問題:
服務器中了木馬,每隔幾十秒就會自動啓動一個腳本進程,佔用CPU
解決方式:
寫一個 shell 腳本,定時清理木馬進程
# kill_macron.sh
#!/bin/bash
sleep_time=10
int=1
while(($int<1000))
do
echo "===== `date` ====="
pid=`ps -aux |grep "Macron"|grep -v "grep" |awk '{print $2}'`
wc=`ps -aux |grep "Macron"|grep -v "grep" |awk '{print $2}'|wc -l`
#echo "wc = " $wc
if [ $wc -ne "0" ];then
echo "kill -9 $pid"
kill -9 $pid
fi
sleep $sleep_time
done
再寫啓動進程腳本以及停止進程腳本:
# start.sh
# /bin/bash
nohup sh ./kill_macron.sh > kill_log.log &
tail -f ./kill_log.log
# stop.sh
# /bin/bash
pid=`ps -aux |grep "kill_macron"|grep -v "grep" |awk '{print $2}'`
wc=`ps -aux |grep "kill_macron"|grep -v "grep" |awk '{print $2}'|wc -l`
if [ $wc -ne "0" ];then
echo "kill -9 $pid"
kill -9 $pid
fi
ps -ef|grep "kill_macron"