linux conf.n木马,centos netstat和ps感染木马解决方案

解决方法：

a.去除恶意文件的执行权限

chmod 000 /tmp/gates.lod   /tmp/moni.lod    service sendmail stop chkconfig --level 345 sendmail off chmod -x  /usr/sbin/sendmail chmod -R 000  /root/*rar* chattr -i /root/conf.n chmod -R 000 /root/conf.n* rm -rf  /usr/bin/lixww

rm -rf  /usr/bin/bsd-port/getty rm -rf   /tmp/gates.lock

rm -rf  /tmp/moni.lock

rm -rf  /usr/bin/bsd-port/getty.lock

rm -rf  /usr/bin/bsd-port/conf.n

/lib/lib3.so.1            delete file

/var/opt/lm/iisdate       delete上级目录

/usr/sbin/lsof            ok,reinstall

/usr/bin/bsd-port/getty   delete上级目录

/usr/bin/.sshd            delete .sshd*

/bin/ps                   ok,reinstall

/bin/netstat              ok,reinstall

/bin/.iptab4              delete file

强制重新安装以下软件包，覆盖被感染文件