如果是win9x/me就在windows目录下的services文件
如果是NT/2000,在WINNT\system32\drivers\etc\目录下的services文件
services这个文件列出了所有的端口号和对应的服务。如果要禁用某个服务,在前面加上#号注释掉就以了。
常见木马端口列表
15=NETSTATPORT
21=BladeRunner,DolyTrojan,Fore,FTPtrojan,InvisibleFTP,Larva,ebEx,WinCrash
22=SSHPORT
23=TinyTelnetServer
25=ShtrilitzStealth,Terminator,WinPC,WinSpy,Kuang20.17A-0.30,Antigen,EmailPasswordSender,HaebuCoceda,Kuang2,ProMailtrojan,Tapiras
31=Agent31,HackersParadise,MastersParadise
41=DeepThroat
53=DOMAINPORT
58=DMSetup
63=WHOISPORT
79=Firehotcker
80=Executor110=ProMailtrojan
90=DNSPORT
101=HOSTNAMEPORT
110=POP3PORT
121=JammerKillah
137=NETBIOSNameServicePORT
138=NETBIOSDatagramServicePORT
139=NETBIOSSessionServicePORT
194=IRCPORT
406=IMSPPORT
421=TCPWrappers
456=HackersParadise
531=Rasmin
555=Ini-Killer,PhaseZero,StealthSpy
666=AttackFTP,SatanzBackdoor
911=DarkShadow
999=DeepThroat
1001=Silencer,WebEx
1011=DolyTrojan
1012=DolyTrojan
1024=NetSpy
1045=Rasmin
1090=Xtreme
1095=Rat
1097=Rat
1098=Rat
1099=Rat
1170=PsyberStreamServer
1170=Voice
1234=UltorsTrojan
1243=BackDoor-G,SubSeven
1245=VooDooDoll
1349=BODLL
1492=FTP99CMP
1600=Shivka-Burka
1807=SpySender
1080=SOCKSPORT
1981=Shockrave
1999=BackDoor1.00-1.03
2001=TrojanCow
2023=Ripper
2115=Bugs
2140=DeepThroat
2140=TheInvasor
2565=Striker
2583=WinCrash
2801=PhineasPhucker
3024=WinCrash
3129=MastersParadise
3150=DeepThroat,TheInvasor
3700=PortalofDoom
4092=WinCrash
4567=FileNail
4590=ICQTrojan
5000=Bubbel,BackDoorSetup,SocketsdeTroie
5001=BackDoorSetup,SocketsdeTroie
5321=Firehotcker
5400=BladeRunner
5401=BladeRunner
5402=BladeRunner
5550=JAPANTrojan-xtcp
5555=ServeMe
5556=BOFacil
5557=BOFacil
5569=Robo-Hack
5742=WinCrash
6400=TheThing
6666=IRCSERVERPORT
6667=IRCCHATPORT
6670=DeepThroat
6711=SubSeven
6771=DeepThroat
6776=BackDoor-G,SubSeven
6939=Indoctrination
6969=GateCrasher
6969=Priority
7000=RemoteGrab
7300=NetMonitor
7301=NetMonitor
7306=NetMonitor
7307=NetMonitor
7308=NetMonitor
7626=G_Client
7789=BackDoorSetup,ICKiller
9872=PortalofDoom
9873=PortalofDoom
9874=PortalofDoom
9875=PortalofDoom
9989=iNi-Killer
10067=PortalofDoom
10167=PortalofDoom
10520=AcidShivers
10607=Coma
11000=SennaSpy
11223=Progenictrojan
12223=Hack?9KeyLogger
12345=GabanBus,NetBus,PieBillGates,X-bill
12346=GabanBus,NetBus,X-bill
12361=Whack-a-mole
12362=Whack-a-mole
12631=WhackJob
13000=SennaSpy
16969=Priority
20001=Millennium
20034=NetBus2Pro
21544=GirlFriend
22222=Prosiak
23456=EvilFTP,UglyFTP
26274=DeltaSource
29891=TheUnexplained
30029=AOLTrojan30100=NetSphere1.27a,NetSphere1.31
30101=NetSphere1.31,NetSphere1.27a
30102=NetSphere1.27a,NetSphere1.31
30103=NetSphere1.31
30303=SocketsdeTroie
31337=BaronNight,BOclient,BO2,BoFacil,BackFire,BackOrifice,DeepBO
31338=NetSpyDK31338=BackOrifice,DeepBO
31339=NetSpyDK
31666=BOWhack
31785=HackAttack
31787=HackAttack
31789=HackAttack
31791=HackAttack
33333=Prosiak
34324=BigGluck,TN
40412=TheSpy
40421=Agent40421,MastersParadise
40422=MastersParadise
40423=MastersParadise
40426=MastersParadise
47262=DeltaSource
50505=SocketsdeTroie
50766=Fore
53001=RemoteWindowsShutdown
54321=SchoolBus.69-1.11
60000=DeepThroat
61466=Telecommando
65000=Devil
69123=ShitHeep
注:现在的木马都具有改变监听端口的功能,所以以上的缺省端口仅供参考之用。