//"Windows優化大師"本地端口分析文件---更新時間: 2007年8月6日
//"Windows優化大師"用戶可手動編輯此文件, 格式為: 協議 端口號=病毒或程序名稱
//注: 由于一些應用軟件占用了部分端口, 因此此文件中的部分端口被注釋掉了(注釋字符為: //)
TCP    1=TCP Port Service Multiplexer
TCP    2=Death
TCP    5=Remote Job Entry,yoyo
TCP    7=Echo
TCP    11=Skun
TCP    12=Bomber
TCP    16=Skun
TCP    17=Skun
TCP    18=消息傳輸協議,skun
TCP    19=Skun
TCP    20=FTP Data,Amanda
TCP    21=文件傳輸,Back Construction,Blade Runner,Doly Trojan,Fore,FTP trojan,Invisible FTP,Larva, WebEx,WinCrash
TCP    22=遠程登錄協議
TCP    23=遠程登錄(Telnet),Tiny Telnet Server (= TTS)
TCP    25=電子郵件(SMTP),Ajan,Antigen,Email Password Sender,Happy 99,Kuang2,ProMail trojan,Shtrilitz,Stealth,Tapiras,Terminator,WinPC,WinSpy,Haebu Coceda
TCP    27=Assasin
TCP    28=Amanda
TCP    29=MSG ICP
TCP    30=Agent 40421
TCP    31=Agent 31,Hackers Paradise,Masters Paradise,Agent 40421
TCP    37=Time,ADM worm
TCP    39=SubSARI
TCP    41=DeepThroat,Foreplay
TCP    42=Host Name Server
TCP    43=WHOIS
TCP    44=Arctic
TCP    48=DRAT
TCP    49=主機登錄協議
TCP    50=DRAT
TCP    51=IMP Logical Address Maintenance,Fuck Lamers Backdoor
TCP    52=MuSka52,Skun
TCP    53=DNS,Bonk (DOS Exploit)
TCP    54=MuSka52
TCP    58=DMSetup
TCP    59=DMSetup
TCP    63=whois++
TCP    64=Communications Integrator
TCP    65=TACACS-Database Service
TCP    66=Oracle SQL*NET,AL-Bareki
TCP    67=Bootstrap Protocol Server
TCP    68=Bootstrap Protocol Client
TCP    69=W32.Evala.Worm,BackGate Kit,Nimda,Pasana,Storm,Storm worm,Theef,Worm.Cycle.a
TCP    70=Gopher服務,ADM worm
TCP    79=用戶查詢(Finger),Firehotcker,ADM worm
TCP    80=超文本服務器(Http),Executor,RingZero
TCP    81=Chubo,Worm.Bbeagle.q
TCP    82=Netsky-Z
TCP    88=Kerberos krb5服務
TCP    99=Hidden Port
TCP   102=消息傳輸代理
TCP   108=SNA網關訪問服務器
TCP   109=Pop2
TCP   110=電子郵件(Pop3),ProMail
TCP   113=Kazimas, Auther Idnet
TCP   115=簡單文件傳輸協議
TCP   118=SQL Services, Infector 1.4.2
TCP   119=新聞組傳輸協議(Newsgroup(Nntp)), Happy 99
TCP   121=JammerKiller, Bo jammerkillah
TCP   123=網絡時間協議(NTP),Net Controller
TCP   129=Password Generator Protocol
TCP   133=Infector 1.x
TCP   135=微軟DCE RPC end-point mapper服務
TCP   137=微軟Netbios Name服務(網上鄰居傳輸文件使用)
TCP   138=微軟Netbios Name服務(網上鄰居傳輸文件使用)
TCP   139=微軟Netbios Name服務(用于文件及打印機共享)
TCP   142=NetTaxi
TCP   143=IMAP
TCP   146=FC Infector,Infector
TCP   150=NetBIOS Session Service
TCP   156=SQL服務器
TCP   161=Snmp
TCP   162=Snmp-Trap
TCP   170=A-Trojan
TCP   177=X Display管理控制協議
TCP   179=Border網關協議(BGP)
TCP   190=網關訪問控制協議(GACP)
TCP   194=Irc
TCP   197=目錄定位服務(DLS)
TCP   256=Nirvana
TCP   315=The Invasor
TCP   371=ClearCase版本管理軟件
TCP   389=Lightweight Directory Access Protocol (LDAP)
TCP   396=Novell Netware over IP
TCP   420=Breach
TCP   421=TCP Wrappers
TCP   443=安全服務
TCP   444=Simple Network Paging Protocol(SNPP)
TCP   445=Microsoft-DS
TCP   455=Fatal Connections
TCP   456=Hackers paradise,FuseSpark
TCP   458=蘋果公司QuickTime
TCP   513=Grlogin
TCP   514=RPC Backdoor
TCP   520=Rip
TCP   531=Rasmin,Net666
TCP   544=kerberos kshell
TCP   546=DHCP Client
TCP   547=DHCP Server
TCP   548=Macintosh文件服務
TCP   555=Ini-Killer,Phase Zero,Stealth Spy
TCP   569=MSN
TCP   605=SecretService
TCP   606=Noknok8
TCP   660=DeepThroat
TCP   661=Noknok8
TCP   666=Attack FTP,Satanz Backdoor,Back Construction,Dark Connection Inside 1.2
TCP   667=Noknok7.2
TCP   668=Noknok6
TCP   669=DP trojan
TCP   692=GayOL
TCP   707=Welchia,nachi
TCP   777=AIM Spy
TCP   808=RemoteControl,WinHole
TCP   815=Everyone Darling
TCP   901=Backdoor.Devil
TCP   911=Dark Shadow
TCP   993=IMAP
TCP   999=DeepThroat
TCP  1000=Der Spaeher
TCP  1001=Silencer,WebEx,Der Spaeher
TCP  1003=BackDoor
TCP  1010=Doly
TCP  1011=Doly
TCP  1012=Doly
TCP  1015=Doly
TCP  1016=Doly
TCP  1020=Vampire
TCP  1023=Worm.Sasser.e
TCP  1024=NetSpy.698(YAI)
TCP  1059=nimreg
//TCP  1025=NetSpy.698,Unused Windows Services Block
//TCP  1026=Unused Windows Services Block
//TCP  1027=Unused Windows Services Block
TCP  1028=應用層網關服務
//TCP  1029=Unused Windows Services Block
//TCP  1030=Unused Windows Services Block
//TCP  1033=Netspy
//TCP  1035=Multidropper
//TCP  1042=Bla
//TCP  1045=Rasmin
//TCP  1047=GateCrasher
//TCP  1050=MiniCommand
TCP  1058=nim
TCP  1069=Backdoor.TheefServer.202
TCP  1070=Voice,Psyber Stream Server,Streaming Audio Trojan
TCP  1079=ASPROVATalk
TCP  1080=Wingate,Worm.BugBear.B,Worm.Novarg.B
//TCP  1090=Xtreme, VDOLive
//TCP  1092=LoveGate
//TCP  1095=Rat
//TCP  1097=Rat
//TCP  1098=Rat
//TCP  1099=Rat
TCP  1109=Pop with Kerberos
TCP  1110=nfsd-keepalive
TCP  1111=Backdoor.AIMVision
TCP  1155=Network File Access
//TCP  1170=Psyber Stream Server,Streaming Audio trojan,Voice
//TCP  1200=NoBackO
//TCP  1201=NoBackO
//TCP  1207=Softwar
//TCP  1212=Nirvana,Visul Killer
//TCP  1234=Ultors
//TCP  1243=BackDoor-G, SubSeven, SubSeven Apocalypse
//TCP  1245=VooDoo Doll
//TCP  1269=Mavericks Matrix
TCP  1270=Microsoft Operations Manager
//TCP  1313=Nirvana
//TCP  1349=BioNet
TCP  1352=Lotus Notes
TCP  1433=Microsoft SQL Server
TCP  1434=Microsoft SQL Monitor
//TCP  1441=Remote Storm
//TCP  1492=FTP99CMP(BackOriffice.FTP)
TCP  1503=NetMeeting T.120
TCP  1512=Microsoft Windows Internet Name Service
//TCP  1509=Psyber Streaming Server
TCP  1570=Orbix Daemon
//TCP  1600=Shivka-Burka
//TCP  1703=Exloiter 1.1
TCP  1720=NetMeeting H.233 call Setup
TCP  1731=NetMeeting音頻調用控制
TCP  1745=ISA Server proxy autoconfig, Remote Winsock
TCP  1801=Microsoft Message Queue
//TCP  1807=SpySender
TCP  1906=Backdoor/Verify.b
TCP  1907=Backdoor/Verify.b
//TCP  1966=Fake FTP 2000
//TCP  1976=Custom port
//TCP  1981=Shockrave
TCP  1990=stun-p1 cisco STUN Priority 1 port
TCP  1990=stun-p1 cisco STUN Priority 1 port
TCP  1991=stun-p2 cisco STUN Priority 2 port
TCP  1992=stun-p3 cisco STUN Priority 3 port,ipsendmsg IPsendmsg
TCP  1993=snmp-tcp-port cisco SNMP TCP port
TCP  1994=stun-port cisco serial tunnel port
TCP  1995=perf-port cisco perf port
TCP  1996=tr-rsrb-port cisco Remote SRB port
TCP  1997=gdp-port cisco Gateway Discovery Protocol
TCP  1998=x25-svc-port cisco X.25 service (XOT)
//TCP  1999=BackDoor, TransScout
//TCP  2000=Der Spaeher,INsane Network
TCP  2002=W32.Beagle.AX @mm
//TCP  2001=Transmisson scout
//TCP  2002=Transmisson scout
//TCP  2003=Transmisson scout
//TCP  2004=Transmisson scout
//TCP  2005=TTransmisson scout
TCP  2011=cypress
TCP  2015=raid-cs
//TCP  2023=Ripper,Pass Ripper,Hack City Ripper Pro
TCP  2049=NFS
//TCP  2115=Bugs
//TCP  2121=Nirvana
//TCP  2140=Deep Throat, The Invasor
//TCP  2155=Nirvana
//TCP  2208=RuX
TCP  2234=DirectPlay
//TCP  2255=Illusion Mailer
//TCP  2283=HVL Rat5
//TCP  2300=PC Explorer
//TCP  2311=Studio54
TCP  2556=Worm.Bbeagle.q
//TCP  2565=Striker
//TCP  2583=WinCrash
//TCP  2600=Digital RootBeer
//TCP  2716=Prayer Trojan
TCP  2745=Worm.BBeagle.k
//TCP  2773=Backdoor,SubSeven
//TCP  2774=SubSeven2.1&2.2
//TCP  2801=Phineas Phucker
TCP  2967=SSC Agent
//TCP  2989=Rat
//TCP  3024=WinCrash trojan
TCP  3074=Microsoft Xbox game port
TCP  3127=Worm.Novarg
TCP  3128=RingZero,Worm.Novarg.B
//TCP  3129=Masters Paradise
TCP  3132=Microsoft Business Rule Engine Update Service
//TCP  3150=Deep Throat, The Invasor
TCP  3198=Worm.Novarg
//TCP  3210=SchoolBus
TCP  3268=Microsoft Global Catalog
TCP  3269=Microsoft Global Catalog with LDAP/SSL
TCP  3332=Worm.Cycle.a
TCP  3333=Prosiak
TCP  3535=Microsoft Class Server
TCP  3389=超級終端
//TCP  3456=Terror
//TCP  3459=Eclipse 2000
//TCP  3700=Portal of Doom
//TCP  3791=Eclypse
//TCP  3801=Eclypse
TCP  3847=Microsoft Firewall Control
TCP  3996=Portal of Doom,RemoteAnything
TCP  4000=騰訊QQ客戶端
TCP  4060=Portal of Doom,RemoteAnything
TCP  4092=WinCrash
TCP  4242=VHM
TCP  4267=SubSeven2.1&2.2
TCP  4321=BoBo
TCP  4350=Net Device
TCP  4444=Prosiak,Swift remote
TCP  4500=Microsoft IPsec NAT-T, W32.HLLW.Tufas
TCP  4567=File Nail
TCP  4661=Backdoor/Surila.f
TCP  4590=ICQTrojan
TCP  4899=Remote Administrator服務器
TCP  4950=ICQTrojan
TCP  5000=WindowsXP服務器,Blazer 5,Bubbel,Back Door Setup,Sockets de Troie
TCP  5001=Back Door Setup, Sockets de Troie
TCP  5002=cd00r,Shaft
TCP  5011=One of the Last Trojans (OOTLT)
TCP  5025=WM Remote KeyLogger
TCP  5031=Firehotcker,Metropolitan,NetMetro
TCP  5032=Metropolitan
TCP  5190=ICQ Query
TCP  5321=Firehotcker
TCP  5333=Backage Trojan Box 3
TCP  5343=WCrat
TCP  5400=Blade Runner, BackConstruction1.2
TCP  5401=Blade Runner,Back Construction
TCP  5402=Blade Runner,Back Construction
TCP  5471=WinCrash
TCP  5512=Illusion Mailer
TCP  5521=Illusion Mailer
TCP  5550=Xtcp,INsane Network
TCP  5554=Worm.Sasser
TCP  5555=ServeMe
TCP  5556=BO Facil
TCP  5557=BO Facil
TCP  5569=Robo-Hack
TCP  5598=BackDoor 2.03
TCP  5631=PCAnyWhere data
TCP  5632=PCAnyWhere
TCP  5637=PC Crasher
TCP  5638=PC Crasher
TCP  5678=Remote Replication Agent Connection
TCP  5679=Direct Cable Connect Manager
TCP  5698=BackDoor
TCP  5714=Wincrash3
TCP  5720=Microsoft Licensing
TCP  5741=WinCrash3
TCP  5742=WinCrash
TCP  5760=Portmap Remote Root Linux Exploit
TCP  5880=Y3K RAT
TCP  5881=Y3K RAT
TCP  5882=Y3K RAT
TCP  5888=Y3K RAT
TCP  5889=Y3K RAT
TCP  5900=WinVnc
TCP  6000=Backdoor.AB
TCP  6006=Noknok8
TCP  6073=DirectPlay8
TCP  6129=Dameware Nt Utilities服務器
TCP  6272=SecretService
TCP  6267=廣外女生
TCP  6400=Backdoor.AB,The Thing
TCP  6500=Devil 1.03
TCP  6661=Teman
TCP  6666=TCPshell.c
TCP  6667=NT Remote Control,Wise 播放器接收端口
TCP  6668=Wise Video廣播端口
TCP  6669=Vampyre
TCP  6670=DeepThroat,iPhone
TCP  6671=Deep Throat 3.0
TCP  6711=SubSeven
TCP  6712=SubSeven1.x
TCP  6713=SubSeven
TCP  6723=Mstream
TCP  6767=NT Remote Control
TCP  6771=DeepThroat
TCP  6776=BackDoor-G,SubSeven,2000 Cracks
TCP  6777=Worm.BBeagle
TCP  6789=Doly Trojan
TCP  6838=Mstream
TCP  6883=DeltaSource
TCP  6912=Shit Heep
TCP  6939=Indoctrination
TCP  6969=GateCrasher, Priority, IRC 3
TCP  6970=RealAudio,GateCrasher
TCP  7000=Remote Grab,NetMonitor,SubSeven1.x
TCP  7001=Freak88
TCP  7201=NetMonitor
TCP  7215=BackDoor-G, SubSeven
TCP  7001=Freak88,Freak2k
TCP  7300=NetMonitor
TCP  7301=NetMonitor
TCP  7306=NetMonitor,NetSpy 1.0