Ezmy<p>This compromised VPS situation is really frustrating but I think I'm learning more of how to really use Linux and Administrate it.</p><p>; separates commands so you can delete multiple users at once. And clean several folders at once, and kill multiple processes at once.</p><p>I need to then preemptively stop all kworker processes from starting.</p><p>Which folders do I need cleaned and which processes do I need do I need stopped on launch.. systemd, and anything with systemd in the name, I need to re-init a basic bash file.</p><p>Is this where I actually learn bash hacking?</p><p>Just thinking here, It saves the whole thing to a CPU buffer which is then loaded the next time the CPU is turned on.. it stores files in tmp using a system service, it is not found by clam_av.. it uses compromised system files.. I guess I could rebuild, put it in rescue mode and try all the cleaning steps I've tried..<br><a href="https://defcon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Linux</span></a> <a href="https://defcon.social/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>malware</span></a> <a href="https://defcon.social/tags/arch_linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>arch_linux</span></a></p>