Библиографический список

 

1. Д. Макнамара Секреты компьютерного шпионажа: Тактика и контрмеры. Пер. с англ; под ред.С.М. Молявко. - М.: БИНОМ. Лаборатория знаний, 2004. - 536 с

2. Мак-Клар, Стюарт, Скембрей, Джоел, Курц, Джордж. Секреты хакеров. Безопасность сетей - готовые решения, 3-е издание.: Пер. с англ. - М.: Издательский дом "Вильяме", 2002.

3. М. Руссинович, Д. Соломон Внутреннее устройство Windows: Windows Server 2003, Windows XP и Windows 2000:...4-е изд. Пер. с англ. - М.: Издательско-торговый дом "Русская Редакция", 2005г.992

4. Харви М. Дейтел, Дейтел П. Дж., Чофнес Д.Р. Операционные системы. Распределенные системы, сети, безопасность -М.: Бином. Лаборатория знаний, 2006

5. Вебер К., Бадур Г. Безопасность в Windows XP. Готовые решения сложных задач защиты компьютеров. - М.: Diasoft, 2003, 464 с.

6. Хатч, Брайан, Ли, Джеймс, Курц, Джордж Секреты хакеров. Безопасность Linux - готовые решения, 2-е издание, - М.: Издательский дом "Вильямс", 2004, 704 с

7. Скудис Э. Противостояние хакерам: Пошаговое руководство по компьютерным атакам и эффективной защите: Пер. с англ., - М.: ДМК-Пресс, 2003, 512 с

8. http://www.bezpeka.com/ru/news/2005/07/22/4850.html

9. http://www.safensoft.ru/safensec/personal/

10. http://www.xndits.ru/index. php? module=articles&c=articles&b=1&a=32

11. http://www.kuban.ru/help/troyan. htm

12. www.cnews.ru

13. www.viruslist.comruvirusesencyclopediavirusid=34631

14. ru. wikipedia.org

15. http://www.tehnostar.com/newshard/16085.html

16. http://www.hackzona.ru/hz. php? name=News&file=article&sid=3262

17. http://www.compress.ru/Archive/CP/2006/3/81/

Приложение 1

 

Список портов, используемых троянскими программами:

port 21 - Back Construction, Blade Runner, Doly Trojan, Fore, FTP trojan, Invisible FTP, Larva, MBT, Motiv, Net Administrator, Senna Spy FTP Server, WebEx, WinCrash

port 23 - Tiny Telnet Server, Truva Atl

port 25 - Aji, Antigen, Email Password Sender, Gip, Happy 99, I Love You, Kuang 2, Magic Horse, Moscow Email Trojan, Naebi, NewApt, ProMail trojan, Shtrilitz, Stealth, Tapiras, Terminator, WinPC, WinSpy

port 31 - Agent 31, Hackers Paradise, Masters Paradise port 41 - DeepThroat

port 48 - DRAT port 50 - DRAT

port 59 - DMSetup port 79 - Firehotcker

port 80 - Back End, Executor, Hooker, RingZero port 99 - Hidden Port

port 110 - ProMail trojan port 113 - Invisible Identd Deamon, Kazimas

port 119 - Happy 99 port 121 - JammerKillah

port 123 - Net Controller port 133 - Farnaz, port 146 - Infector

port 146 (UDP) - Infector port 170 - A-trojan

port 421 - TCP Wrappers port 456 - Hackers Paradise

port 531 - Rasmin

port 555 - Ini-Killer, NeTAdministrator, Phase Zero, Stealth Spy

port 606 - Secret Service

port 666 - Attack FTP, Back Construction, NokNok, Cain & Abel, Satanz Backdoor, ServeU, Shadow Phyre

port 667 - SniperNet port 669 - DP Trojan

port 692 - GayOL port 777 - Aim Spy

port 808 - WinHole port 911 - Dark Shadow

port 999 - DeepThroat, WinSatan port 1000 - Der Spacher 3

port 1001 - Der Spacher 3, Le Guardien, Silencer, WebEx

port 1010 - Doly Trojan port 1011 - Doly Trojan port 1255 - Scarab

port 1256 - Project nEXT port 1269 - Mavericks Matrix

port 1313 - NETrojan port 1338 - Millenium Worm

port 1349 (UDP) - BO DLL port 1492 - FTP99CMP

port 1509 - Psyber Streaming Server port 1524 - Trinoo

port 1600 - Shivka-Burka port 1777 - Scarab

port 1807 - SpySender port 1966 - Fake FTP

port 1969 - OpC BO port 1981 - Shockrave

port 1999 - BackDoor, TransScout port 1012 - Doly Trojan

port 1015 - Doly Trojan port 1016 - Doly Trojan

port 1020 - Vampire port 1024 - NetSpy

port 1042 - Bla port 1045 - Rasmin

port 1050 - MiniCommand port 1080 - WinHole

port 1081 - WinHole port 1082 - WinHole

port 1083 - WinHole port 1090 - Xtreme

port 1095 - RAT port 1097 - RAT

port 1098 - RAT port 1099 - BFevolution, RAT

port 1170 - Psyber Stream Server, Streaming Audio trojan, Voice

port 1200 (UDP) - NoBackO port 1201 (UDP) - NoBackO

port 1207 - SoftWAR port 1212 - Kaos

port 1225 - Scarab port 1234 - Ultors Trojan

port 1243 - BackDoor-G, SubSeven, SubSeven Apocalypse, Tiles

port 1245 - VooDoo Doll

port 2000 - Der Spaeher 3, Insane Network, TransScout

port 2001 - Der Spaeher 3, TransScout, Trojan Cow

port 2002 - TransScout port 2003 - TransScout

port 2004 - TransScout port 2005 - TransScout

port 2023 - Ripper port 2080 - WinHole

port 2115 - Bugs port 2140 - Deep Throat, The Invasor

port 2155 - Illusion Mailer port 2283 - HVL Rat5

port 2300 - Xplorer port 2565 - Striker

port 2583 - WinCrash port 2600 - Digital RootBeer

port 2716 - The Prayer port 2773 - SubSeven

port 2801 - Phineas Phucker port 3000 - Remote Shutdown

port 3024 - WinCrash port 3128 - RingZero

port 3129 - Masters Paradise port 3150 - Deep Throat, The Invasor

port 3456 - Teror Trojan port 3459 - Eclipse 2000, Sanctuary

port 3700 - Portal of Doom port 3791 - Eclypse

port 3801 (UDP) - Eclypse port 4000 - Skydance

port 4092 - WinCrash port 4242 - Virtual hacking Machine

port 4321 - BoBo port 4444 - Prosiak, Swift remote

port 4567 - File Nail port 4590 - ICQTrojan

port 5000 - Bubbel, Back Door Setup, Sockets de Troie port 5001 - Back Door Setup, Sockets de Troie

port 5010 - Solo port 5011 - One of the Last Trojans (OOTLT)

port 5031 - NetMetropolitan port 5031 - NetMetropolitan

port 5321 - Firehotcker port 5343 - wCrat

port 5400 - Blade Runner, Back Construction port 5401 - Blade Runner, Back Construction

port 5402 - Blade Runner, Back Construction port 5550 - Xtcp

port 5512 - Illusion Mailer port 5555 - ServeMe

port 5556 - BO Facil port 5557 - BO Facil

port 5569 - Robo-Hack port 5637 - PC Crasher

port 5638 - PC Crasher port 5742 - WinCrash

port 5882 (UDP) - Y3K RAT port 5888 - Y3K RAT

port 6000 - The Thing port 6006 - The Thing

port 6272 - Secret Service port 6400 - The Thing

port 6667 - Schedule Agent port 6669 - Host Control, Vampyre

port 6670 - DeepThroat, BackWeb Server, WinNuke eXtreame

port 6711 - SubSeven port 6712 - Funny Trojan, SubSeven

port 6713 - SubSeven port 6723 - Mstream

port 6771 - DeepThroat port 6776 - 2000 Cracks, BackDoor-G, SubSeven

port 6838 (UDP) - Mstream port 6912 - Shit Heep (not port 69123!)

port 6939 - Indoctrination

port 6969 - GateCrasher, Priority, IRC 3, NetController port 6970 - GateCrasher

port 7000 - Remote Grab, Kazimas, SubSeven port 7001 - Freak88

port 7215 - SubSeven port 7300 - NetMonitor

port 7301 - NetMonitor port 7306 - NetMonitor

port 7307 - NetMonitor port 7308 - NetMonitor

port 7424 - Host Control port 7424 (UDP) - Host Control

port 7789 - Back Door Setup, ICKiller port 7983 - Mstream

port 8080 - RingZero port 8787 - Back Orifice 2000

port 8897 - HackOffice port 8988 - BacHack

port 8989 - Rcon port 9000 - Netministrator

port 9325 (UDP) - Mstream port 9400 - InCommand

port 9872 - Portal of Doom port 9873 - Portal of Doom

port 9874 - Portal of Doom port 9875 - Portal of Doom

port 9876 - Cyber Attacker, RUX port 9878 - TransScout

port 9989 - iNi-Killer port 9999 - The Prayer

port 10067 (UDP) - Portal of Doom port 10085 - Syphillis

port 10086 - Syphillis port 10101 - BrainSpy

port 10167 (UDP) - Portal of Doom port 10528 - Host Control

port 10520 - Acid Shivers port 10607 - Coma

port 10666 (UDP) - Ambush port 11000 - Senna Spy

port 11050 - Host Control port 11051 - Host Control

port 11223 - Progenic trojan, Secret Agent port 12076 - Gjamer

port 12223 - Hack+99 KeyLogger

port 12345 - GabanBus, My Pics, NetBus, Pie Bill Gates, Whack Job, X-bill

port 12346 - GabanBus, NetBus, X-bill port 12349 - BioNet

port 12361 - Whack-a-mole port 12362 - Whack-a-mole

port 12623 (UDP) - DUN Control port 12624 - Buttman

port 12631 - WhackJob port 12754 - Mstream

port 13000 - Senna Spy port 13010 - Hacker Brazil

port 15092 - Host Control port 15104 - Mstream

port 16660 - Stacheldracht port 16484 - Mosucker

port 16772 - ICQ Revenge port 16969 - Priority

port 17166 - Mosaic port 17300 - Kuang2 The Virus

port 17777 - Nephron port 18753 (UDP) - Shaft

port 19864 - ICQ Revenge port 20001 - Millennium

port 20002 - AcidkoR port 20034 - NetBus 2 Pro, NetRex, Whack Job

port 20203 - Chupacabra port 20331 - Bla

port 20432 - Shaft port 20432 (UDP) - Shaft

port 21544 - GirlFriend, Kidterror, Schwindler, WinSp00fer port 22222 - Prosiak

port 23023 - Logged port 23432 - Asylum

port 23456 - Evil FTP, Ugly FTP, Whack Job port 23476 - Donald Dick

port 23476 (UDP) - Donald Dick port 23477 - Donald Dick

port 26274 (UDP) - Delta Source port 26681 - Spy Voice

port 27374 - SubSeven port 27444 (UDP) - Trinoo

port 27573 - SubSeven port 27665 - Trinoo

port 29104 - Host Control port 29891 (UDP) - The Unexplained

port 30001 - TerrOr32 port 30029 - AOL Trojan

port 30100 - NetSphere port 30101 - NetSphere

port 30102 - NetSphere port 30103 - NetSphere

port 30103 (UDP) - NetSphere port 30133 - NetSphere

port 30303 - Sockets de Troie port 30947 - Intruse

port 30999 - Kuang2 port 31335 (UDP) - Trinoo

port 31336 - Bo Whack, ButtFunnel port 31337 - Baron Night, BO client, BO2, Bo Facil

port 31337 (UDP) - BackFire, Back Orifice, DeepBO, Freak>

port 31338 - NetSpy DK, ButtFunnel port 31338 (UDP) - Back Orifice, DeepBO

port 31339 - NetSpy DK port 31666 - BOWhack

port 31785 - Hack+a+Tack port 31787 - Hack+a+Tack

port 31788 - Hack+a+Tack port 31789 (UDP) - Hack+a+Tack

port 31791 (UDP) - Hack+a+Tack port 31792 - Hack+a+Tack

port 32100 - Peanut Brittle, Project nEXT port 32418 - Acid Battery

port 33333 - Blakharaz, Prosiak port 33577 - PsychWard

port 33777 - PsychWard port 33911 - Spirit 2001a

port 34324 - BigGluck, TN port 34555 (UDP) - Trinoo (Windows)

port 35555 (UDP) - Trinoo (Windows) port 37651 - YAT

port 40412 - The Spy port 40421 - Agent 40421, Masters Paradise

port 40422 - Masters Paradise port 40423 - Masters Paradise

port 40426 - Masters Paradise port 41666 - Remote Boot

port 41666 (UDP) - Remote Boot port 44444 - Prosiak

port 47262 (UDP) - Delta Source port 50505 - Sockets de Troie

port 50766 - Fore, Schwindler port 51996 - Cafeini

port 52317 - Acid Battery 2000 port 53001 - Remote Windows Shutdown

port 54283 - SubSeven port 54320 - Back Orifice 2000

port 54321 - School Bus port 54321 (UDP) - Back Orifice 2000

port 57341 - NetRaider port 58339 - ButtFunnel

port 60000 - Deep Throat port 60068 - Xzip 6000068

port 60411 - Connection port 61348 - Bunker-Hill

port 61466 - Telecommando port 61603 - Bunker-Hill

port 63485 - Bunker-Hill port 65000 - Devil, Stacheldracht

port 65432 - The Traitor port 65432 (UDP) - The Traitor

port 65535 - RC

 

ПРИЛОЖЕНИЕ 2