Common commands for Linux virus

1. View the network ports for the abnormal connections and their corresponding processes

NETSTAT-ANLP | grep EST

2. Look at the location of the executable file corresponding to the process ID

PS 2393 can see where the executable file of the process is?

3. Temporarily shut down the gateway, cut off the connection of the virus program out of the network

Route del default GW 119.90.54.161

4. Enter the boot start folder/ETC/RC.D/INIT.D/ETC/INIT.D and the scheduled task folder according to the new date, whether it is an exception file

LS-LRT | More in reverse order

Common commands for Linux virus