해킹의심 파일.../tmp/f3

안녕하십니까? 오늘과내일의 홍석범입니다.

아래 말씀하신 파일은 대용량의 UDP pps를 유발하는 DoS 공격 프로그램입니다.
당연히 확인하시어 삭제하셔야 합니다.

감사합니다.

김영태 님의 글

서버 /tmp 디렉토리 에서 생소하게 처음보는 파일이 있어 열어봤습니다.

# strings f3

그랬더니 아래처럼 내용이 보이는데
어떤 의미 일까요?
죄송하지만 고수님들 좀 봐 주십시오;;;


/lib/ld-linux.so.2
libc.so.6
getopt_long
malloc
socket
fprintf
inet_addr
optind
rand
signal
sendto
bcopy
time
gethostbyname
stderr
htons
exit
atoi
_IO_stdin_used
__libc_start_main
__gmon_start__
GLIBC_2.0
PTRh
QVh=
[1;36m!
[1;30mHELP
[1;36m!
[1;30mbeta version
[1;37m.
[00;00m
[1;36m!
[1;30mHELP
[1;36m!
[00;00m
[1;36m!
[1;30mHELP
[1;36m!
[1;37m#
[0;36mbrazil
[1;30m@
[0;36mefnet
[1;37m-
[1;30meleet team
[00;00m
[1;36m!
[1;30mHELP
[1;36m!
[1;37m+
[1;30mcode
[00;00mby
[1;30mbonny
[1;37m:::
[0;36mbonny
[1;30m@
[0;36mhacker
[1;37m.
[0;36mcom
[1;37m.
[0;36mbr
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[1;37m*
[1;30mcreditos aos amigos e a quem me ajudou
[1;37m.
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[1;37m*
[1;30mnone       
[0;36m(
[1;30mroot
[0;36m@
[1;30msuid
[1;37m.
[1;30mnet
[0;36m)
[1;37m:::
[1;30mBrazil
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[1;30m  packet spoof
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[1;37m*
[1;30mcyclone   
[0;36m(
[1;30mcyc
[0;36m@
[1;30mpop
[1;37m.
[1;30mcom
[1;37m.
[1;30mbr
[0;36m)
[1;37m:::
[1;30mBrazil
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[1;30m  parceiro das hackadas
[1;37m,
[1;30maprende rapido
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[1;37m*
[1;30mmariana   
[0;36m(
[1;30mmazinha
[0;36m@
[1;30mbrasnet
[1;37m.
[1;30morg
[0;36m)
[1;37m:::
[1;30mBrazil
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[1;30m  minha leet girl
[1;37m,
[1;30mexclusiva
[1;37m:
[1;36m)
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[1;37m*
[1;30malcaloide 
[0;36m(
[1;30mroot
[0;36m@
[1;30mfaggot
[1;37m.
[1;30mnet
[0;36m)
[1;37m:::
[1;30mBrazil
[00;00m
[1;36m!
[1;30mCREDITS
[1;36m!
[1;30m  super lamer
[1;37m,
[1;30mversao 3 pra pacotar ele
[00;00m
help
credits
[1;37m*
[1;30mOpcao invalida
[1;36m!
[00;00m
[1;37m*
[0;36m%s
[1;30mpara maiores informacoes
[1;37m.
[00;00m
[0;36m!
[1;30mAJUDA
[0;36m!
[1;37m:
[0;36m%s
[1;37m-
[1;30mhelp
[00;00m
[1;30mCREDITS
[1;37m:
[0;36m%s
[1;37m-
[1;30mcredits
[00;00m
[1;36m!
[1;30mUSAGE
[1;36m!
[1;37m:
[0;36m%s
[1;36m(
[1;30mhost/ip
[1;36m) (
[1;30msize
[1;36m) (
[1;30mloops
[1;36m)
[00;00m
[1;36m(
[1;30mhost/ip
[1;36m)
[1;37m==
[1;30mhost do babaca a ser fudido
[1;37m.
[00;00m
[1;36m(
[1;30msize
[1;36m)   
[1;37m==
[1;30mbytes a serem enviados
[1;37m.
[00;00m
[1;36m(
[1;30mloops
[1;36m) 
[1;37m==
[1;30mtempo da fudecao
[0;36m/
[1;30ms
[1;37m.
[00;00m
[00;00mCTRL
[1;37m-
[1;30mC
[1;37m- A
[1;30mCAO
[1;37mC
[1;30mANCELADA
[1;36m!
[00;00m
[00;00mFUDEDOR
[1;30m(
[0;36mv3.0
[1;30m)
[00;00mby
[1;30mbonny
[1;37m-
[00;00mPRIVATE
[1;36m!
[1;30m@
[1;37m#
[1;36m!
[00;00m
[1;30mhost desconhecido
[1;37m:
[0;36m%s
[00;00m
[1;30mMaximo de bytes permitodos
[1;37m:
[0;36m65535
[1;37m.
[00;00m
[1;30mA maquina nao tem memoria suficiente
[1;37m.
[00;00m
[1;30mFUDENDO A VERA
[1;37m%s
[1;30mCOM
[1;37m%s
[1;30mbytes
[1;37m...
[00;00m
[1;30mpronto maneh, o babaca foi fudido
[1;36m!
[1;37m:
[1;36m)
[00;00m