |
| 2000 |
TCP |
Insane
Network |
n.d. |
n.d. |
| 2000 |
TCP |
TransScout |
n.d. |
n.d. |
| 2001 |
TCP |
Der
Spacher 3 |
n.d. |
n.d. |
| 2001 |
TCP |
The
Trojan Cow |
HKLM\S\M\W\CV\Run |
CowServer.exe
(336896Kb) |
| 2001 |
TCP |
TransScout |
n.d. |
n.d. |
| 2002 |
TCP |
TransScout |
n.d. |
n.d. |
| 2003 |
TCP |
TransScout |
n.d. |
n.d. |
| 2004 |
TCP |
TransScout |
n.d. |
n.d. |
| 2005 |
TCP |
TransScout |
n.d. |
n.d. |
| 2023 |
TCP |
HackCity
Ripper Pro |
n.d. |
RipServer.exe
(211968Kb) |
| 2115 |
TCP |
Bugs |
HKLM\S\M\W\CV\Run |
Bugs.exe
(77824Kb) |
| 2140 |
TCP |
Deep
Throat |
HKLM\S\M\W\CV\Run |
server.exe
(533013Kb) |
| 2140 |
TCP |
Deep
Throat v2 |
HKLM\S\M\W\CV\Run |
SystemPatch.exe
(312180Kb) |
| 2140 |
TCP |
The
Invasor |
HKLM\S\M\W\CV\Run |
runme.exe
(491008Kb) |
| 2155 |
TCP |
Illusion
Mailer |
n.d. |
n.d. |
| 2283 |
TCP |
HVL
Rat5 |
n.d. |
n.d. |
| 2300 |
TCP |
Xplorer |
n.d. |
n.d. |
| 2565 |
TCP |
Striker |
n.d. |
ServerS.exe
(20480Kb) |
| 2583 |
TCP |
WinCrash |
HKLM\S\M\W\CV\Run |
server.exe
(296448Kb) ou cfg95.exe (79242Kb) e ICQFuckerExtentitions.exe
(182272Kb) e win32cfg.exe (4128Kb) |
| 2600 |
TCP |
Digital
RootBeer |
n.d. |
n.d. |
| 2716 |
TCP |
The
Prayer |
n.d. |
n.d. |
| 2773 |
TCP |
SubSeven |
HKLM\S\M\W\CV\Run
ou HKLM\S\M\W\CV\RunServices ou * |
Server.exe
(24064Kb) |
| 2801 |
TCP |
Phineas
Phucker |
HKLM\S\M\W\CV\RunServices |
Phineas.com
(93250Kb) |
| 2989 |
TCP |
RAT |
n.d. |
n.d. |
| 3024 |
TCP |
WinCrash |
HKLM\S\M\W\CV\Run |
server.exe
(296448Kb) ou cfg95.exe (79242Kb) e ICQFuckerExtentitions.exe
(182272Kb) e win32cfg.exe (4128Kb) |
| 3128 |
TCP |
RingZero |
n.d. |
n.d. |
| 3129 |
TCP |
Masters'
Paradise |
n.d. |
icqcrk.exe
(50688Kb) ou uagent.exe (282624Kb) ou Agent.exe (293376Kb) ou
Angel.exe (430592Kb) ou progman.exe (192000Kb) |
| 3150 |
TCP |
Deep
Throat |
HKLM\S\M\W\CV\Run |
server.exe
(533013Kb) |
| 3150 |
TCP |
Deep
Throat v2 |
HKLM\S\M\W\CV\Run |
SystemPatch.exe
(312180Kb) |
| 3150 |
TCP |
The
Invasor |
HKLM\S\M\W\CV\Run |
runme.exe
(491008Kb) |
| 3332 |
TCP |
Backdoor-QO |
n.d. |
n.d. |
| 3456 |
TCP |
Terror
Trojan |
n.d. |
n.d. |
| 3459 |
TCP |
Eclipse
2000 |
n.d. |
n.d. |
| 3700 |
TCP |
Portal
of Doom |
HKLM\S\M\W\CV\
RunServices |
Server.exe
(114176Kb) |
| 3791 |
TCP |
Eclypse |
n.d. |
n.d. |
| 3801 |
UDP |
Eclypse |
n.d. |
n.d. |
| 4000 |
TCP |
Psyber
Stream Server |
n.d. |
Wave.exe
(38400Kb) e wave.dll (27648Kb) |
| 4000 |
TCP |
Voice |
n.d. |
Wave.exe
(38400Kb) e wave.dll (27648Kb) |
| 4092 |
TCP |
WinCrash |
HKLM\S\M\W\CV\Run |
server.exe
(296448Kb) ou cfg95.exe (79242Kb) e ICQFuckerExtentitions.exe
(182272Kb) e win32cfg.exe (4128Kb) |
| 4242 |
TCP |
Virtual
Hacking Machine |
n.d. |
n.d. |
| 4321 |
TCP |
BoBo |
n.d. |
n.d. |
| 4567 |
TCP |
File
Nail |
n.d. |
n.d. |
| 4567 |
TCP |
File
Nail |
n.d. |
n.d. |
| 4567 |
TCP |
File
Nail |
n.d. |
n.d. |
| 4567 |
TCP |
File
Nail |
n.d. |
n.d. |
| 4567 |
TCP |
File
Nail |
n.d. |
n.d. |
| 4567 |
TCP |
File
Nail |
n.d. |
n.d. |
| 4590 |
TCP |
ICQ
Trojan |
n.d. |
icqtrogen.exe
(39424Kb) ou Command.exe (27779Kb) e FindFast.exe (188438Kb) |
| 5000 |
TCP |
Back
Door Setup |
n.d. |
n.d. |
| 5000 |
TCP |
Bubbel |
n.d. |
n.d. |
| 5000 |
TCP |
Sockets
de Troie |
n.d. |
lame.exe
(335872Kb) |
