@echo off
echo.
echo ============================================================
echo   [ OrioN ScaN - Trojans ]
echo   Scan de posibles infecciones por troyanos
echo   Idea por ^Banzai^, Lista de ports por phsyko
echo   Editado por MoAsT, Creado por Javier Fdez. Rivera (Quasi)
echo ============================================================
echo.
echo Preparando lista interna de troyanos y puertos........
echo.
echo Dependiendo del resultado de la conexion a un puerto
echo estaras o no infectado por el trojano.
echo.
echo -- La conexion al puerto puede dar 3 resultado.
echo -1-- A la escucha, es un sys de seguridad [no infectado].
echo -2-- Conexion establecida, posiblemente estes infectado  [=infectado].
echo -3-- No da nigun dato, la conexion se encuentra cerrada  [no infectado].
echo.
pause
echo.
echo Escaneando AimSpy (777)
netstat -an | find "777" > scantrojans.txt
echo Escaneando Ambush (10666)
netstat -an | find "10666" >> scantrojans.txt
echo Escaneando AOLTrojan1.1 (30029)
netstat -an | find "30029"  >> scantrojans.txt
echo Escaneando Attack FTP (666)
netstat -an | find "666"  >> scantrojans.txt
echo Escaneando BackConstruction1.2 (5400)
netstat -an | find "5400"  >> scantrojans.txt
echo Escaneando Backdoor (1999)
netstat -an | find "1999"  >> scantrojans.txt
echo Escaneando Back Orifice 2000 (31337)
netstat -an | find "31337"  >> scantrojans.txt
echo Escaneando BigGluck, aka TN (34324)
netstat -an | find "34324"  >> scantrojans.txt
echo Escaneando Bla (20331)
netstat -an | find "20331"  >> scantrojans.txt
echo Escaneando Bla1.1 (1042)
netstat -an | find "1042"  >> scantrojans.txt
echo Escaneando BladeRunner (5400)
netstat -an | find "5400"  >> scantrojans.txt
echo Escaneando BO jammerkillahV (121)
netstat -an | find "121"  >> scantrojans.txt
echo Escaneando Coma 10607
netstat -an | find "10607"  >> scantrojans.txt
echo Escaneando Chupacabra (20203)
netstat -an | find "20203"  >> scantrojans.txt
echo Escaneando Deep Throath 1,2,3.x (6670)
netstat -an | find "6670"  >> scantrojans.txt
echo Escaneando DeltaSource ( (6883)
netstat -an | find "6883"  >> scantrojans.txt
echo Escaneando Der Spaeher 3 (1000)
netstat -an | find "1000"  >> scantrojans.txt
echo Escaneando Der Spaeher 3 (1001)
netstat -an | find "1001"  >> scantrojans.txt
echo Escaneando Der Spaeher 3 (2000)
netstat -an | find "2000"  >> scantrojans.txt
echo Escaneando Der Spaeher 3 (2001)
netstat -an | find "2001"  >> scantrojans.txt
echo Escaneando Devil 1.03 (65000)
netstat -an | find "65000"  >> scantrojans.txt
echo Escaneando Doly Trojan (1011)
netstat -an | find "1011"  >> scantrojans.txt
echo Escaneando Doly Trojan v1.35 (1010)
netstat -an | find "1010"  >> scantrojans.txt
echo Escaneando Doly Trojan v1.5 (1015)
netstat -an | find "1015"  >> scantrojans.txt
echo Escaneando Eclipse 2000 (12701)
netstat -an | find "12701"  >> scantrojans.txt
echo Escaneando FileNail (4567)
netstat -an | find "4567"  >> scantrojans.txt
echo Escaneando Firthotcker (5321)
netstat -an | find "5321"  >> scantrojans.txt
echo Escaneando Fore, Schwindler (50766)
netstat -an | find "50766"  >> scantrojans.txt
echo Escaneando FTP99CMP (1492)
netstat -an | find "1492"  >> scantrojans.txt
echo Escaneando Gatecrasher (6969)
netstat -an | find "6969"  >> scantrojans.txt
echo Escaneando GirlFriend (21554) 
netstat -an | find "21554"  >> scantrojans.txt
echo Escaneando Gjamer (12076)
netstat -an | find "12076"  >> scantrojans.txt
echo Escaneando Hack´99 KeyLogger (12223)
netstat -an | find "12223"  >> scantrojans.txt
echo Escaneando Hack'a'tack (31787)
netstat -an | find "31787"  >> scantrojans.txt
echo Escaneando Hackers Paradise (456)
netstat -an | find "456"  >> scantrojans.txt
echo Escaneando HVL Rat 5 (2283)
netstat -an | find "2283"  >> scantrojans.txt
echo Escaneando ICQKiller (7789)
netstat -an | find "7789"  >> scantrojans.txt
echo Escaneando IcqTrojan (4950)
netstat -an | find "4950"  >> scantrojans.txt
echo Escaneando IcqTrojen (4950)
netstat -an | find "4950"  >> scantrojans.txt
echo Escaneando Illusion Mailer (5521)
netstat -an | find "5521"  >> scantrojans.txt
echo Escaneando InCommand 1.9 (9400) 
netstat -an | find "9400"  >> scantrojans.txt
echo Escaneando Indoctrination (6939)
netstat -an | find "6939"  >> scantrojans.txt
echo Escaneando InIkiller (9989)
netstat -an | find "9989"  >> scantrojans.txt
echo Escaneando iNi-killer (9989)
netstat -an | find "9989"  >> scantrojans.txt
echo Escaneando Kuang (30999)
netstat -an | find "30999"  >> scantrojans.txt
echo Escaneando Kuang2 theVirus (17300)
netstat -an | find "17300"  >> scantrojans.txt
echo Escaneando Logged! (20203)
netstat -an | find "20203"  >> scantrojans.txt
echo Escaneando Master Paradise (31)
netstat -an | find "31"  >> scantrojans.txt
echo Escaneando Master Paradise (40423)
netstat -an | find "40423"  >> scantrojans.txt
echo Escaneando Maverick's Matrix (1269)
netstat -an | find "1269"  >> scantrojans.txt
echo Escaneando Millenium (20000)
netstat -an | find "20000"  >> scantrojans.txt
echo Escaneando NeTadmin (555)
netstat -an | find "555"  >> scantrojans.txt
echo Escaneando NetBus 1.x (avoiding Netbuster) (12346)
netstat -an | find "12346"  >> scantrojans.txt
echo Escaneando NetBus Pro (20034)
netstat -an | find "20034"  >> scantrojans.txt
echo Escaneando NetMetro 1.0 (5031)
netstat -an | find "5031"  >> scantrojans.txt
echo Escaneando NetMetropolitan 1.04 (5031)
netstat -an | find "5031"  >> scantrojans.txt
echo Escaneando NetMetropolitan 1.04 (5032)
netstat -an | find "5032"  >> scantrojans.txt
echo Escaneando NetMonitor (7306)
netstat -an | find "7306"  >> scantrojans.txt
echo Escaneando NetSphere (30100)
netstat -an | find "30100"  >> scantrojans.txt
echo Escaneando Netspy (1033)
netstat -an | find "1033"  >> scantrojans.txt
echo Escaneando NetSpy DK (31339)
netstat -an | find "31339"  >> scantrojans.txt
echo Escaneando OOTL+OOTLT Cart (5011)
netstat -an | find "5011"  >> scantrojans.txt
echo Escaneando Pass Riper (2023)
netstat -an | find "2023"  >> scantrojans.txt
echo Escaneando Phase0 (555)
netstat -an | find "555"  >> scantrojans.txt
echo Escaneando Phineas (2801)
netstat -an | find "2801"  >> scantrojans.txt
echo Escaneando Portal of Doom (9875)
netstat -an | find "9875"  >> scantrojans.txt
echo Escaneando PortalOfDoom (9872)
netstat -an | find "9872"  >> scantrojans.txt
echo Escaneando Priority (16969)
netstat -an | find "16969"  >> scantrojans.txt
echo Escaneando Progenic Trojan (11223)
netstat -an | find "11223"  >> scantrojans.txt
echo Escaneando Prosiak 0.47 (22222)
netstat -an | find "22222"  >> scantrojans.txt
echo Escaneando Psyber Streaming Server (1509)
netstat -an | find "1509"  >> scantrojans.txt
echo Escaneando Remote Windows Shutdown (53001)
netstat -an | find "53001"  >> scantrojans.txt
echo Escaneando RoboHack (5569)
netstat -an | find "5569"  >> scantrojans.txt
echo Escaneando Schoolbus 1.6 (54321)
netstat -an | find "54321"  >> scantrojans.txt
echo Escaneando Schoolbus 2.0 (54321)
netstat -an | find "54321"  >> scantrojans.txt
echo Escaneando Schwindler 1.82 (21554)
netstat -an | find "21554"  >> scantrojans.txt
echo Escaneando Senna Spy Trojans (11000)
netstat -an | find "11000"  >> scantrojans.txt
echo Escaneando Shitheep (69123)
netstat -an | find "69123"  >> scantrojans.txt
echo Escaneando Shitheep (6912)
netstat -an | find "6912"  >> scantrojans.txt
echo Escaneando Shiva Burka (1600)
netstat -an | find "1600"  >> scantrojans.txt
echo Escaneando ShockRave (1981)
netstat -an | find "1981"  >> scantrojans.txt
echo Escaneando Silencer (1001)
netstat -an | find "1001"  >> scantrojans.txt
echo Escaneando Silencer (1001)
netstat -an | find "1001"  >> scantrojans.txt
echo Escaneando Socket23 (30303)
netstat -an | find "30303"  >> scantrojans.txt
echo Escaneando SoftWar (1207)
netstat -an | find "1207"  >> scantrojans.txt
echo Escaneando SpySender (1807)
netstat -an | find "1807"  >> scantrojans.txt
echo Escaneando Stealth Spy (555)
netstat -an | find "555"  >> scantrojans.txt
echo Escaneando Streaming Audio Trojan (1170)
netstat -an | find "1170"  >> scantrojans.txt
echo Escaneando Striker (2565)
netstat -an | find "2565"  >> scantrojans.txt
echo Escaneando SubSeven (1243)
netstat -an | find "1243"  >> scantrojans.txt
echo Escaneando Telecomando (61466)
netstat -an | find "61466"  >> scantrojans.txt
echo Escaneando The Invasor (2140)
netstat -an | find "2140"  >> scantrojans.txt
echo Escaneando The tHing (6400)
netstat -an | find "6400"  >> scantrojans.txt
echo Escaneando The Unexplained (29891)
netstat -an | find "29891"  >> scantrojans.txt
echo Escaneando TheSpy (40412)
netstat -an | find "40412"  >> scantrojans.txt
echo Escaneando TheThing 1.6 (6000)
netstat -an | find "6000"  >> scantrojans.txt
echo Escaneando Tiny Telnet Server (34324)
netstat -an | find "34324"  >> scantrojans.txt
echo Escaneando Total Eclypse 1.0 (3791)
netstat -an | find "3791"  >> scantrojans.txt
echo Escaneando Transcout 1.1 + 1.2 (1999)
netstat -an | find "1999"  >> scantrojans.txt
echo Escaneando Trojan Spirit 2001 a (33911)
netstat -an | find "33911"  >> scantrojans.txt
echo Escaneando TrojanCow (2001)
netstat -an | find "2001"  >> scantrojans.txt
echo Escaneando UglyFtp (23456)
netstat -an | find "23456"  >> scantrojans.txt
echo Escaneando Vampire (6669)
netstat -an | find "6669"  >> scantrojans.txt
echo Escaneando Vodoo (1245)
netstat -an | find "1245"  >> scantrojans.txt
echo Escaneando WebEx (1011)
netstat -an | find "1011"  >> scantrojans.txt
echo Escaneando WhackJob (23456)
netstat -an | find "23456"  >> scantrojans.txt
echo Escaneando Wincrash (5742)
netstat -an | find "5742"  >> scantrojans.txt
echo Escaneando Wincrash2 (2583)
netstat -an | find "2583"  >> scantrojans.txt
echo Escaneando Xtcp 5550
netstat -an | find "5550"  >> scantrojans.txt
echo.
echo Si alguna conexion resulta infectada.
echo Sera grabado el dato en el fichero scantrojans.txt
echo Ver los resultados en [ orion\scantrojans.txt ]
echo.
echo Fin del scan.