12.07.2013 Views

Liste des principaux ports utilisés par les chevaux de Troie http ...

Liste des principaux ports utilisés par les chevaux de Troie http ...

Liste des principaux ports utilisés par les chevaux de Troie http ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

La liste<br />

Port Troyen utilisé<br />

0 REx<br />

1 (UDP) - Sockets <strong><strong>de</strong>s</strong> <strong>Troie</strong><br />

2 Death<br />

5 yoyo<br />

11 Skun<br />

16 Skun<br />

17 Skun<br />

18 Skun<br />

19 Skun<br />

20 Amanda<br />

21<br />

ADM worm, Back Construction, Bla<strong>de</strong> Runner, BlueFire, Bmail, Cattivik FTP<br />

Server, CC Inva<strong>de</strong>r, Dark FTP, Doly Trojan, FreddyK, Invisible FTP, KWM,<br />

MscanWorm, NerTe, NokNok, Pinochet, Ramen, Reverse Trojan, RTB 666, The<br />

Flu, WinCrash, Voyager Alpha Force<br />

22 InCommand, Shaft, Skun<br />

23<br />

25<br />

ADM worm, Aphex's Remote Packet Sniffer , AutoSpY, ButtMan, Fire HacKer,<br />

My Very Own trojan, Pest, RTB 666, Tiny Telnet Server - TTS, Truva Atl<br />

Antigen, Barok, BSE, Email Password Sen<strong>de</strong>r , Gip, Laocoon, Magic Horse,<br />

MBT , Moscow Email trojan, Nimda, Shtirlitz, Stukach, Tapiras, WinPC<br />

27 Assasin<br />

28 Amanda<br />

30 Agent 40421<br />

31 Agent 40421, Masters Paradise, Skun<br />

37 ADM worm<br />

39 SubSARI<br />

41 Deep Throat , Foreplay<br />

44 Arctic<br />

51 Fuck Lamers Backdoor<br />

52 MuSka52, Skun<br />

53 ADM worm, li0n, MscanWorm, MuSka52<br />

54 MuSka52<br />

66 AL-Bareki<br />

69 BackGate Kit, Nimda, Pasana, Storm, Storm worm, Theef<br />

69 (UDP) - Pasana<br />

70 ADM worm<br />

79 ADM worm, Firehotcker<br />

80<br />

711 trojan (Seven Eleven), AckCmd, BlueFire, Cafeini, Duddie, Executor, God<br />

Message, Intruzzo , Latinus, Lithium, MscanWorm, NerTe, Nimda, Noob, Optix<br />

Lite, Optix Pro , Power, Ramen, Remote Shell , Reverse WWW Tunnel<br />

Backdoor , RingZero, RTB 666, Scalper, Screen Cutter , Seeker, Slapper, Web<br />

Server CT , WebDownloa<strong>de</strong>r<br />

80 (UDP) - Penrox<br />

81 Asylum<br />

101 Skun<br />

102 Delf, Skun<br />

103 Skun<br />

105 NerTe<br />

107 Skun<br />

109 ADM worm<br />

110 ADM worm<br />

111 ADM worm, MscanWorm<br />

113 ADM worm, Alicia, Cyn, DataSpy Network X, Dosh, Gibbon, Taskman<br />

120 Skun<br />

121 Attack Bot, God Message, JammerKillah<br />

123 Net Controller<br />

137 Cho<strong>de</strong>, Nimda<br />

137 (UDP) - Bugbear, Msinit, Opaserv, Qaz<br />

138 Cho<strong>de</strong>, Nimda<br />

139 Cho<strong>de</strong>, Fire HacKer, Msinit, Nimda, Opaserv, Qaz<br />

143 ADM worm<br />

146 Infector<br />

146 (UDP) - Infector<br />

166 NokNok<br />

170 A-trojan<br />

171 A-trojan<br />

1 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

171 A-trojan<br />

200 CyberSpy<br />

201 One Windows Trojan<br />

202 One Windows Trojan, Skun<br />

211 One Windows Trojan<br />

212 One Windows Trojan<br />

221 Snape<br />

222 NeuroticKat, Snape<br />

230 Skun<br />

231 Skun<br />

232 Skun<br />

285 Delf<br />

299 One Windows Trojan<br />

334 Backage<br />

335 Nautical<br />

370 NeuroticKat<br />

400 Argentino<br />

401 One Windows Trojan<br />

402 One Windows Trojan<br />

411 Backage<br />

420 Breach<br />

443 Slapper<br />

445 Nimda<br />

455 Fatal Connections<br />

511 T0rn Rootkit<br />

513 ADM worm<br />

514 ADM worm<br />

515 MscanWorm, Ramen<br />

520 (UDP) - A UDP backdoor<br />

555 711 trojan (Seven Eleven), Phase Zero, Phase-0<br />

589 Assasin<br />

600 SweetHeart<br />

623 RTB 666<br />

635 ADM worm<br />

650 Assasin<br />

661 NokNok<br />

666<br />

Attack FTP, Back Construction, BLA trojan, NokNok, Reverse Trojan, Shadow<br />

Phyre, Unicorn, yoyo<br />

667 NokNok, SniperNet<br />

668 Unicorn<br />

669 DP trojan , SniperNet<br />

680 RTB 666<br />

692 GayOL<br />

700 REx<br />

777 Un<strong>de</strong>tected<br />

808 WinHole<br />

831 NeuroticKat<br />

901 Net-Devil, Pest<br />

902 Net-Devil, Pest<br />

903 Net-Devil<br />

911 Dark Shadow, Dark Shadow<br />

956 Crat Pro<br />

991 Snape<br />

992 Snape<br />

999 Deep Throat , Foreplay<br />

1000 Der Späher / Der Spaeher, Direct Connection, GOTHIC Intru<strong>de</strong>r , Theef<br />

1001<br />

Der Späher / Der Spaeher, GOTHIC Intru<strong>de</strong>r , Lula, One Windows Trojan,<br />

Theef<br />

1005 Pest, Theef<br />

1008 AutoSpY, li0n<br />

1010 Doly Trojan<br />

1011 Doly Trojan<br />

1012 Doly Trojan<br />

1015 Doly Trojan<br />

1016 Doly Trojan<br />

1020 Vampire<br />

2 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

1024 Latinus, Lithium, NetSpy, Ptakks<br />

1025<br />

1025<br />

1026<br />

AcidkoR, BDDT, DataSpy Network X, Fraggle Rock , KiLo, MuSka52, NetSpy,<br />

Optix Pro , Paltalk, Ptakks, Real 2000, Remote Anything, Remote Explorer Y2K,<br />

Remote Storm, RemoteNC<br />

(UDP) - KiLo, Optix Pro , Ptakks, Real 2000, Remote Anything, Remote<br />

Explorer Y2K, Remote Storm, Yajing<br />

BDDT, Dark IRC, DataSpy Network X, Delta Remote Access , Dosh, Duddie,<br />

IRC Contact, Remote Explorer 2000, RUX The TIc.K<br />

1026 (UDP) - Remote Explorer 2000<br />

1027 Clan<strong><strong>de</strong>s</strong>tine, DataSpy Network X, KiLo, UandMe<br />

1028 DataSpy Network X, Dosh, Gibbon, KiLo, KWM, Litmus, Paltalk, SubSARI<br />

1028 (UDP) - KiLo, SubSARI<br />

1029 Clan<strong><strong>de</strong>s</strong>tine, KWM, Litmus, SubSARI<br />

1029 (UDP) - SubSARI<br />

1030 Gibbon, KWM<br />

1031 KWM, Little Witch, Xanadu, Xot<br />

1031 (UDP) - Xot<br />

1032 Akosch4, Dosh, KWM<br />

1032 (UDP) - Akosch4<br />

1033 Dosh, KWM, Little Witch, Net Advance<br />

1034 KWM<br />

1035 Dosh, KWM, RemoteNC, Truva Atl<br />

1036 KWM<br />

1037 Arctic , Dosh, KWM, MoSucker<br />

1039 Dosh<br />

1041 Dosh, RemoteNC<br />

1042 BLA trojan<br />

1042 (UDP) - BLA trojan<br />

1043 Dosh<br />

1044 Ptakks<br />

1044 (UDP) - Ptakks<br />

1047 RemoteNC<br />

1049 Delf, The Hobbit Daemon<br />

1052 Fire HacKer, Slapper, The Hobbit Daemon<br />

1053 The Thief<br />

1054 AckCmd, RemoteNC<br />

1080 SubSeven 2.2, WinHole<br />

1081 WinHole<br />

1082 WinHole<br />

1083 WinHole<br />

1092 Hvl RAT<br />

1095 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT<br />

1097 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT<br />

1098 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT<br />

1099 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT<br />

1104 (UDP) - RexxRave<br />

1111 Daodan, Ultors Trojan<br />

1111 (UDP) - Daodan<br />

1115 Lurker, Protoss<br />

1116 Lurker<br />

1116 (UDP) - Lurker<br />

1122 Last 2000, Singularity<br />

1122 (UDP) - Last 2000, Singularity<br />

1133 SweetHeart<br />

1150 Orion<br />

1151 Orion<br />

1160 BlackRat<br />

1166 CrazzyNet<br />

1167 CrazzyNet<br />

1170 Psyber Stream Server , Voice<br />

1180 Unin68<br />

1183 Cyn, SweetHeart<br />

1183 (UDP) - Cyn, SweetHeart<br />

1200 (UDP) - NoBackO<br />

1201 (UDP) - NoBackO<br />

1207 SoftWAR<br />

3 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

1207 SoftWAR<br />

1208 Infector<br />

1212 Kaos<br />

1215 Force<br />

1218 Force<br />

1219 Force<br />

1221 Fuck Lamers Backdoor<br />

1222 Fuck Lamers Backdoor<br />

1234 KiLo, Ultors Trojan<br />

1243 BackDoor-G, SubSeven , Ti<strong>les</strong><br />

1245 VooDoo Doll<br />

1255 Scarab<br />

1256 Project nEXT, RexxRave<br />

1272 The Matrix<br />

1313 NETrojan<br />

1314 Daodan<br />

1349 BO dll<br />

1369 SubSeven 2.2<br />

1386 Dagger<br />

1415 Last 2000, Singularity<br />

1433 Voyager Alpha Force<br />

1441 Remote Storm<br />

1492 FTP99CMP<br />

1524 Trinoo<br />

1560 Big Gluck, Duddie<br />

1561 (UDP) - MuSka52<br />

1600 Direct Connection<br />

1601 Direct Connection<br />

1602 Direct Connection<br />

1703 Exploiter<br />

1711 yoyo<br />

1772 NetControle<br />

1772 (UDP) - NetControle<br />

1777 Scarab<br />

1826 Glacier<br />

1833 TCC<br />

1834 TCC<br />

1835 TCC<br />

1836 TCC<br />

1837 TCC<br />

1905 Delta Remote Access<br />

1911 Arctic<br />

1966 Fake FTP<br />

1967 For Your Eyes Only , WM FTP Server<br />

1978 (UDP) - Slapper<br />

1981 Bowl, Shockrave<br />

1983 Q-taz<br />

1984 Intruzzo , Q-taz<br />

1985 Black Diver, Q-taz<br />

1985 (UDP) - Black Diver<br />

1986 Akosch4<br />

1991 PitFall<br />

1999 Back Door, SubSeven , TransScout<br />

2000<br />

2000<br />

2001<br />

A-trojan, Der Späher / Der Spaeher, Fear, Force, GOTHIC Intru<strong>de</strong>r , Last<br />

2000, Real 2000, Remote Explorer 2000, Remote Explorer Y2K, Senna Spy<br />

Trojan Generator, Singularity<br />

(UDP) - GOTHIC Intru<strong>de</strong>r , Real 2000, Remote Explorer 2000, Remote Explorer<br />

Y2K<br />

Der Späher / Der Spaeher, Duddie, Glacier, Protoss, Senna Spy Trojan<br />

Generator, Singularity, Trojan Cow<br />

2001 (UDP) - Scalper<br />

2002 Duddie, Senna Spy Trojan Generator, Sensive<br />

2002 (UDP) - Slapper<br />

2004 Duddie<br />

2005 Duddie<br />

2023 Ripper Pro<br />

2060 Protoss<br />

4 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

2060 Protoss<br />

2080 WinHole<br />

2101 SweetHeart<br />

2115 Bugs<br />

2130 (UDP) - Mini BackLash<br />

2140 The Invasor<br />

2140 (UDP) - Deep Throat , Foreplay , The Invasor<br />

2149 Deep Throat<br />

2150 R0xr4t<br />

2222 SweetHeart, Way<br />

2222 (UDP) - SweetHeart, Way<br />

2281 Nautical<br />

2283 Hvl RAT<br />

2300 Storm<br />

2311 Studio 54<br />

2330 IRC Contact<br />

2331 IRC Contact<br />

2332 IRC Contact, Silent Spy<br />

2333 IRC Contact<br />

2334 IRC Contact, Power<br />

2335 IRC Contact<br />

2336 IRC Contact<br />

2337 IRC Contact, The Hobbit Daemon<br />

2338 IRC Contact<br />

2339 IRC Contact, Voice Spy<br />

2339 (UDP) - Voice Spy<br />

2343 Asylum<br />

2345 Doly Trojan<br />

2407 yoyo<br />

2418 Intruzzo<br />

2555 li0n, T0rn Rootkit<br />

2565 Striker trojan<br />

2583 WinCrash<br />

2589 Dagger<br />

2600 Digital RootBeer<br />

2702 Black Diver<br />

2702 (UDP) - Black Diver<br />

2772 SubSeven<br />

2773 SubSeven , SubSeven 2.1 Gold<br />

2774 SubSeven , SubSeven 2.1 Gold<br />

2800 Theef<br />

2929 Konik<br />

2983 Breach<br />

2989 (UDP) - Remote Administration Tool - RAT<br />

3000 InetSpy, Remote Shut, Theef<br />

3006 Clan<strong><strong>de</strong>s</strong>tine<br />

3024 WinCrash<br />

3031 MicroSpy<br />

3119 Delta Remote Access<br />

3128 Reverse WWW Tunnel Backdoor , RingZero<br />

3129 Masters Paradise<br />

3131 SubSARI<br />

3150 Deep Throat , The Invasor, The Invasor<br />

3150 (UDP) - Deep Throat , Foreplay , Mini BackLash<br />

3215 XHX<br />

3215 (UDP) - XHX<br />

3292 Xposure<br />

3295 Xposure<br />

3333 Daodan<br />

3333 (UDP) - Daodan<br />

3410 Optix Pro<br />

3417 Xposure<br />

3418 Xposure<br />

3456 Fear, Force, Terror trojan<br />

3459 Eclipse 2000, Sanctuary<br />

3505 AutoSpY<br />

5 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

3505 AutoSpY<br />

3700 Portal of Doom<br />

3721 Whirlpool<br />

3723 Mantis<br />

3777 PsychWard<br />

3791 Total Solar Eclypse<br />

3800 Total Solar Eclypse<br />

3801 Total Solar Eclypse<br />

3945 Delta Remote Access<br />

3996 Remote Anything<br />

3996 (UDP) - Remote Anything<br />

3997 Remote Anything<br />

3999 Remote Anything<br />

4000 Remote Anything, SkyDance<br />

4092 WinCrash<br />

4128 RedShad<br />

4128 (UDP) - RedShad<br />

4156 (UDP) - Slapper<br />

4201 War trojan<br />

4210 Netkey<br />

4211 Netkey<br />

4225 Silent Spy<br />

4242 Virtual Hacking Machine - VHM<br />

4315 Power<br />

4321 BoBo<br />

4414 AL-Bareki<br />

4488 Event Horizon<br />

4567 File Nail<br />

4653 Cero<br />

4666 Mneah<br />

4700 Theef<br />

4836 Power<br />

5000 Back Door Setup, Bubbel, Ra1d, Sockets Des <strong>Troie</strong><br />

5001 Back Door Setup, Sockets Des <strong>Troie</strong><br />

5002 Shaft<br />

5005 Aladino<br />

5011 Peanut Brittle<br />

5025 WM Remote KeyLogger<br />

5031 Net Metropolitan<br />

5032 Net Metropolitan<br />

5050 R0xr4t<br />

5135 Bmail<br />

5150 Pizza<br />

5151 Optix Lite<br />

5152 Laphex<br />

5221 NOSecure<br />

5250 Pizza<br />

5321 Firehotcker<br />

5333 Backage<br />

5350 Pizza<br />

5377 Iani<br />

5400 Back Construction, Bla<strong>de</strong> Runner, Digital Spy<br />

5401 Back Construction, Bla<strong>de</strong> Runner, Digital Spy , Mneah<br />

5402 Back Construction, Bla<strong>de</strong> Runner, Digital Spy , Mneah<br />

5418 DarkSky<br />

5419 DarkSky<br />

5419 (UDP) - DarkSky<br />

5430 Net Advance<br />

5450 Pizza<br />

5503 Remote Shell<br />

5534 The Flu<br />

5550 Pizza<br />

5555 Daodan, NoXcape<br />

5555 (UDP) - Daodan<br />

5556 BO Facil<br />

5557 BO Facil<br />

6 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

5557 BO Facil<br />

5569 Robo-Hack<br />

5650 Pizza<br />

5669 SpArTa<br />

5679 Nautical<br />

5695 Assasin<br />

5696 Assasin<br />

5697 Assasin<br />

5742 WinCrash<br />

5802 Y3K RAT<br />

5873 SubSeven 2.2<br />

5880 Y3K RAT<br />

5882 Y3K RAT<br />

5882 (UDP) - Y3K RAT<br />

5888 Y3K RAT<br />

5888 (UDP) - Y3K RAT<br />

5889 Y3K RAT<br />

5933 NOSecure<br />

6000 Aladino, NetBus , The Thing<br />

6006 Bad Blood<br />

6267 DarkSky<br />

6400 The Thing<br />

6521 Glacier<br />

6556 AutoSpY<br />

6661 Weia-Meia<br />

6666 AL-Bareki, KiLo, SpArTa<br />

6666 (UDP) - KiLo<br />

6667<br />

Acropolis, BlackRat, Dark FTP, Dark IRC, DataSpy Network X, Gunsan,<br />

InCommand, Kaitex, KiLo, Laocoon, Net-Devil, Reverse Trojan, ScheduleAgent,<br />

SlackBot, SubSeven , Subseven 2.1.4 DefCon 8, Trinity, Y3K RAT, yoyo<br />

6667 Host Control, Vampire, Voyager Alpha Force<br />

6670 BackWeb Server, Deep Throat , Foreplay , WinNuke EXtreame<br />

6697 Force<br />

6711<br />

BackDoor-G, Duddie, KiLo, Little Witch, Netkey, Spa<strong>de</strong>ace, SubSARI, SubSeven<br />

, SweetHeart, UandMe, Way, VP Killer<br />

6712 Funny trojan, KiLo, Spa<strong>de</strong>ace, SubSeven<br />

6713 KiLo, SubSeven<br />

6714 KiLo<br />

6715 KiLo<br />

6718 KiLo<br />

6723 Mstream<br />

6766 KiLo<br />

6766 (UDP) - KiLo<br />

6767 KiLo, Pasana, UandMe<br />

6767 (UDP) - KiLo, UandMe<br />

6771 Deep Throat , Foreplay<br />

6776 2000 Cracks, BackDoor-G, SubSeven , VP Killer<br />

6838 (UDP) - Mstream<br />

6891 Force<br />

6912 Shit Heep<br />

6969<br />

2000 Cracks, BlitzNet, Dark IRC, GateCrasher, Kid Terror, Laphex, Net<br />

Controller, SpArTa, Vagr Nocker<br />

6970 GateCrasher<br />

7000 Aladino, Gunsan, Remote Grab, SubSeven , SubSeven 2.1 Gold, Theef<br />

7001 Freak88, Freak2k<br />

7007 Silent Spy<br />

7020 Basic Hell<br />

7030 Basic Hell<br />

7119 Massaker<br />

7215 SubSeven , SubSeven 2.1 Gold<br />

7274 AutoSpY<br />

7290 NOSecure<br />

7291 NOSecure<br />

7300 NetSpy<br />

7301 NetSpy<br />

7306 NetSpy<br />

7307 NetSpy, Remote Process Monitor<br />

7 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

7307 NetSpy, Remote Process Monitor<br />

7308 NetSpy, X Spy<br />

7312 Yajing<br />

7410 Phoenix II<br />

7424 Host Control<br />

7424 (UDP) - Host Control<br />

7597 Qaz<br />

7626 Glacier<br />

7648 XHX<br />

7673 Neoturk<br />

7676 Neoturk<br />

7677 Neoturk<br />

7718 Glacier<br />

7722 KiLo<br />

7777 God Message<br />

7788 Last 2000, Last 2000, Singularity<br />

7788 (UDP) - Singularity<br />

7789 Back Door Setup<br />

7800 Paltalk<br />

7826 Oblivion<br />

7850 Paltalk<br />

7879 Paltalk<br />

7979 Vagr Nocker<br />

7983 (UDP) - Mstream<br />

8011 Way<br />

8012 Ptakks<br />

8012 (UDP) - Ptakks<br />

8080 Reverse WWW Tunnel Backdoor , RingZero, Screen Cutter<br />

8090 Aphex's Remote Packet Sniffer<br />

8090 (UDP) - Aphex's Remote Packet Sniffer<br />

8097 Kryptonic Ghost Command Pro<br />

8100 Back streets<br />

8110 DLP<br />

8111 DLP<br />

8127 9_119, Chonker<br />

8127 (UDP) - 9_119, Chonker<br />

8130 9_119, Chonker, DLP<br />

8131 DLP<br />

8301 DLP<br />

8302 DLP<br />

8311 SweetHeart<br />

8322 DLP<br />

8329 DLP<br />

8488 (UDP) - KiLo<br />

8489 KiLo<br />

8489 (UDP) - KiLo<br />

8685 Unin68<br />

8732 Kryptonic Ghost Command Pro<br />

8734 AutoSpY<br />

8787 Back Orifice 2000<br />

8811 Fear<br />

8812 FraggleRock Lite<br />

8821 Alicia<br />

8848 Whirlpool<br />

8864 Whirlpool<br />

8888 Dark IRC<br />

9000 Netministrator<br />

9090 Massaker<br />

9148 Nautical<br />

9301 (UDP) - Mstream<br />

9329 DLP<br />

9400 InCommand<br />

9401 InCommand<br />

9536 Lula<br />

9561 Crat Pro<br />

8 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

9563 Crat Pro<br />

9870 Remote Computer Control Center<br />

9872 Portal Of Doom<br />

9873 Portal Of Doom<br />

9874 Portal Of Doom<br />

9875 Portal Of Doom<br />

9876 Rux<br />

9877 Small Big Brother<br />

9878 Small Big Brother, TransScout<br />

9879 Small Big Brother<br />

9919 Kryptonic Ghost Command Pro<br />

9999 BlitzNet, Spa<strong>de</strong>ace<br />

10000 TCP Door, XHX<br />

10000 (UDP) - XHX<br />

10001 DTr, Lula<br />

10002 Lula<br />

10003 Lula<br />

10008 Li0n<br />

10012 Amanda<br />

10013 Amanda<br />

10067 Portal Of Doom<br />

10067 (UDP) - Portal Of Doom<br />

10084 Syphillis<br />

10084 (UDP) - Syphillis<br />

10085 Syphillis<br />

10086 Syphillis<br />

10100 Control Total, GiFt trojan, Scalper<br />

10100 (UDP) - Slapper<br />

10167 Portal Of Doom<br />

10167 (UDP) - Portal Of Doom<br />

10498 (UDP) - Mstream<br />

10520 Acid Shivers<br />

10528 Host Control<br />

10607 Coma<br />

10666 (UDP) - Ambush<br />

10887 BDDT<br />

10889 BDDT<br />

11000 DataRape, Senna Spy Trojan Generator<br />

11011 Amanda<br />

11050 Host Control<br />

11051 Host Control<br />

11111 Breach<br />

11223 Progenic trojan, Secret Agent<br />

11225 Cyn<br />

11225 (UDP) - Cyn<br />

11660 Back streets<br />

11718 Kryptonic Ghost Command Pro<br />

11831 DarkFace, DataRape, Latinus, Pest, Vagr Nocker<br />

11977 Cool Remote Control<br />

11978 Cool Remote Control<br />

11980 Cool Remote Control<br />

12000 Reverse Trojan<br />

12310 PreCursor<br />

12321 Protoss<br />

12321 (UDP) - Protoss<br />

12345<br />

Ashley, BlueIce 2000, Mypic , NetBus , Pie Bill Gates, Q-taz , Sensive, Snape,<br />

Vagr Nocker, ValvNet , Whack Job<br />

12345 (UDP) - BlueIce 2000<br />

12346 NetBus<br />

12348 BioNet<br />

12349 BioNet, The Saint<br />

12361 Whack-a-mole<br />

12362 Whack-a-mole<br />

12363 Whack-a-mole<br />

12623 ButtMan<br />

12623 (UDP) - ButtMan, DUN Control<br />

9 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

12623 (UDP) - ButtMan, DUN Control<br />

12624 ButtMan, Power<br />

12631 Whack Job<br />

12684 Power<br />

12754 Mstream<br />

12904 Rocks<br />

13000 Senna Spy Trojan Generator, Senna Spy Trojan Generator<br />

13013 PsychWard<br />

13014 PsychWard<br />

13028 Back streets<br />

13079 Kryptonic Ghost Command Pro<br />

13370 SpArTa<br />

13371 Optix Pro<br />

13500 Theef<br />

13753 Anal FTP<br />

14194 CyberSpy<br />

14285 Laocoon<br />

14286 Laocoon<br />

14287 Laocoon<br />

14500 PC Inva<strong>de</strong>r<br />

14501 PC Inva<strong>de</strong>r<br />

14502 PC Inva<strong>de</strong>r<br />

14503 PC Inva<strong>de</strong>r<br />

15000 In Route to the Hell, R0xr4t<br />

15092 Host Control<br />

15104 Mstream<br />

15206 KiLo<br />

15207 KiLo<br />

15210 (UDP) - UDP remote shell Backdoor server<br />

15382 SubZero<br />

15432 Cyn<br />

15485 KiLo<br />

15486 KiLo<br />

15486 (UDP) - KiLo<br />

15500 In Route to the Hell<br />

15512 Iani<br />

15551 In Route to the Hell<br />

15695 Kryptonic Ghost Command Pro<br />

15845 (UDP) - KiLo<br />

15852 Kryptonic Ghost Command Pro<br />

16057 MoonPie<br />

16484 MoSucker<br />

16514 KiLo<br />

16514 (UDP) - KiLo<br />

16515 KiLo<br />

16515 (UDP) - KiLo<br />

16523 Back streets<br />

16660 Stacheldraht<br />

16712 KiLo<br />

16761 Kryptonic Ghost Command Pro<br />

16959 SubSeven , Subseven 2.1.4 DefCon 8<br />

17166 Kid Terror<br />

17499 CrazzyNet<br />

17500 CrazzyNet<br />

17569 Infector<br />

17593 AudioDoor<br />

17777 Nephron<br />

18753 (UDP) - Shaft<br />

19191 BlueFire<br />

19216 BackGate Kit<br />

20000 Millenium, PSYcho Fi<strong>les</strong>, XHX<br />

20001 Insect, Millenium, PSYcho Fi<strong>les</strong><br />

20002 AcidkoR, PSYcho Fi<strong>les</strong><br />

20005 MoSucker<br />

20023 VP Killer<br />

10 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

20034 NetBus 2.0 Pro, NetBus 2.0 Pro Hid<strong>de</strong>n, Whack Job<br />

20331 BLA trojan<br />

20432 Shaft<br />

20433 (UDP) - Shaft<br />

21212 Sensive<br />

21544 GirlFriend, Kid Terror<br />

21554 Exploiter, FreddyK, Kid Terror, Schwindler, Sensive, Winsp00fer<br />

21579 Breach<br />

21957 Latinus<br />

22115 Cyn<br />

22222 Donald Dick, G.R.O.B., Prosiak, Ruler, RUX The TIc.K<br />

22223 RUX The TIc.K<br />

22456 Clan<strong><strong>de</strong>s</strong>tine<br />

22554 Schwindler<br />

22783 Intruzzo<br />

22784 Intruzzo<br />

22785 Intruzzo<br />

23000 Storm worm<br />

23001 Storm worm<br />

23005 NetTrash, Oxon<br />

23006 NetTrash, Oxon<br />

23023 Logged<br />

23032 Amanda<br />

23321 Konik<br />

23432 Asylum<br />

23456 Clan<strong><strong>de</strong>s</strong>tine, Evil FTP, Vagr Nocker, Whack Job<br />

23476 Donald Dick<br />

23476 (UDP) - Donald Dick<br />

23477 Donald Dick<br />

23777 InetSpy<br />

24000 Infector<br />

24289 Latinus<br />

25002 MOTD<br />

25002 (UDP) - MOTD<br />

25123 Goy'Z TroJan<br />

25555 FreddyK<br />

25685 MoonPie<br />

25686 DarkFace, MoonPie<br />

25799 FreddyK<br />

25885 MOTD<br />

25982 DarkFace, MoonPie<br />

26274 (UDP) - Delta Source<br />

26681 Voice Spy<br />

27160 MoonPie<br />

27184 Alvgus trojan 2000<br />

27184 (UDP) - Alvgus trojan 2000<br />

27373 Charge<br />

27374<br />

Bad Blood, Fake SubSeven, Li0n, Ramen, Seeker, SubSeven , SubSeven 2.1<br />

Gold, Subseven 2.1.4 DefCon 8, SubSeven 2.2, SubSeven Muie, The Saint<br />

27379 Optix Lite<br />

27444 (UDP) - Trinoo<br />

27573 SubSeven<br />

27665 Trinoo<br />

28431 Hack-a-Tack<br />

28678 Exploiter<br />

29104 NETrojan, NetTrojan<br />

29292 BackGate Kit<br />

29559<br />

29589 KiLo<br />

AntiLamer BackDoor , DarkFace, DataRape, Ducktoy, Latinus, Pest, Vagr<br />

Nocker<br />

29589 (UDP) - KiLo<br />

29891 AntiLamer BackDoor<br />

30000 DataRape, Infector<br />

30001 Err0r32<br />

30005 Litmus<br />

30100 NetSphere<br />

11 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

30100 NetSphere<br />

30101 NetSphere<br />

30102 NetSphere<br />

30103 NetSphere<br />

30103 (UDP) - NetSphere<br />

30133 NetSphere<br />

30303 Sockets Des <strong>Troie</strong><br />

30331 MuSka52<br />

30464 Slapper<br />

30700 Mantis<br />

30947 Intruse<br />

31320 Little Witch<br />

31320 (UDP) - Little Witch<br />

31335 Trinoo<br />

31336 Butt Funnel<br />

31337<br />

ADM worm, Back Fire, Back Orifice (Lm), Back Orifice russian, BlitzNet, BO<br />

Client, BO Facil, BO2, Freak88, Freak2k, NoBackO<br />

31337 (UDP) - Back Orifice, Deep BO<br />

31338 Back Orifice, Butt Funnel, NetSpy (DK)<br />

31338 (UDP) - Deep BO, NetSpy (DK)<br />

31339 Little Witch, NetSpy (DK), NetSpy (DK)<br />

31339 (UDP) - Little Witch<br />

31340 Little Witch<br />

31340 (UDP) - Little Witch<br />

31382 Lithium<br />

31415 Lithium<br />

31416 Lithium<br />

31416 (UDP) - Lithium<br />

31557 Xanadu<br />

31745 BuschTrommel<br />

31785 Hack-a-Tack<br />

31787 Hack-a-Tack<br />

31788 Hack-a-Tack<br />

31789 Hack-a-Tack<br />

31789 (UDP) - Hack-a-Tack<br />

31790 Hack-a-Tack<br />

31791 Hack-a-Tack<br />

31791 (UDP) - Hack-a-Tack<br />

31792 Hack-a-Tack<br />

31887 BDDT<br />

32000 BDDT<br />

32001 Donald Dick<br />

32100 Peanut Brittle, Project NEXT<br />

32418 Acid Battery<br />

32791 Acropolis, Rocks<br />

33270 Trinity<br />

33333 Prosiak<br />

33545 G.R.O.B.<br />

33567 Li0n, T0rn Rootkit<br />

33568 Li0n, T0rn Rootkit<br />

33577 Son Of PsychWard<br />

33777 Son Of PsychWard<br />

33911 Spirit 2000, Spirit 2001<br />

34312 Delf<br />

34313 Delf<br />

34324 Big Gluck<br />

34343 Osiris<br />

34444 Donald Dick<br />

34555 (UDP) - Trinoo (for Windows)<br />

35000 Infector<br />

35555 (UDP) - Trinoo (for Windows)<br />

35600 SubSARI<br />

36794 Bugbear<br />

37237 Mantis<br />

37651 Charge<br />

38741 CyberSpy<br />

12 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

38741 CyberSpy<br />

38742 CyberSpy<br />

40071 Ducktoy<br />

40308 SubSARI<br />

40412 The Spy<br />

40421 Agent 40421, Masters Paradise<br />

40422 Masters Paradise<br />

40423 Masters Paradise<br />

40425 Masters Paradise<br />

40426 Masters Paradise<br />

41337 Storm<br />

41666 Remote BOot Tool<br />

43720 (UDP) - KiLo<br />

44014 Iani<br />

44014 (UDP) - Iani<br />

44444 Prosiak<br />

44575 Exploiter<br />

44767 School Bus<br />

44767 (UDP) - School Bus<br />

45092 BackGate Kit<br />

45454 Osiris<br />

45632 Little Witch<br />

45673 Acropolis, Rocks<br />

46666 Taskman<br />

46666 (UDP) - Taskman<br />

47017 T0rn Rootkit<br />

47262 (UDP) - Delta Source<br />

47698 KiLo<br />

47785 KiLo<br />

47785 (UDP) - KiLo<br />

47891 AntiLamer BackDoor<br />

48004 Fraggle Rock<br />

48006 Fraggle Rock<br />

48512 Arctic<br />

49000 Fraggle Rock<br />

49683 Fenster<br />

49683 (UDP) - Fenster<br />

49698 (UDP) - KiLo<br />

50000 SubSARI<br />

50021 Optix Pro<br />

50130 Enterprise<br />

50505 Sockets Des <strong>Troie</strong><br />

50551 R0xr4t<br />

50552 R0xr4t<br />

50766 Schwindler<br />

50829 KiLo<br />

50829 (UDP) - KiLo<br />

51234 Cyn<br />

51966 Cafeini<br />

52365 Way<br />

52901 (UDP) - Omega<br />

53001 Remote Windows Shutdown - RWS<br />

54283 SubSeven , SubSeven 2.1 Gold<br />

54320 Back Orifice 2000<br />

54321 File Manager trojan, File Manager trojan<br />

55555 Shadow Phyre<br />

55665 Latinus, Pinochet<br />

55666 Osiris<br />

57163 BlackRat<br />

57341 NetRai<strong>de</strong>r<br />

57785 G.R.O.B.<br />

58134 Charge<br />

58339 Butt Funnel<br />

59211 Ducktoy<br />

60000 Deep Throat , Foreplay , Sockets Des <strong>Troie</strong><br />

60001 Trinity<br />

13 sur 14 20/02/2012 11:45


<strong>Liste</strong> <strong><strong>de</strong>s</strong> <strong>principaux</strong> <strong>ports</strong> <strong>utilisés</strong> <strong>par</strong> <strong>les</strong> <strong>chevaux</strong> <strong>de</strong> <strong>Troie</strong> <strong>http</strong>://www.securiteinfo.com/conseils/<strong>ports</strong>troyens.shtml<br />

60001 Trinity<br />

60008 Li0n, T0rn Rootkit<br />

60068 The Thing<br />

60411 Connection<br />

60551 R0xr4t<br />

60552 R0xr4t<br />

60666 Basic Hell<br />

61115 Protoss<br />

61337 Bunker-Hill<br />

61440 Orion<br />

61603 Bunker-Hill<br />

61746 KiLo<br />

61746 (UDP) - KiLo<br />

61747 KiLo<br />

61747 (UDP) - KiLo<br />

61748 (UDP) - KiLo<br />

61979 Cool Remote Control<br />

62011 Ducktoy<br />

63485 Bunker-Hill<br />

64101 Taskman<br />

65000 Devil, Sockets Des <strong>Troie</strong>, Stacheldraht<br />

65289 yoyo<br />

65421 Alicia<br />

65422 Alicia<br />

65432 The Traitor (= th3tr41t0r)<br />

65432 (UDP) - The Traitor (= th3tr41t0r)<br />

65530 Windows Mite<br />

65535 RC1 trojan<br />

14 sur 14 20/02/2012 11:45

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!