Centos6 服务器病毒查杀命令历史

            top

            whereis
             vhowazeclu 
ll /usr/bin/v*
more /usr/bin/vhowazeclu 
ps aux|grep vhowa
ps aux|grep vhowazeclu
top
sudokill -912789
top
whereis nwymhcrsts
crontab -L
crontab -l
crontab -u root -l
sudo crontab -u root -l
top
ll /usr/bin/nw*
ll /usr/bin/
ll /usr/bin/v*
ll /usr/bin/nw*
sz /usr/bin/nwymhcrsts 
sudowho /var/log/wtmp
ll /var/www/html
sudomore /etc/passwdsudomore /var/log/messages
sudomore /var/log/messages-20151206sudomore /var/log/messages-20151213sudoyuminstall clamd
top
whereis gfty
top
sudomore /root/.bash_history
history
ll
chkconfig --list
chkconfig --list|grep3:on
ll /etc/init.d/nw*
more /etc/init.d/nwymhcrsts 
more /etc/init.d/iomhsvcscl 
ll /boot/
sz /boot/iomhsvcscl 
ll /usr/bin/nwymhcrsts 
ll
ll /usr/bin/nwymhcrsts 
ll /boot/

ll /boot/
sudo /sbin/service stop iomhsvcscl
sudorm /etc/init.d/iomhsvcscl 
sudorm /etc/init.d/nwymhcrsts 
sudorm /usr/bin/nwymhcrsts 
ps aux|grep nwym
top
sudokill -917439
top
whereis gfty
sudofind / -name "gftp"
top
ll
chkconfig --list
chkconfig --list|grep3:on
sudo /sbin/service fwcxsowfpo stop
chkconfig --list|grep3:on
ll
ll /boot/
history
sudowho /var/log/wtmp
cd /opt/nginx/
ll
more conf/nginx.conf
ll
ps aux|grep nginx
chkconfig --list|grep3:on
vi /etc/crontab 
chkconfig --list|grep3:on
top
ll /boot/
ll /etc/init.d/
top
qqqqqq
sudoyum update udev
sudo /sbin/service udev restart
ll /etc/init.d/
sudo /sbin/service udev-post restart
sudo /sbin/service udev-post reload
top
sudokill -931966
top
whereis iomhsvcscl
sudofind -name "iomhsvcscl"
top
sudokill -98199sudokill -96983
top
ll
ll /lib/udev/
ll /boot/
netstat -anp
ll
cd /b
cd /boot/
ll
sudorm mrudpgugqo 
ll
top
sudokill -97430
top
history
sudoyuminstall clamd
sudo service clamd start
freshclam
sudo freshclam
sudo service clamd start
sudo clamscan
top
ll /boot/
ll
top
sudokill -99644
top
ll /usr/bin/bu*
top
exit
ll
ll /etc/cron.hourly/
more /etc/cron.hourly/cron.shmore /etc/cron.hourly/kill.sh 
ll /lib/libkill*
ll /lib/libki*
ll /lib/libki*.*
sudorm /etc/cron.hourly/cron.shsudorm /etc/cron.hourly/kill.sh 
exit
ll
echo $PATH
whereiskill
ll /bin/kill
ll /lib/libkill*
sudorm /lib/libkill.so 
ll /lib/
ll /lib/udev/
sudorm /lib/udev/udev
ll /lib/udev/
ll /boot/
sudo reboot
top
ll /etc/init.d/
sudorm /etc/init.d/bukvldtgol
ll
echo $PATH
top
sudo /bin/kill -9950
top
ll
top
more /etc/init.d/esyaqrszzf 
sudorm /usr/bin/esyaqrszzf 
top
ll /etc/cron.hourly/
ll /etc/cron.daily/
ll /etc/cron.weekly/
ll /etc/cron.monthly/
ll /etc/cron.d
more /etc/crontab 
sudovi /etc/crontab 
sudorm /etc/cron.monthly/readahead-monthly.cron 
ll
top
sudo /bin/kill -91719
top
ll
ll /boot/
ll /lib/udev/
ll /lib/lib*
sudorm /lib/libkill.so
ll /lib/lib*
clear
ll /lib/lib*
sudorm /lib/libkill.so
ll /lib/lib*
whereisrm
ll /bin/
ll
ps aux|grepkill
top
sudokill -92238 & sudorm /lib/libkill.so
ll /lib/lib*
sudovi /lib/libkill.so 
ll /lib/lib*
top
sudokill -93005
top
sudofind / -name "gfty"
ll /tmp/
sz /tmp/gfty 
sudorm /tmp/gfty 
sudochattr -a /tmp/gfty 
sudorm /tmp/gfty 
cd /tmp/
ll
sudochattr -i /tmp/gfty 
sudorm /tmp/gfty 
ll
ll ssh-xeYWxg1130/
cd
top
sudofind / -name "gfty"
top
sudo /bin/kill -91058
top
sudofind / -name "gfty"sudo /bin/kill -93456
cd /tmp/
ll
sudochattr -i gfty 
sudorm gfty 
ll
top
sudofind / -name "getty"
ll /usr/bin/bsd-port/
sudorm -r /usr/bin/bsd-port/
ll /usr/bin/b*
sudokill -93462
ll /usr/bin/b*
ll /tmp/
sudochattr -i gfty 
sudorm gfty 
ll
top
ll
sudofind / -name "geetty"sudofind / -name "getty"sudofind / -name "gfty"
ll
ll /usr/bin/b*
whereis gfty
whereis getty
top
ps aux|grep gfty
ps aux|grep getty
ll /sbin/mingetty
ll 
ll -a
sudokill -9980ps aux|grep getty
ps aux|grep gfty
sudokill -9992ps aux|grep gfty
sudokill -9992sudokill -93680sudokill -9992ps aux|grep gfty
ll
sudochattr -i gfty
sudorm gfty
ll
sudokill -93868
top
sudokill -93877
ll
top
cd
ps aux|grep clam
sudo clamscan -r /
sudo clamscan -r /usr --remove
sudo clamscan -r /lib -i
ll /lib/lib*
sudo clamscan -r /lib
sudo clamscan /lib
sudo freshclam
sudo clamscan /boot/
sudo clamscan /usr/bin/
sudo clamscan /tmp/
sudo service clamd start
sudo service clamd status
cd /tmp/
sudochattr -i gfty
sudorm gfty 
ll
clamscan -V
sudo service clamd status
top
sudofind / -name getty
sudo clamscan -r /usr/bin/bsd-port/
sudorm -r /usr/bin/bsd-port/
sudokill -93948
ll /usr/bin/b*
ll
top
ll
sudofind / -name getty
ps aux|grep getty
ps |grep getty
top -c
ll /usr/bin/b* -a
sudokill3686
top -c
ll /usr/local/aegis/aegis_client/
ll /usr/local/aegis/aegis_update/
more /usr/local/aegis/aegis_update/install.shsudomore /usr/local/aegis/aegis_update/install.sh 
top
top -c
sudochattr -i gfty
ll
sudokill -93942
top -c
ll /sbin/i*
top -c
sudokill -94230
top -c
sudokill -94236rm -r /usr/bin/bsd-port/
sudorm -r /usr/bin/bsd-port/
top -c
sudo clamscan -r /usr/local/aegis/
ll /lib/lib*
sudorm /lib/libkill*.*
ll /lib/lib*
ll /etc/cron.hourly/
more /etc/cron.hourly/kill.shsudorm /etc/cron.hourly/kill.sh 
ll /proc/net/dev/
more /proc/net/dev
sudo service crontab restart
sudo service crond restart
sudo service crond stop
ll /lib/lib*
ll
sudochattr -i gfty 
sudorm gfty 
ll /usr/bin/bs*
cd /usr/bin/
ls bs*
lsls bs*.*
ls bs*
sudorm -r bsd-port/
top
top -c
sudokill -94293
top -c
sudokill -94302
top -c
cd /tmp/
ll
sudochmod000 gates.lod 
ll
sudochattr -i gfty 
sudorm gfty 
sudochmod000 moni.lod 
sudo service sendmail stop
rm -rf /usr/bin/bsd-port/
sudorm -rf /usr/bin/bsd-port/
sudorm moni.lod 
sudorm gates.lod 
ll /bin/
sudorm /bin/pssudo clamscan -r /bin/
sudorm /bin/netstat 
whereis top
ll /usr/bin/
sudo clamscan -r /usr/bin/
sudo clamscan -r /usr/bin/ --remove
ll
sudochattr -i gfty 
sudorm gfty 
top -c
sudorm -r /usr/bin/bsd-port/
sudokill -94432
top -c
sudokill -94516
top -c
ll /bin/killsudokill -94426sudokill -94509
top -c
ll /etc/init.d/
sudorm /etc/init.d/mrudpgugqo
ll /etc/init.d/
sudorm /etc/init.d/tjsorcvxtt
ll /etc/init.d/
more /etc/init.d/selinux 
sudorm /etc/init.d/selinux 
sudorm /etc/init.d/DbSecuritySpt
top -c
sudo reboot
top
top -c
ll /etc/init.d/
ll /tmp/
ll /bin/
ll /usr/bin/bs*
ll /boot/
top
top -c
ll
cd /etc/sysconfig/sshd 
vi /etc/ssh/sshd_config 
sudovi /etc/ssh/sshd_config 
sudo service sshd restart
exit
ll
top -c
ll /opt/nginx/
ll /opt/nginx/sbin/
sudopasswd root
exit
top -c
ll
whereisls
rz
ll
sudomv netstat /bin/
sudomvps /bin/
ll /bin/
cd /b
cd /bin/
sudochown root:root pssudochown root:root netstat 
sudochmod a+x pssudochmod a+x netstat 
ll
ll /etc/alternatives/ks*
pwd
ll
cd
ll
top -c
whereis lsof
ll /usr/sbin/
cd
rz
ll
sudochown root:root lsof 
sudochmod a+x lsof 
sudomv lsof /usr/sbin/
whereis lsof
lsof -i
sudo lsof -i
exit
top -c
ll
exit
top -c
exit