Linux.Packed.587

Technical Information

Malicious functions:

Launches itself as a daemon

Modifies firewall settings:

iptables -F

Manages services:

service iptables stop
systemctl stop iptables.service

Launches processes:

sh -c clear
clear
sh -c echo Infected By Arh
sh -c rm -rf /tmp/* /var/* /var/run/* /var/tmp/*
rm -rf /tmp/* /var/backups /var/cache /var/lib /var/local /var/lock /var/log /var/mail /var/opt /var/run /var/spool /var/tmp /var/run/acpid.pid /var/run/acpid.socket /var/run/atd.pid /var/run/crond.pid /var/run/crond.reboot /var/run/dbus /var/run/dhclient.eth0.pid /var/run/exim4 /var/run/initctl /var/run/initramfs /var/run/lock /var/run/log /var/run/mount /var/run/network /var/run/rpc.statd.pid /var/run/rpc_pipefs /var/run/rpcbind /var/run/rpcbind.lock /var/run/rpcbind.pid /var/run/rpcbind.sock /var/run/rsyslogd.pid /var/run/sendsigs.omit.d /var/run/shm /var/run/sm-notify.pid /var/run/sshd /var/run/sshd.pid /var/run/systemd /var/run/tmpfiles.d /var/run/udev /var/run/user /var/run/utmp /var/tmp/*
sh -c rm -rf /var/log/wtmp
rm -rf /var/log/wtmp
sh -c rm -rf /tmp/*
rm -rf /tmp/*
sh -c rm -rf /bin/netstat
rm -rf /bin/netstat
sh -c iptables -F
sh -c pkill -9 busybox
pkill -9 busybox
sh -c pkill -9 perl
pkill -9 perl
sh -c pkill -9 python
pkill -9 python
sh -c service iptables stop
rm -rf /tmp/* /var/lib /var/local /var/lock /var/log /var/mail /var/opt /var/run /var/spool /var/tmp /var/run/acpid.pid /var/run/acpid.socket /var/run/atd.pid /var/run/crond.pid /var/run/crond.reboot /var/run/dbus /var/run/dhclient.eth0.pid /var/run/exim4 /var/run/initctl /var/run/initramfs /var/run/lock /var/run/log /var/run/mount /var/run/network /var/run/rpc.statd.pid /var/run/rpc_pipefs /var/run/rpcbind /var/run/rpcbind.lock /var/run/rpcbind.pid /var/run/rpcbind.sock /var/run/rsyslogd.pid /var/run/sendsigs.omit.d /var/run/shm /var/run/sm-notify.pid /var/run/sshd /var/run/sshd.pid /var/run/systemd /var/run/tmpfiles.d /var/run/udev /var/run/user /var/run/utmp /var/tmp/*

Kills system processes:

sshd

Kills the following processes:

cron
systemd-logind
rsyslogd
acpid
dbus-daemon
agetty
exim4
bash
run.sh
<SAMPLE>

Performs operations with the file system:

Creates or modifies files:

/etc/resolv.conf

Deletes files:

/tmp/*
/shadow.bak
/dpkg.diversions.0
/dpkg.diversions.1.gz
/alternatives.tar.0
/dpkg.statoverride.1.gz
/dpkg.statoverride.2.gz
/group.bak
/dpkg.statoverride.0
/dpkg.status.1.gz
/passwd.bak
/gshadow.bak
/dpkg.status.2.gz
/dpkg.status.0
/apt.extended_states.0
/dpkg.diversions.2.gz
/sqspell.php
/ispell.db
/wordlist-default
/emacsen-ispell-default.el
/wordlist.db
/hunspell.db
/ispell-default
/jed-ispell-dicts.sl
/aspell.db
/ispell-dicts-list.txt
/emacsen-ispell-dicts.el
/aux-cache
/d589a48862398ed80a3d6066f4f56f4c-le32d4.cache-4
/4c599c202bc5c08e2d34565a40eac3b2-le32d4.cache-4
/d82eb4fd963d448e2fcb7d7b793b5df3-le32d4.cache-4
/7ef2298fde41cc6eeb7af42e48b7d293-le32d4.cache-4
/d3e5c4ee2ceb1fc347f91d4cefc53bc0-le32d4.cache-4
/3f7329c5293ffd510edef78f73874cfd-le32d4.cache-4
/57e423e26b20ab21d0f2f29c145174c3-le32d4.cache-4
/c855463f699352c367813e37f3f70ea7-le32d4.cache-4
/e13b20fdb08344e0e664864cc2ede53d-le32d4.cache-4
/CACHEDIR.TAG
/945677eb7aeaf62f1d50efc3fb3ec7d8-le32d4.cache-4
/95530828ff6c81d309f8258d8d02a23e-le32d4.cache-4
/f1f2465696798768e9653f19e17ccdc8-le32d4.cache-4
/e52a45a1c8c8fe895fc0fc8c4e6999b8-le32d4.cache-4
/3830d5c3ddfd5cd38a049b759396e72e-le32d4.cache-4
/188ac73a183f12857f63bb60a4a6d603-le32d4.cache-4
/6aa41aa22e18b8fa06a12da28ea9c28b-le32d4.cache-4
/pkgcache.bin
/srcpkgcache.bin
/rubygems-integration_1.8_all.deb
/texlive-latex-recommended-doc_2014.20141024-2_all.deb
/libpoppler46_0.26.5-2_i386.deb
/autopoint_0.19.3-2_all.deb
/dblatex_0.3.5-2_all.deb
/python3-debian_0.1.27_all.deb
/wdiff_1.2.2-1_i386.deb
/liblist-moreutils-perl_0.33-2+b1_i386.deb
/libxcb-dri2-0_1.10-3+b1_i386.deb
/dpkg-dev_1.17.26_all.deb
/libutempter0_1.1.5-4_i386.deb
/manpages-dev_3.74-1_all.deb
/libstdc++-4.9-dev_4.9.2-10_i386.deb
/libxt6_1%3a1.1.4-1+b1_i386.deb
/libpython-dev_2.7.9-1_i386.deb
/sgmlspl_1.03ii-33_all.deb
/libostyle1c2_1.4devel1-21.1_i386.deb
/ps2eps_1.68+binaryfree-1_i386.deb
/libjs-jquery_1.7.2+dfsg-3.2_all.deb
/libsoap-lite-perl_1.11-1_all.deb
/cpp_4%3a4.9.2-2_i386.deb
/libjson-xs-perl_2.340-1+b2_i386.deb
/gsfonts_1%3a8.11+urwcyr1.0.7~pre44-4.2_all.deb
/sp_1.3.4-1.2.1-47.3_i386.deb
/texlive-base_2014.20141024-2_all.deb
/libdrm-intel1_2.4.58-2_i386.deb
/libasan0_4.8.4-1_i386.deb
/x11-common_1%3a7.7+7_all.deb
/libfakeroot_1.20.2-1_i386.deb
/texlive-generic-recommended_2014.20141024-2_all.deb
/libisl10_0.12.2-2_i386.deb
/libio-socket-inet6-perl_2.72-1_all.deb
/libgs9-common_9.06~dfsg-2+deb8u1_all.deb
/libalgorithm-diff-perl_1.19.02-3_all.deb
/libapt-pkg-perl_0.1.29+b2_i386.deb
/debhelper_9.20150101_all.deb
/libxmlrpc-lite-perl_0.717-1_all.deb
/libcupsimage2_1.7.5-11+deb8u1_i386.deb
/python3.4-minimal_3.4.2-1_i386.deb
/libpython3-stdlib_3.4.2-2_i386.deb
/x11-utils_7.7+2_i386.deb
/hardening-includes_2.6_all.deb
/python3-pkg-resources_5.5.1-1_all.deb
/libxpm4_1%3a3.5.11-1+b1_i386.deb
/libparse-debcontrol-perl_2.005-4_all.deb
/libossp-uuid16_1.6.2-1.5+b1_i386.deb
/libosp5_1.5.2-11.1_i386.deb
/dput_0.9.6.4_all.deb
/libdistro-info-perl_0.14_all.deb
/libqtcore4_4%3a4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1_i386.deb
/gettext_0.19.3-2_i386.deb
/libnet-dns-perl_0.81-2_i386.deb
/libtcl8.6_8.6.2+dfsg-2_i386.deb
/libcupsfilters1_1.0.61-5+deb8u3_i386.deb
/python3-chardet_2.3.0-1_all.deb
/libpython2.7-minimal_2.7.9-2+deb8u1_i386.deb
/python2.7_2.7.9-2+deb8u1_i386.deb
/texlive-pstricks_2014.20141024-1_all.deb
/libcilkrts5_4.9.2-10_i386.deb
/libxcb-shape0_1.10-3+b1_i386.deb
/kernel-common_13.014+nmu1_all.deb
/libpython2.7-dev_2.7.9-2+deb8u1_i386.deb
/libdrm-radeon1_2.4.58-2_i386.deb
/libexpat1_2.1.0-6+deb8u3_i386.deb
/texlive-latex-extra-doc_2014.20141024-1_all.deb
/libyaml-tiny-perl_1.64-1_all.deb
/zip_3.0-8_i386.deb
/tex-common_5.03_all.deb
/fonts-texgyre_20140520-1_all.deb
/libc6-dev_2.19-18+deb8u3_i386.deb
/build-essential_11.7_i386.deb
/libtext-levenshtein-perl_0.11-1_all.deb
/docbook-xml_4.5-7.2_all.deb
/libcrypt-ssleay-perl_0.58-1+b2_i386.deb
/libxft2_2.3.2-1_i386.deb
/libsm6_2%3a1.2.2-1+b1_i386.deb
/libxml2-utils_2.9.1+dfsg1-5+deb8u1_i386.deb
/libxxf86dga1_2%3a1.1.4-1+b1_i386.deb
/libxmu6_2%3a1.1.2-1_i386.deb
/python-dev_2.7.9-1_i386.deb
/lmodern_2.004.4-5_all.deb
/libpython3.4-minimal_3.4.2-1_i386.deb
/libfile-fcntllock-perl_0.22-1+b1_i386.deb
/libgomp1_4.9.2-10_i386.deb
/texlive-latex-base_2014.20141024-2_all.deb
/po-debconf_1.0.16+nmu3_all.deb
/x11-xserver-utils_7.7+3+b1_i386.deb
/libxcb-glx0_1.10-3+b1_i386.deb
/poppler-data_0.4.7-1_all.deb
/libalgorithm-diff-xs-perl_0.04-3+b1_i386.deb
/patchutils_0.3.3-1_i386.deb
/libcroco3_0.6.8-3+b1_i386.deb
/xterm_312-2_i386.deb
/libio-pty-perl_1%3a1.08-1+b4_i386.deb
/libmail-sendmail-perl_0.79.16-1_all.deb
/libjson-perl_2.61-1_all.deb
/libquadmath0_4.9.2-10_i386.deb
/libsp1c2_1.3.4-1.2.1-47.3_i386.deb
/debian-keyring_2015.04.10_all.deb
/make_4.0-8.1_i386.deb
/gcc-4.9_4.9.2-10_i386.deb
/distro-info-data_0.26_all.deb
/libsocket6-perl_0.25-1+b1_i386.deb
/texlive-font-utils_2014.20141024-1_all.deb
/libijs-0.35_0.35-10_i386.deb
/libexpat1-dev_2.1.0-6+deb8u3_i386.deb
/devscripts_2.15.3_i386.deb
/libtxc-dxtn-s2tc0_0~git20131104-1.1_i386.deb
/libmime-tools-perl_5.505-1_all.deb
/t1utils_1.38-4_i386.deb
/libalgorithm-merge-perl_0.08-2_all.deb
/libfile-basedir-perl_0.03-1_all.deb
/zlib1g-dev_1%3a1.2.8.dfsg-2+b1_i386.deb
/tcl8.6_8.6.2+dfsg-2_i386.deb
/g++_4%3a4.9.2-2_i386.deb
/libopenjpeg5_1%3a1.5.2-3_i386.deb
/libdigest-hmac-perl_1.03+dfsg-1_all.deb
/libio-sessiondata-perl_1.03-1_all.deb
/libunistring0_0.9.3-5.2+b1_i386.deb
/libclone-perl_0.37-1+b1_i386.deb
/xbitmaps_1.1.1-2_all.deb
/libxcb-dri3-0_1.10-3+b1_i386.deb
/libzzip-0-13_0.13.62-3_i386.deb
/ruby2.1_2.1.5-2+deb8u2_i386.deb
/liberror-perl_0.17-1.1_all.deb
/libssl-doc_1.0.1t-1+deb8u5_all.deb
/tipa_2%3a1.3-20_all.deb
/libfile-homedir-perl_1.00-1_all.deb
/libxslt1.1_1.1.28-2+b2_i386.deb
/binutils_2.25-5_i386.deb
/libjbig2dec0_0.11+20120125-1_i386.deb
/linux-kbuild-3.16_3.16.7-ckt20-1_i386.deb
/dh-python_1.20141111-2_all.deb
/jadetex_3.13-14_all.deb
/fakeroot_1.20.2-1_i386.deb
/texlive-latex-extra_2014.20141024-1_all.deb
/prerex_6.5.3-1_i386.deb
/equivs_2.0.9_all.deb
/libc-dev-bin_2.19-18+deb8u3_i386.deb
/dctrl-tools_2.23_i386.deb
/texlive-pictures-doc_2014.20141024-2_all.deb
/libdrm-nouveau2_2.4.58-2_i386.deb
/libx11-xcb1_2%3a1.6.2-3_i386.deb
/fonts-droid_1%3a4.4.4r2-6_all.deb
/libpotrace0_1.12-1_i386.deb
/libatomic1_4.9.2-10_i386.deb
/libdrm2_2.4.58-2_i386.deb
/libtask-weaken-perl_1.04-1_all.deb
/libgl1-mesa-dri_10.3.2-1+deb8u1_i386.deb
/texlive-pstricks-doc_2014.20141024-1_all.deb
/libaudio2_1.9.4-3_i386.deb
/libasan1_4.9.2-10_i386.deb
/libxss1_1%3a1.2.2-1_i386.deb
/texlive-pictures_2014.20141024-2_all.deb
/libtk8.6_8.6.2-1_i386.deb
/libxaw7_2%3a1.0.12-2+b1_i386.deb
/libxtst6_2%3a1.2.2-1+b1_i386.deb
/libharfbuzz-icu0_0.9.35-2_i386.deb
/libpython3.4-stdlib_3.4.2-1_i386.deb
/lintian_2.5.30+deb8u4_all.deb
/python2.7-dev_2.7.9-2+deb8u1_i386.deb
/libperlio-gzip-perl_0.18-3+b1_i386.deb
/libxcb-present0_1.10-3+b1_i386.deb
/cpp-4.9_4.9.2-10_i386.deb
/vprerex_6.5.3-1_i386.deb
/libgs9_9.06~dfsg-2+deb8u1_i386.deb
/openjade_1.4devel1-21.1_i386.deb
/libgl1-mesa-glx_10.3.2-1+deb8u1_i386.deb
/libmpc3_1.0.2-1_i386.deb
/tk_8.6.0+8_i386.deb
/libfontenc1_1%3a1.1.2-1+b2_i386.deb
/libruby2.1_2.1.5-2+deb8u2_i386.deb
/libptexenc1_2014.20140926.35254-6_i386.deb
/libgcc-4.9-dev_4.9.2-10_i386.deb
/libx11-protocol-perl_0.56-6_all.deb
/libgcc-4.8-dev_4.8.4-1_i386.deb
/libmpfr4_3.1.2-2_i386.deb
/libarchive-zip-perl_1.39-1_all.deb
/libitm1_4.9.2-10_i386.deb
/python3.4_3.4.2-1_i386.deb
/libfile-mimeinfo-perl_0.26-1_all.deb
/diffstat_1.58-1_i386.deb
/gcc_4%3a4.9.2-2_i386.deb
/fonts-lmodern_2.004.4-5_all.deb
/prosper_1.00.4+cvs.2007.05.01-4_all.deb
/lock
/libssl1.0.0_1.0.1t-1+deb8u5_i386.deb
/libnet-domain-tld-perl_1.72-1_all.deb
/cpp-4.8_4.8.4-1_i386.deb
/tcl_8.6.0+8_i386.deb
/libxml-xpathengine-perl_0.13-1_all.deb
/texlive-latex-base-doc_2014.20141024-2_all.deb
/python3-apt_0.9.3.12_i386.deb
/libconvert-binhex-perl_1.123-2_all.deb
/libexporter-lite-perl_0.06-1_all.deb
/libio-stringy-perl_2.110-5_all.deb
/libdpkg-perl_1.17.26_all.deb
/docbook-utils_0.6.14-3_all.deb
/texlive-extra-utils_2014.20141024-1_all.deb
/xdg-utils_1.1.0~rc1+git20111210-7.4_all.deb
/libubsan0_4.9.2-10_i386.deb
/libsgmls-perl_1.03ii-33_all.deb
/libnet-ip-perl_1.26-1_all.deb
/libllvm3.5_1%3a3.5-10_i386.deb
/libice6_2%3a1.0.9-1+b1_i386.deb
/libgettextpo-dev_0.19.3-2_i386.deb
/javascript-common_11_all.deb
/qtcore4-l10n_4%3a4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1_all.deb
/preview-latex-style_11.87-3+deb8u1_all.deb
/libqt4-xml_4%3a4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1_i386.deb
/libossp-uuid-perl_1.6.2-1.5+b1_i386.deb
/libkpathsea6_2014.20140926.35254-6_i386.deb
/texlive-bibtex-extra_2014.20141024-1_all.deb
/libxcb-sync1_1.10-3+b1_i386.deb
/libfile-which-perl_1.09-1_all.deb
/libglapi-mesa_10.3.2-1+deb8u1_i386.deb
/gcc-4.8_4.8.4-1_i386.deb
/libmpdec2_2.4.1-1_i386.deb
/python2.7-minimal_2.7.9-2+deb8u1_i386.deb
/libnet-dbus-perl_1.0.0-2+b2_i386.deb
/unzip_6.0-16+deb8u2_i386.deb
/libgettextpo0_0.19.3-2_i386.deb
/libxshmfence1_1.1-4_i386.deb
/tk8.6_8.6.2-1_i386.deb
/texlive-binaries_2014.20140926.35254-6_i386.deb
/libclass-inspector-perl_1.28-1_all.deb
/libelf1_0.159-4.2_i386.deb
/texlive-fonts-recommended-doc_2014.20141024-2_all.deb
/texlive-math-extra_2014.20141024-1_all.deb
/intltool-debian_0.35.0+20060710.1_all.deb
/libqtgui4_4%3a4.8.6+git64-g5dc8b2b+dfsg-3+deb8u1_i386.deb
/python3_3.4.2-2_i386.deb
/libcloog-isl4_0.18.2-1+b2_i386.deb
/libyaml-0-2_0.1.6-3_i386.deb
/libpython2.7_2.7.9-2+deb8u1_i386.deb
/python3-minimal_3.4.2-2_i386.deb
/docbook-xsl_1.78.1+dfsg-1_all.deb
/tex-gyre_20140520-1_all.deb
/texlive_2014.20141024-2_all.deb
/libxxf86vm1_1%3a1.1.3-1+b1_i386.deb
/libxv1_2%3a1.0.10-1+b1_i386.deb
/libfile-desktopentry-perl_0.07-1_all.deb
/sgml-data_2.0.10_all.deb
/xsltproc_1.1.28-2+b2_i386.deb
/kernel-package_13.014+nmu1_all.deb
/libpciaccess0_0.13.2-3+b1_i386.deb
/libsynctex1_2014.20140926.35254-6_i386.deb
/texlive-fonts-recommended_2014.20141024-2_all.deb
/libasprintf-dev_0.19.3-2_i386.deb
/g++-4.9_4.9.2-10_i386.deb
/texlive-latex-recommended_2014.20141024-2_all.deb
/libcommon-sense-perl_3.73-2+b3_i386.deb
/libmng1_1.0.10+dfsg-3.1+b3_i386.deb
/libipc-run-perl_0.92-1_all.deb
/strace_4.9-2_i386.deb
/libpoppler-qt4-4_0.26.5-2_i386.deb
/docbook-dsssl_1.79-7_all.deb
/libsys-hostname-long-perl_1.4-3_all.deb
/libpython2.7-stdlib_2.7.9-2+deb8u1_i386.deb
/libemail-valid-perl_1.195-1_all.deb
/libxml-twig-perl_1%3a3.48-1_all.deb
/xmlto_0.0.25-2_i386.deb
/libtie-ixhash-perl_1.23-1_all.deb
/ghostscript_9.06~dfsg-2+deb8u1_i386.deb
/python3-magic_1%3a5.22+15-2+deb8u1_all.deb
/python3-six_1.8.0-1_all.deb
/libssl-dev_1.0.1t-1+deb8u5_i386.deb
/config.dat-old
/templates.dat-old
/templates.dat
/passwords.dat
/config.dat
/random-seed
/state
/ibritish
/iamerican
/wamerican
/auto-update
/auth
/password
/session-noninteractive
/seen
/session
/account
/python-support
/python2.7.prerm
/grep.list
/libxmuu1:i386.md5sums
/dash.list
/linux-compiler-gcc-4.8-x86.md5sums
/fontconfig-config.list
/libedit2:i386.list
/tcl.list
/poppler-data.md5sums
/docbook-xml.md5sums
/libllvm3.5:i386.md5sums
/libxcb-shape0:i386.list
/libselinux1:i386.postinst
/openssl.list
/emacsen-common.list
/libdrm-nouveau2:i386.postinst
/libavahi-common3:i386.md5sums
/libubsan0:i386.shlibs
/libatomic1:i386.list
/adduser.conffiles
/libalgorithm-c3-perl.list
/acpi.md5sums
/libapt-inst1.5:i386.md5sums
/info.postrm
/libcgi-pm-perl.list
/python-dev.md5sums
/libpopt0:i386.postinst
/libp11-kit0:i386.list
/lsof.list
/libyaml-0-2:i386.postrm
/gnupg-agent.md5sums
/tex-gyre.conffiles
/libavahi-common3:i386.shlibs
/libsystemd0:i386.symbols
/aptitude-doc-en.md5sums
/libtext-iconv-perl.list
/libgmp10:i386.shlibs
/libselinux1:i386.shlibs
/libxcb-render0:i386.shlibs
/libmagic1:i386.list
/libpython2.7-minimal:i386.prerm
/libss2:i386.postrm
/w3m.postinst
/libxcb-glx0:i386.postinst
/kbd.list
/xz-utils.list
/gsfonts.list
/libqt4-xml:i386.postinst
/perl.postinst
/libxfixes3:i386.postinst
/libubsan0:i386.symbols
/make.list
/libss2:i386.symbols
/x11-xserver-utils.postinst
/openssh-server.templates
/libauthen-sasl-perl.list
/libmime-tools-perl.md5sums
/cpp-4.9.list
/sgml-base.list
/apt-listchanges.md5sums
/ftp.list
/sgmlspl.md5sums
/python-docutils.list
/libpython3-stdlib:i386.md5sums
/libx11-xcb1:i386.postrm
/libgdk-pixbuf2.0-0:i386.symbols
/tex-common.conffiles
/libavahi-common3:i386.symbols
/python-pygments.prerm
/dictionaries-common.triggers
/tasksel.templates
/login.conffiles
/shared-mime-info.postrm
/apt.postinst
/klibc-utils.md5sums
/libatk1.0-0:i386.postinst
/libtcl8.6:i386.postrm
/adduser.templates
/libsigsegv2:i386.list
/libgl1-mesa-glx:i386.postinst
/util-linux.prerm
/libasan0:i386.shlibs
/libmng1:i386.list
/libuuid-perl.list
/libxml-xpathengine-perl.md5sums
/libavahi-client3:i386.symbols
/libgl1-mesa-glx:i386.list
/cpp.prerm
/at.postrm
/libcpan-meta-perl.list
/initscripts.md5sums
/libgpgme11:i386.postinst
/exim4.postrm
/prosper.md5sums
/ca-certificates.config
/libbz2-1.0:i386.shlibs
/tk.md5sums
/libfontenc1:i386.postinst
/ifupdown.md5sums
/install-info.triggers
/libncurses5:i386.postinst
/binutils.postrm
/initscripts.preinst
/python3.preinst
/gnupg-agent.list
/cpp.postinst
/libpam-modules:i386.postinst
/texlive-latex-base-doc.md5sums
/libpango-1.0-0:i386.list
/libxcomposite1:i386.md5sums
/net-tools.md5sums
/rename.md5sums
/fonts-droid.md5sums
/libdiscover2.shlibs
/libc6-i686:i386.list
/python3.4-minimal.postrm
/libasan0:i386.postinst
/gzip.md5sums
/base-passwd.postinst
/docutils-common.list
/tipa.postrm
/tzdata.templates
/libdigest-hmac-perl.list
/libpaper1:i386.templates
/libusb-0.1-4:i386.postrm
/texlive-base.postinst
/libsynctex1.md5sums
/libio-stringy-perl.list
/libcilkrts5:i386.symbols
/libpam-runtime.conffiles
/libxcb-present0:i386.shlibs
/base-files.list
/groff-base.postrm
/pciutils.md5sums
/liblwres90.shlibs
/libostyle1c2.md5sums
/libxmu6:i386.postinst
/aptitude.list
/libharfbuzz-icu0:i386.md5sums
/fonts-lmodern.list
/g++.list
/gcc-4.9.md5sums
/dh-python.md5sums
/libpotrace0.postrm
/libfile-homedir-perl.md5sums
/tex-common.md5sums
/libpsl0:i386.symbols
/libgdk-pixbuf2.0-0:i386.postinst
/libtk8.6:i386.md5sums
/fontconfig-config.conffiles
/libglapi-mesa:i386.list
/logrotate.conffiles
/libdigest-hmac-perl.md5sums
/bash-completion.conffiles
/libharfbuzz-icu0:i386.shlibs
/libswitch-perl.md5sums
/libavahi-client3:i386.postinst
/liblogging-stdlog0:i386.symbols
/librtmp1:i386.md5sums
/sgml-data.postinst
/python3-apt.md5sums
/libsigc++-2.0-0c2a:i386.shlibs
/zip.list
/x11-utils.list
/sgml-base.postrm
/libcupsfilters1:i386.md5sums
/debianutils.postinst
/libcurl3-gnutls:i386.symbols
/sgml-data.prerm
/sgml-data.list
/libssl1.0.0:i386.symbols
/texlive-bibtex-extra.list
/libxshmfence1:i386.md5sums
/apt-listchanges.postinst
/libxi6:i386.postrm
/texlive-base.postrm
/libirs-export91.md5sums
/python.list
/sgml-base.prerm
/xdg-user-dirs.list
/libxext6:i386.shlibs
/libyaml-tiny-perl.list
/zlib1g:i386.postinst
/libxcomposite1:i386.list
/libpam0g:i386.md5sums
/libasan1:i386.md5sums
/libxdamage1:i386.shlibs
/libpython2.7-dev:i386.list
/libhogweed2:i386.shlibs
/openssh-client.md5sums
/libopenjpeg5:i386.md5sums
/lmodern.list
/libxcb-shm0:i386.postinst
/libuuid1:i386.list
/libnfsidmap2:i386.shlibs
/libjpeg62-turbo:i386.shlibs
/libisccc90.shlibs
/libssl1.0.0:i386.templates
/liblzma5:i386.postinst
/libfont-afm-perl.list
/libcap2:i386.postrm
/ifupdown.postinst
/x11-common.postinst
/libgs9.postrm
/libexporter-lite-perl.md5sums
/emacsen-common.md5sums
/install-info.postinst
/exim4-config.postinst
/libbsd0:i386.postrm
/init.list
/libxtst6:i386.postinst
/libx11-data.md5sums
/libssl1.0.0:i386.shlibs
/locales.templates
/libpango-1.0-0:i386.symbols
/libcups2:i386.list
/libffi6:i386.postrm
/dc.postrm
/libisl10:i386.list
/texinfo.postinst
/liblocale-gettext-perl.md5sums
/libcairo2:i386.md5sums
/libuuid-perl.md5sums
/libcrypt-ssleay-perl.md5sums
/python3-debian.list
/libunistring0:i386.postrm
/docbook-xml.list
/libdb5.3:i386.shlibs
/libintl-perl.md5sums
/python2.7-minimal.preinst
/libpipeline1:i386.md5sums
/libtk8.6:i386.list
/libxrandr2:i386.md5sums
/grub-common.prerm
/texlive-pstricks-doc.md5sums
/autopoint.md5sums
/libnetfilter-acct1:i386.list
/libsoap-lite-perl.list
/docbook-dsssl.preinst
/dh-python.postinst
/libintl-perl.list
/libevent-2.0-5:i386.md5sums
/texlive-latex-recommended-doc.list
/t1utils.list
/libpython3.4-minimal:i386.postinst
/libsystemd0:i386.list
/at.postinst
/libnet-smtp-ssl-perl.md5sums
/libxinerama1:i386.shlibs
/libgcrypt20:i386.symbols
/libdebconfclient0:i386.postrm
/ucf.templates
/bash-completion.postrm
/python-debian.prerm
/libisccfg90.shlibs
/libllvm3.5:i386.postrm
/libhogweed2:i386.postinst
/libkrb5support0:i386.symbols
/texlive-pictures-doc.list
/fonts-texgyre.prerm
/libdatrie1:i386.symbols
/dput.md5sums
/grub-pc.conffiles
/rpcbind.postrm
/libostyle1c2.shlibs
/groff-base.md5sums
/preview-latex-style.postrm
/python.postinst
/perl.md5sums
/liblog-message-perl.list
/dictionaries-common.preinst
/telnet.postrm
/liblwres90.list
/insserv.md5sums
/libreadline6:i386.postrm
/libhttp-cookies-perl.md5sums
/libapt-pkg4.12:i386.postrm
/python3-six.list
/libxshmfence1:i386.symbols
/libparse-debianchangelog-perl.list
/libgl1-mesa-dri:i386.conffiles
/sgml-base.triggers
/libclass-c3-xs-perl.md5sums
/tk.preinst
/libbind9-90.md5sums
/libgpg-error0:i386.postinst
/libavahi-common3:i386.postinst
/libthai0:i386.symbols
/libpod-latex-perl.md5sums
/ucf.postrm
/python-six.list
/libavahi-common3:i386.list
/libstdc++6:i386.postinst
/xz-utils.postinst
/intltool-debian.md5sums
/udev.prerm
/python-support.postrm
/libdrm-intel1:i386.symbols
/libxpm4:i386.list
/texlive-extra-utils.list
/docbook-dsssl.md5sums
/libquadmath0:i386.postinst
/libpangoft2-1.0-0:i386.shlibs
/console-setup.templates
/libsepol1:i386.md5sums
/libgcrypt20:i386.shlibs
/libpoppler46:i386.list
/bash.list
/libaudit-common.list
/mime-support.triggers
/libfile-fcntllock-perl.list
/libthai0:i386.md5sums
/diffstat.md5sums
/libnettle4:i386.postrm
/ca-certificates.postrm
/libxslt1.1:i386.md5sums
/libklibc.md5sums
/libsys-hostname-long-perl.md5sums
/gnupg.md5sums
/libkeyutils1:i386.postinst
/libasan0:i386.list
/libpoppler46:i386.shlibs
/apt-utils.md5sums
/libc6:i386.shlibs
/libgcc-4.8-dev:i386.md5sums
/libubsan0:i386.md5sums
/e2fslibs:i386.list
/locales.md5sums
/liblognorm1:i386.symbols
/tcpd.list
/libfontconfig1:i386.postinst
/sed.list
/dh-python.prerm
/kernel-package.md5sums
/libx11-data.list
/libc-bin.list
/exim4-config.list
/dput.prerm
/perl-base.list
/libpython2.7-minimal:i386.postrm
/libjson-perl.md5sums
/man-db.md5sums
/install-info.md5sums
/libgtk2.0-0:i386.postinst
/prosper.postrm
/procmail.list
/xz-utils.md5sums
/sgml-data.md5sums
/libhtml-format-perl.md5sums
/libkpathsea6.list
/libcups2:i386.postrm
/libxext6:i386.postrm
/libsp1c2.postinst
/libgcrypt20:i386.list
/dbus.list
/libcryptsetup4:i386.md5sums
/bash.md5sums
/libidn11:i386.postinst
/linux-libc-dev:i386.list
/texlive-binaries.preinst
/unzip.postrm
/exim4-base.templates
/texlive-binaries.postinst
/isc-dhcp-client.postrm
/libusb-0.1-4:i386.postinst
/libruby2.1:i386.list
/xterm.list
/libnfnetlink0:i386.postinst
/bsdmainutils.postinst
/libxapian22.md5sums
/ps2eps.md5sums
/python3-magic.postinst
/apt-utils.list
/libharfbuzz0b:i386.symbols
/libncursesw5:i386.postinst
/libmagic1:i386.conffiles
/libpth20:i386.md5sums
/isc-dhcp-client.conffiles
/lintian.postrm
/ruby.list
/libsm6:i386.postinst
/ifupdown.prerm
/libio-sessiondata-perl.md5sums
/debian-archive-keyring.postinst
/libqtgui4:i386.postinst
/libharfbuzz-icu0:i386.postinst
/libpython2.7:i386.postinst
/ucf.preinst
/mount.prerm
/libpython-dev:i386.md5sums
/libencode-locale-perl.md5sums
/libopenjpeg5:i386.postinst
/w3m.list
/libxcb-sync1:i386.list
/libdevmapper1.02.1:i386.shlibs
/texlive-latex-recommended.postrm
/libsasl2-modules-db:i386.list
/devscripts.prerm
/libksba8:i386.md5sums
/libxau6:i386.postinst
/libselinux1:i386.postrm
/libxrender1:i386.list
/libpam-modules:i386.postrm
/lmodern.md5sums
/libcomerr2:i386.shlibs
/docutils-common.postinst
/libasan0:i386.symbols
/libpixman-1-0:i386.shlibs
/laptop-detect.list
/libedit2:i386.symbols
/tzdata.config
/libnfsidmap2:i386.postrm
/mount.list
/libtext-wrapi18n-perl.list
/busybox.md5sums
/libio-string-perl.list
/libsemanage1:i386.list
/diffutils.md5sums
/javascript-common.md5sums
/texlive-latex-base.postinst
/libestr0.postrm
/liblcms2-2:i386.postrm
/iamerican.list
/libgpgme11:i386.shlibs
/openjade.postrm
/libslang2:i386.shlibs
/libdebconfclient0:i386.symbols
/tcl.preinst
/libslang2:i386.list
/tcpd.md5sums
/libdns100.shlibs
/procps.preinst
/ncurses-term.list
/xml-core.md5sums
/x11-xserver-utils.list
/aptitude-doc-en.list
/docbook-xml.conffiles
/libss2:i386.shlibs
/vim-common.list
/libglapi-mesa:i386.postinst
/libcroco3:i386.md5sums
/libpython-stdlib:i386.list
/perl.list
/docbook-xml.postrm
/libc6-i686:i386.postrm
/libjasper1:i386.list
/libxxf86vm1:i386.shlibs
/libxml-sax-perl.postrm
/libxml-sax-expat-perl.prerm
/libexpat1:i386.list
/libbsd0:i386.list
/texlive-fonts-recommended.postinst
/libtext-template-perl.list
/xz-utils.prerm
/texlive-font-utils.postrm
/console-setup.config
/grub-pc.preinst
/libxcb-shape0:i386.postrm
/python-pygments.md5sums
/console-setup-linux.conffiles
/mawk.postinst
/libcups2:i386.shlibs
/libmagic1:i386.md5sums
/librtmp1:i386.postrm
/libxaw7:i386.postrm
/vim-common.preinst
/libarchive-extract-perl.md5sums
/python3.4.md5sums
/libgdk-pixbuf2.0-0:i386.triggers
/libsqlite3-0:i386.postinst
/libxml-sax-base-perl.list
/libdb5.3:i386.postinst
/libsmartcols1:i386.md5sums
/libxt6:i386.list
/debconf.preinst
/libdbus-1-3:i386.md5sums
/libtirpc1:i386.md5sums
/libfontconfig1:i386.postrm
/liburi-perl.md5sums
/libxml2:i386.md5sums
/libglib2.0-0:i386.list
/tar.list
/g++.postinst
/libfile-which-perl.md5sums
/libffi6:i386.list
/libunistring0:i386.shlibs
/libxtables10.postrm
/libnewt0.52:i386.shlibs
/libgs9-common.list
/libkrb5-3:i386.md5sums
/adduser.md5sums
/libhttp-message-perl.md5sums
/sysv-rc.preinst
/procps.list
/libfuse2:i386.shlibs
/liblzma5:i386.symbols
/libmagic1:i386.shlibs
/python3-pkg-resources.md5sums
/libbind9-90.postrm
/libxext6:i386.md5sums
/nano.postrm
/libio-socket-ssl-perl.md5sums
/libfontenc1:i386.list
/libgtk2.0-common.md5sums
/libnetfilter-acct1:i386.md5sums
/libdbus-1-3:i386.postrm
/libgl1-mesa-glx:i386.shlibs
/libdiscover2.md5sums
/iamerican.md5sums
/libclass-inspector-perl.md5sums
/libdatrie1:i386.list
/libasan1:i386.postinst
/libcgi-pm-perl.md5sums
/fontconfig-config.preinst
/libalgorithm-diff-perl.md5sums
/dpkg-dev.preinst
/libgl1-mesa-dri:i386.md5sums
/systemd.conffiles
/libconvert-binhex-perl.md5sums
/libcroco3:i386.shlibs
/libgpgme11:i386.md5sums
/build-essential.list
/libossp-uuid-perl.list
/libmpdec2:i386.shlibs
/libpcre3:i386.postrm
/xterm.conffiles
/systemd.preinst
/libxslt1.1:i386.shlibs
/liblzma5:i386.shlibs
/lintian.md5sums
/libbsd0:i386.md5sums
/base-files.postinst
/vim-tiny.postinst
/libexpat1:i386.md5sums
/format
/libnfnetlink0:i386.postrm
/hicolor-icon-theme.md5sums
/libzzip-0-13:i386.postinst
/libssl-doc.list
/libxcb-present0:i386.postinst
/lsb-release.prerm
/initramfs-tools.triggers
/libcurl3-gnutls:i386.list
/dpkg.postrm
/e2fslibs:i386.postinst
/tzdata.list
/libxcb-present0:i386.postrm
/libdb5.3:i386.postrm
/python-wstools.prerm
/libxml2-utils.md5sums
/libbz2-1.0:i386.list
/libudev1:i386.postrm
/dash.templates
/bsd-mailx.postinst
/liblzma5:i386.md5sums
/libisl10:i386.shlibs
/libisccc90.postinst
/netbase.md5sums
/libxcb-render0:i386.md5sums
/iso-codes.md5sums
/libjbig0:i386.postinst
/libqtgui4:i386.shlibs
/python2.7-minimal.postinst
/libxtables10.md5sums
/lsb-base.md5sums
/ibritish.list
/procps.postinst
/libcurl3-gnutls:i386.postrm
/openssh-server.prerm
/initramfs-tools.list
/hostname.md5sums
/rpcbind.prerm
/libksba8:i386.postinst
/libexpat1:i386.postinst
/libhttp-daemon-perl.md5sums
/liberror-perl.md5sums
/libxml-sax-expat-perl.postinst
/libslang2:i386.postrm
/libcap-ng0:i386.list
/libssl1.0.0:i386.postrm
/rsyslog.list
/libbsd0:i386.symbols
/libnet-domain-tld-perl.list
/libnet-ssleay-perl.list
/dctrl-tools.postrm
/libmnl0:i386.list
/traceroute.postinst
/bsdutils.list
/libgeoip1:i386.md5sums
/libalgorithm-diff-perl.list
/libwebpmux1:i386.postrm
/bzip2.md5sums
/libcurl3-gnutls:i386.md5sums
/cpio.md5sums
/texlive-pictures.postinst
/discover.conffiles
/findutils.md5sums
/python3.4-minimal.postinst
/rpcbind.md5sums
/libdrm-intel1:i386.postinst
/libgtk2.0-0:i386.preinst
/libjpeg62-turbo:i386.postinst
/ncurses-base.list
/libcap2-bin.list
/libx11-protocol-perl.md5sums
/libxt6:i386.postinst
/libwebpmux1:i386.postinst
/krb5-locales.list
/libncursesw5:i386.symbols
/libelf1:i386.list
/libquadmath0:i386.shlibs
/libsystemd0:i386.postinst
/fontconfig.list
/libkrb5-3:i386.postinst
/openssh-server.conffiles
/libnewt0.52:i386.postrm
/libxcb-dri2-0:i386.list
/libwebp5:i386.shlibs
/libx11-xcb1:i386.md5sums
/libdns100.md5sums
/libmpfr4:i386.md5sums
/libjson-xs-perl.list
/libelf1:i386.symbols
/libxau6:i386.list
/systemd.list
/nano.postinst
/libpython2.7-minimal:i386.postinst
/libwebpdemux1:i386.md5sums
/cpp-4.9.md5sums
/libxdmcp6:i386.shlibs
/openssl.conffiles
/net-tools.list
/reportbug.postinst
/libxcb-dri3-0:i386.postinst
/libpython2.7-stdlib:i386.md5sums
/libssl-dev:i386.list
/texlive-pictures.md5sums
/sysv-rc.postrm
/var/log/wtmp
/bin/netstat
/libthai0:i386.shlibs
/mlocate.conffiles
/libidn11:i386.list
/e2fslibs:i386.postrm
/libgs9.symbols
/libsasl2-2:i386.postinst
/fonts-texgyre.postinst
/linux-base.postinst
/libcupsimage2:i386.list
/whiptail.conffiles
/libdrm-intel1:i386.postrm
/texlive-fonts-recommended.md5sums
/python3-six.prerm
/libxss1:i386.postinst
/libmail-sendmail-perl.md5sums
/dnsutils.list
/libtirpc1:i386.shlibs

Network activity:

Establishes connection:

8.#.8.8:53
18#.###.25.169:12984

Sends data to the following servers:

18#.###.25.169:12984

Other:

Collects CPU information

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations