阻拦矿机木马脚本

#!/bin/bash

iptables -A OUTPUT -m string --string "tor2web" --algo bm --to 65535 -j DROP

iptables -A OUTPUT -m string --string "onion" --algo bm --to 65535 -j DROP

tmpf=/tmp/pidlist.tmp

pidpath=/tmp/.X11-unix

ls -l $pidpath

cat $pidpath/* >$tmpf

cat $tmpf | while read LINE

do

echo "will kill " $LINE

kill -9 $LINE

done

mv /usr/bin/base64 /usr/bin/base64_org

cp /usr/bin/df /usr/bin/base64

rm -f $pidpath/*

service crond start

ps -ef | grep crond