A linux system poisoning record

A linux system poisoning record
On the company's linux server, we found that the cpu load was too high. Use top to see the abnormal process: ijcfwyjoqk
The parent process is init.
Run: ps-l 10854. The cmd column is displayed as uptime.
Run: whereis ijcfwyjoqk. The file is displayed in/usr/bin and found to exist in the/etc/init. d and/etc/rc. d/rc3.d directories (S90ijcfwyjoqk)
Then: cat/etc/rc. d/rc3.d/S90ijcfwyjoqk

Execute: After kill 10854 is used again for a few seconds, a similar process appears (the inner Xiaoqiang)

Execution: crontab-l has no schedule

Even more 0, some people in the QQ group experienced the same fault as me today, and they watched the same Trojan Horse. Below is the qq group chat




It is exactly the same as my symptoms. No one in the group can solve the problem. It seems that only the system is redone.