Talk about a Linux Trojan attack data full caused by MySQL cannot start

Initially thought it was MySQL that the extension between them did not open!

Later found that the Trojan did make it initialized, and at first did not use a graphical interface

Then, modify and turn on all PDO extensions

VIM basic operation (except for inserting, the other command is the premise of pressing ESC):

insert: I  press ESC to operate (if you want to force exit, you need to add !) ) Exit: Q Exit and Save: Wq

Inquire

Example:/XXX instance:/Pdo_

Cat View Commands (The following parameters are viewed from each)

Example:cat  XXX instance:cat php.ini

Query the contents of the current directory file:

To find a file or folder:

Query the directory that is currently located:

Pwd

MySQL Operation:

Turn on stop restart MySQL

Service mysqld startservice mysqld stopservice mysqld Restart

Turn off log file generation

Find the MY.CNF, and then find the following two lines, plus (#)

Log-bin=mysql-binbinlog_format=mixed

Windows remote download Linux files above

Using PSCP

Initially wanted to use Xshell, and later found that the server could not download Lrzsz (lack of space), so that later ruled out a lot of possibilities

Since the start of the deployment with the pagoda Linux, so to download the official website tools

https://www.bt.cn/

Installing CentOS:

Yum Install wget wget install. sh http:///download.bt.cn/install/install.sh && sh install.sh

After the successful landing, after the installation interface, it pops up the login background information (an address and background login password and account)

Finally, through the graphical interface to solve the view hard disk found full, and finally remove the MySQL log files to solve the problem, note that after the removal of the Recycle Bin cleanup is ok!

Talk about a Linux Trojan attack data full caused by MySQL cannot start