top whereis vhowazeclu ll /usr/bin/v* more /usr/bin/vhowazeclu ps aux|grep vhowa ps aux|grep vhowazeclu top sudo kill -9 12789 top whereis nwymhcrsts crontab -L crontab -l crontab -u root -l sudo crontab -u root -l top ll /usr/bin/nw* ll /usr/bin/ ll /usr/bin/v* ll /usr/bin/nw* sz /usr/bin/nwymhcrsts sudo who /var/log/wtmp ll /var/www/html sudo more /etc/passwd sudo more /var/log/messages sudo more /var/log/messages-20151206 sudo more /var/log/messages-20151213 sudo yum install clamd top whereis gfty top sudo more /root/.bash_history history ll chkconfig --list chkconfig --list|grep 3:on ll /etc/init.d/nw* more /etc/init.d/nwymhcrsts more /etc/init.d/iomhsvcscl ll /boot/ sz /boot/iomhsvcscl ll /usr/bin/nwymhcrsts ll ll /usr/bin/nwymhcrsts ll /boot/ ll /boot/ sudo /sbin/service stop iomhsvcscl sudo rm /etc/init.d/iomhsvcscl sudo rm /etc/init.d/nwymhcrsts sudo rm /usr/bin/nwymhcrsts ps aux|grep nwym top sudo kill -9 17439 top whereis gfty sudo find / -name "gftp" top ll chkconfig --list chkconfig --list|grep 3:on sudo /sbin/service fwcxsowfpo stop chkconfig --list|grep 3:on ll ll /boot/ history sudo who /var/log/wtmp cd /opt/nginx/ ll more conf/nginx.conf ll ps aux|grep nginx chkconfig --list|grep 3:on vi /etc/crontab chkconfig --list|grep 3:on top ll /boot/ ll /etc/init.d/ top qqqqqq sudo yum update udev sudo /sbin/service udev restart ll /etc/init.d/ sudo /sbin/service udev-post restart sudo /sbin/service udev-post reload top sudo kill -9 31966 top whereis iomhsvcscl sudo find -name "iomhsvcscl" top sudo kill -9 8199 sudo kill -9 6983 top ll ll /lib/udev/ ll /boot/ netstat -anp ll cd /b cd /boot/ ll sudo rm mrudpgugqo ll top sudo kill -9 7430 top history sudo yum install clamd sudo service clamd start freshclam sudo freshclam sudo service clamd start sudo clamscan top ll /boot/ ll top sudo kill -9 9644 top ll /usr/bin/bu* top exit ll ll /etc/cron.hourly/ more /etc/cron.hourly/cron.sh more /etc/cron.hourly/kill.sh ll /lib/libkill* ll /lib/libki* ll /lib/libki*.* sudo rm /etc/cron.hourly/cron.sh sudo rm /etc/cron.hourly/kill.sh exit ll echo $PATH whereis kill ll /bin/kill ll /lib/libkill* sudo rm /lib/libkill.so ll /lib/ ll /lib/udev/ sudo rm /lib/udev/udev ll /lib/udev/ ll /boot/ sudo reboot top ll /etc/init.d/ sudo rm /etc/init.d/bukvldtgol ll echo $PATH top sudo /bin/kill -9 950 top ll top more /etc/init.d/esyaqrszzf sudo rm /usr/bin/esyaqrszzf top ll /etc/cron.hourly/ ll /etc/cron.daily/ ll /etc/cron.weekly/ ll /etc/cron.monthly/ ll /etc/cron.d more /etc/crontab sudo vi /etc/crontab sudo rm /etc/cron.monthly/readahead-monthly.cron ll top sudo /bin/kill -9 1719 top ll ll /boot/ ll /lib/udev/ ll /lib/lib* sudo rm /lib/libkill.so ll /lib/lib* clear ll /lib/lib* sudo rm /lib/libkill.so ll /lib/lib* whereis rm ll /bin/ ll ps aux|grep kill top sudo kill -9 2238 & sudo rm /lib/libkill.so ll /lib/lib* sudo vi /lib/libkill.so ll /lib/lib* top sudo kill -9 3005 top sudo find / -name "gfty" ll /tmp/ sz /tmp/gfty sudo rm /tmp/gfty sudo chattr -a /tmp/gfty sudo rm /tmp/gfty cd /tmp/ ll sudo chattr -i /tmp/gfty sudo rm /tmp/gfty ll ll ssh-xeYWxg1130/ cd top sudo find / -name "gfty" top sudo /bin/kill -9 1058 top sudo find / -name "gfty" sudo /bin/kill -9 3456 cd /tmp/ ll sudo chattr -i gfty sudo rm gfty ll top sudo find / -name "getty" ll /usr/bin/bsd-port/ sudo rm -r /usr/bin/bsd-port/ ll /usr/bin/b* sudo kill -9 3462 ll /usr/bin/b* ll /tmp/ sudo chattr -i gfty sudo rm gfty ll top ll sudo find / -name "geetty" sudo find / -name "getty" sudo find / -name "gfty" ll ll /usr/bin/b* whereis gfty whereis getty top ps aux|grep gfty ps aux|grep getty ll /sbin/mingetty ll ll -a sudo kill -9 980 ps aux|grep getty ps aux|grep gfty sudo kill -9 992 ps aux|grep gfty sudo kill -9 992 sudo kill -9 3680 sudo kill -9 992 ps aux|grep gfty ll sudo chattr -i gfty sudo rm gfty ll sudo kill -9 3868 top sudo kill -9 3877 ll top cd ps aux|grep clam sudo clamscan -r / sudo clamscan -r /usr --remove sudo clamscan -r /lib -i ll /lib/lib* sudo clamscan -r /lib sudo clamscan /lib sudo freshclam sudo clamscan /boot/ sudo clamscan /usr/bin/ sudo clamscan /tmp/ sudo service clamd start sudo service clamd status cd /tmp/ sudo chattr -i gfty sudo rm gfty ll clamscan -V sudo service clamd status top sudo find / -name getty sudo clamscan -r /usr/bin/bsd-port/ sudo rm -r /usr/bin/bsd-port/ sudo kill -9 3948 ll /usr/bin/b* ll top ll sudo find / -name getty ps aux|grep getty ps |grep getty top -c ll /usr/bin/b* -a sudo kill 3686 top -c ll /usr/local/aegis/aegis_client/ ll /usr/local/aegis/aegis_update/ more /usr/local/aegis/aegis_update/install.sh sudo more /usr/local/aegis/aegis_update/install.sh top top -c sudo chattr -i gfty ll sudo kill -9 3942 top -c ll /sbin/i* top -c sudo kill -9 4230 top -c sudo kill -9 4236 rm -r /usr/bin/bsd-port/ sudo rm -r /usr/bin/bsd-port/ top -c sudo clamscan -r /usr/local/aegis/ ll /lib/lib* sudo rm /lib/libkill*.* ll /lib/lib* ll /etc/cron.hourly/ more /etc/cron.hourly/kill.sh sudo rm /etc/cron.hourly/kill.sh ll /proc/net/dev/ more /proc/net/dev sudo service crontab restart sudo service crond restart sudo service crond stop ll /lib/lib* ll sudo chattr -i gfty sudo rm gfty ll /usr/bin/bs* cd /usr/bin/ ls bs* ls ls bs*.* ls bs* sudo rm -r bsd-port/ top top -c sudo kill -9 4293 top -c sudo kill -9 4302 top -c cd /tmp/ ll sudo chmod 000 gates.lod ll sudo chattr -i gfty sudo rm gfty sudo chmod 000 moni.lod sudo service sendmail stop rm -rf /usr/bin/bsd-port/ sudo rm -rf /usr/bin/bsd-port/ sudo rm moni.lod sudo rm gates.lod ll /bin/ sudo rm /bin/ps sudo clamscan -r /bin/ sudo rm /bin/netstat whereis top ll /usr/bin/ sudo clamscan -r /usr/bin/ sudo clamscan -r /usr/bin/ --remove ll sudo chattr -i gfty sudo rm gfty top -c sudo rm -r /usr/bin/bsd-port/ sudo kill -9 4432 top -c sudo kill -9 4516 top -c ll /bin/kill sudo kill -9 4426 sudo kill -9 4509 top -c ll /etc/init.d/ sudo rm /etc/init.d/mrudpgugqo ll /etc/init.d/ sudo rm /etc/init.d/tjsorcvxtt ll /etc/init.d/ more /etc/init.d/selinux sudo rm /etc/init.d/selinux sudo rm /etc/init.d/DbSecuritySpt top -c sudo reboot top top -c ll /etc/init.d/ ll /tmp/ ll /bin/ ll /usr/bin/bs* ll /boot/ top top -c ll cd /etc/sysconfig/sshd vi /etc/ssh/sshd_config sudo vi /etc/ssh/sshd_config sudo service sshd restart exit ll top -c ll /opt/nginx/ ll /opt/nginx/sbin/ sudo passwd root exit top -c ll whereis ls rz ll sudo mv netstat /bin/ sudo mv ps /bin/ ll /bin/ cd /b cd /bin/ sudo chown root:root ps sudo chown root:root netstat sudo chmod a+x ps sudo chmod a+x netstat ll ll /etc/alternatives/ks* pwd ll cd ll top -c whereis lsof ll /usr/sbin/ cd rz ll sudo chown root:root lsof sudo chmod a+x lsof sudo mv lsof /usr/sbin/ whereis lsof lsof -i sudo lsof -i exit top -c ll exit top -c exit