Auto killing process with specific command line?

DennisMidjord

• March 20, 2019 03:03

Since the latest WordPress vulnerability was disclosed, we've seen a lot of infected websites. LFD often reports that a suspicious process called '[stealth]' is running, and this is indeed malware running on the server. Is there any way to auto kill this exact command line? If anything runs and displays as [stealth], just kill it immediately?

• 

  cPanelLauren

  • March 21, 2019 21:01

  There's nothing within cPanel/WHM that would do this but I am sure that you'd be able to find some great bash script tutorials/examples that detail how to create something like this.

  0
• 

  alias harun

  • March 30, 2021 03:53

  I use this 2 command ps -ef | grep stealth ls -l /proc/1756392/exe
  

  0

Please sign in to leave a comment.