| Portas
Usadas |
Proto-
colo |
Nome
do Trojan |
Onde
ele altera o Registro * |
Nome
do Server do Trojan |
| 5001 |
TCP |
Back
Door Setup |
n.d. |
server.exe
(185856Kb) |
| 5001 |
TCP |
Sockets
de Troie |
n.d. |
server.exe
(323584Kb) |
| 5011 |
TCP |
One
of the Last Trojan (OOTLT) |
n.d. |
n.d. |
| 5031 |
TCP |
NetMetropolitan |
n.d. |
n.d. |
| 5321 |
TCP |
Firehotcker |
n.d. |
n.d. |
| 5400 |
TCP |
Back
Construction |
n.d. |
n.d. |
| 5400 |
TCP |
Blade
Runner |
HKLM\S\M\W\CV\Run |
server.exe
(323584Kb) |
| 5401 |
TCP |
Blade
Runner |
HKLM\S\M\W\CV\Run |
server.exe
(323584Kb) |
| 5401 |
TCP |
Back
Construction |
n.d. |
n.d. |
| 5402 |
TCP |
Blade
Runner |
HKLM\S\M\W\CV\Run |
server.exe
(323584Kb) |
| 5550 |
TCP |
Xtcp |
n.d. |
n.d. |
| 5512 |
TCP |
Illusion
Mailer |
n.d. |
n.d. |
| 5555 |
TCP |
ServeMe |
n.d. |
n.d. |
| 5556 |
TCP |
BO
Facil |
n.d. |
n.d. |
| 5557 |
TCP |
BO
Facil |
n.d. |
n.d. |
| 5569 |
TCP |
Robo-Hack |
n.d. |
robo-serv.exe
(24576Kb) |
| 5637 |
TCP |
PC
Crasher |
n.d. |
n.d. |
| 5638 |
TCP |
PC
Crasher |
n.d. |
n.d. |
| 5714 |
TCP |
WinCrash |
HKLM\S\M\W\CV\Run |
server.exe
(296448Kb) ou cfg95.exe (79242Kb) e ICQFuckerExtentitions.exe
(182272Kb) e win32cfg.exe (4128Kb) |
| 5741 |
TCP |
WinCrash |
HKLM\S\M\W\CV\Run |
server.exe
(296448Kb) ou cfg95.exe (79242Kb) e ICQFuckerExtentitions.exe
(182272Kb) e win32cfg.exe (4128Kb) |
| 5742 |
TCP |
WinCrash |
HKLM\S\M\W\CV\Run |
server.exe
(296448Kb) ou cfg95.exe (79242Kb) e ICQFuckerExtentitions.exe
(182272Kb) e win32cfg.exe (4128Kb) |
| 6000 |
TCP |
The
Thing |
n.d. |
n.d. |
| 6272 |
TCP |
Secret
Service |
n.d. |
n.d. |
| 6400 |
TCP |
The
Thing |
n.d. |
n.d. |
| 6667 |
TCP |
ScheduleAgent |
n.d. |
n.d. |
| 6669 |
TCP |
Host
Control |
n.d. |
n.d. |
| 6669 |
TCP |
Vampyre |
n.d. |
n.d. |
| 6670 |
TCP |
Deep
Throat v2 |
HKLM\S\M\W\CV\Run |
SystemPatch.exe
(312180Kb) |
| 6674 |
TCP |
Deep
Throat v3 |
HKLM\S\M\W\CV\Run |
SystemPatch.exe
(312180Kb) |
| 6711 |
TCP |
Deep
Throat v2 |
HKLM\S\M\W\CV\Run |
SystemPatch.exe
(312180Kb) |
| 6711 |
TCP |
SubSeven |
HKLM\S\M\W\CV\Run
or HKLM\S\M\W\CV\
RunServices ou * |
Server.exe
(24064Kb) |
| 6712 |
TCP |
SubSeven |
HKLM\S\M\W\CV\Run
or HKLM\S\M\W\CV\
RunServices ou * |
Server.exe
(24064Kb) |
| 6713 |
TCP |
SubSeven |
HKLM\S\M\W\CV\Run
or HKLM\S\M\W\CV\
RunServices ou * |
Server.exe
(24064Kb) |
| 6771 |
TCP |
Deep
Throat |
HKLM\S\M\W\CV\Run |
server.exe
(533013Kb) |
| 6776 |
TCP |
SubSeven |
HKLM\S\M\W\CV\Run
or HKLM\S\M\W\CV\
RunServices ou * |
Server.exe
(24064Kb) |
| 6776 |
TCP |
2000
Cracks |
n.d. |
n.d. |
| 6776 |
TCP |
BackDoor-G |
n.d. |
n.d. |
| 6912 |
TCP |
Shit
Heep |
n.d. |
n.d. |
| 6939 |
TCP |
Indoctrination |
n.d. |
n.d. |
| 6969 |
TCP |
IRC-3 |
n.d. |
n.d. |
| 6969 |
TCP |
Gate
Crasher |
HKLM\S\M\W\CV\Run |
Server.exe
(580608Kb) |
| 6969 |
TCP |
Priority |
HKLM\S\M\W\CV\
RunServices |
PServer.exe
(98304Kb) |
| 6970 |
TCP |
Gate
Crasher |
HKLM\S\M\W\CV\Run |
Server.exe
(580608Kb) |
| 7000 |
TCP |
Remote
Grab |
n.d. |
gserver.exe
(126976Kb) |
| 7000 |
TCP |
Kazimas |
n.d. |
n.d. |
| 7000 |
TCP |
SubSeven |
HKLM\S\M\W\CV\Run
or HKLM\S\M\W\CV\
RunServices ou * |
Server.exe
(24064Kb) |
| 7215 |
TCP |
SubSeven |
HKLM\S\M\W\CV\Run
or HKLM\S\M\W\CV\
RunServices ou * |
Server.exe
(24064Kb) |
| 7300 |
TCP |
NetMonitor |
HKLM\S\M\W\CV\Run |
spyserver.exe
(30720Kb) e netspy.exe (141312Kb) |
| 7301 |
TCP |
NetMonitor |
HKLM\S\M\W\CV\Run |
spyserver.exe
(30720Kb) e netspy.exe (141312Kb) |
| 7306 |
TCP |
NetMonitor |
HKLM\S\M\W\CV\Run |
spyserver.exe
(30720Kb) e netspy.exe (141312Kb) |
| 7307 |
TCP |
NetMonitor |
HKLM\S\M\W\CV\Run |
spyserver.exe
(30720Kb) e netspy.exe (141312Kb) |
| 7308 |
TCP |
NetMonitor |
HKLM\S\M\W\CV\Run |
spyserver.exe
(30720Kb) e netspy.exe (141312Kb) |
| 7789 |
TCP |
icKiller |
HKLM\S\M\W\CV\Run |
ICKiLLeR.exe
(534016Kb) |
| 7789 |
TCP |
Back
Door Setup |
n.d. |
n.d. |
| 8080 |
TCP |
RingZero |
n.d. |
n.d. |
| 8787 |
TCP |
Back
Orifice 2000 |
n.d. |
n.d. |
| 8897 |
TCP |
HackOffice |
n.d. |
n.d. |
| 8989 |
TCP |
Rcon |
n.d. |
n.d. |
| 9400 |
TCP |
InCommand |
n.d. |
n.d. |
| 9872 |
TCP |
Portal
of Doom |
HKLM\S\M\W\CV\
RunServices |
Server.exe
(114176Kb) |
| 9873 |
TCP |
Portal
of Doom |
HKLM\S\M\W\CV\
RunServices |
Server.exe
(114176Kb) |
| 9874 |
TCP |
Portal
of Doom |
HKLM\S\M\W\CV\
RunServices |
Server.exe
(114176Kb) |
| 9875 |
TCP |
Portal
of Doom |
HKLM\S\M\W\CV\
RunServices |
Server.exe
(114176Kb) |
| 9876 |
TCP |
Cyber
Attacker |
n.d. |
n.d. |
| 9878 |
TCP |
TransScout |
n.d. |
n.d. |
| 9989 |
TCP |
iNi-Killer |
HKLM\S\M\W\CV\
RunServices |
server.exe
(32768Kb) |
| 9999 |
TCP |
The
Prayer |
n.d. |
n.d. |
| 10067 |
UDP |
Portal
of Doom |
HKLM\S\M\W\CV\
RunServices |
Server.exe
(114176Kb) |
| 10086 |
TCP |
Syphillis |
n.d. |
n.d. |
| 10101 |
TCP |
BrainSpy |
n.d. |
n.d. |
| 10167 |
UDP |
Portal
of Doom |
HKLM\S\M\W\CV\
RunServices |
Server.exe
(114176Kb) |
| 10452 |
TCP |
Backdoor-QE |
n.d. |
n.d. |
| 10520 |
TCP |
Acid
Shivers |
n.d. |
n.d. |
| 10607 |
TCP |
Coma |
n.d. |
n.d. |
| 10666 |
UDP |
Ambush |
n.d. |
n.d. |
| 11000 |
TCP |
Senna
Spy FTP Server |
n.d. |
n.d. |
| 11050 |
TCP |
Host
Control |
n.d. |
n.d. |
| 11223 |
TCP |
Progenic |
HKLM\S\M\W\CV\Run |
AntiNuke.exe
(102400Kb) |
| 11223 |
TCP |
Secret
Agent |
n.d. |
n.d. |
| 12076 |
TCP |
Gjamer |
n.d. |
n.d. |
| 12223 |
TCP |
Hack
'99 KeyLogger |
HKLM\S\M\W\CV\
RunServices |
Server.exe
(22528Kb) |
| 12345 |
TCP |
Gaban
Bus |
n.d. |
Patch.exe
(494592Kb) |
| 12345 |
TCP |
NetBus |
HKLM\S\M\W\CV\Run |
Patch.exe
(494592Kb) |
| 12345 |
TCP |
Pie
Bill Gates |
n.d. |
n.d. |
| 12345 |
TCP |
X-bill |
n.d. |
n.d. |
| 12346 |
TCP |
Gaban
Bus |
n.d. |
Patch.exe
(494592Kb) |
| 12346 |
TCP |
NetBus |
HKLM\S\M\W\CV\Run |
Patch.exe
(494592Kb) |
| 12346 |
TCP |
X-bill |
n.d. |
n.d. |
| 12349 |
TCP |
BioNet |
n.d. |
n.d. |
| 12361 |
TCP |
Wack-a-mole |
n.d. |
n.d. |
| 12362 |
TCP |
Wack-a-mole |
n.d. |
n.d. |
| 12623 |
UDP |
DUN
Control |
n.d. |
n.d. |
| 12973 |
TCP |
Backdoor-QR |
n.d. |
n.d. |
| 12975 |
TCP |
Backdoor-QR |
n.d. |
n.d. |
| 12631 |
TCP |
WhackJob |
n.d. |
n.d. |
| 13000 |
TCP |
Senna
Spy FTP Server |
n.d. |
n.d. |
| 16484 |
TCP |
Mosucker |
n.d. |
n.d. |
| 16772 |
TCP |
ICQ
Revenge |
n.d. |
n.d. |
| 16969 |
TCP |
Priority |
HKLM\S\M\W\CV\
RunServices |
PServer.exe
(98304Kb) |
| 17300 |
TCP |
Kuang2 |
n.d. |
n.d. |
| 17777 |
TCP |
Nephron |
n.d. |
n.d. |
| 19864 |
TCP |
Icq
Revenge |
n.d. |
n.d. |
| 20000 |
TCP |
Millenium |
HKLM\S\M\W\CV\Run |
spy.exe
(48128Kb) ou modem.exe (48128Kb) |
