for i in $(ps -ef |egrep "ksapdd|kysapdd|atddd|ksapdd|skysapdd|xfsdxd|cupsdd|cupsddh" |grep -v grep|awk '{print $2}');do kill -9 $i;done
2.删除黑客程序
rm -f /boot/pro rm -f /etc/ksapdd rm -f /etc/kysapdd rm -f /etc/atddd rm -f /etc/ksapdd rm -f /etc/skysapdd rm -f /etc/xfsdxd rm -f /etc/cupsdd rm -f /etc/cupsddd rm -f /etc/cupsddh
3.清空 rc.local的内容 ,保留
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don't
# want to do the full Sys V style init stuff.
touch /var/lock/subsys/local
一台公网服务器出现后门程序,也就是设置的密码太简单,解决办法,立即进行相关处理。
安全注意事项:1、设置密码,一定要复杂;
2、不要开放 22端口对外;
3、如条件一定需要限制IP对22的访问。