5938724b6b41a834ac695529dd104ed0 2010 12 20 intentional 1.0 ordinary_users multi no proteas,dionisos,slart,cn1,panoptis 3,10,20,70 linux 2.6 DoS software install DoS loiq This signature predicts the usage of the Low Orbit Ion Cannon tool for DDoS attacks. as_a_result_of AND loiq executable OR (#userhome#/*,/site/*,/tmp/*,/temp/*) yes johnc loiq.pro textdata OR(#userhome#/*,/site/*,/tmp/*,/temp/*) johnc yes loiq.qrc textdata OR(#userhome#/*,site/*,/tmp/*,/temp/*) yes johnc single johnc OR (file-roller,tar,bunzip2) OR(/usr/bin/,/usr/local/bin) yes loiq*.bz2 any single * any OR (#userhome#/.mozilla/*,#userhome#/.opera) yes "http://sourceforge.net/projects/loiq" johnc