別說別人, 你每次輸入口令前, 都會檢查是否有可疑程序, 並有本事輕易地發現可疑程序?

wzis1 · 2012-10-25 15:29:29Z

別說別人, 你每次輸入口令前, 都會檢查是否有可疑程序, 並有本事輕易地發現可疑程序?簡介

來源: wzis1 於 2012-10-25 15:29:29 [檔案] [博客] [舊帖] [給我悄悄話] 閱讀數 : (22673 bytes)

回答: 不要不懂裝懂。在後台跑一個可疑程序，其他人員會毫無察覺?你以為別人都是傻瓜? 由加州老李於 2012-10-24 18:50:31

那請看看下麵的"ps -ef"輸出裏,是否有可疑的程序?

# ps -ef

UID PID PPID C STIME TTY TIME CMD

root 0 0 0 Oct 17 ? 0:11 sched

root 1 0 0 Oct 17 ? 5:21 /*****in/init

root 2 0 0 Oct 17 ? 0:02 pageout

root 3 0 1 Oct 17 ? 59:35 fsflush

root 4195 4193 0 Oct 17 ? 0:00 vxnotify -C -w 15

root 7 1 0 Oct 17 ? 0:26 /lib/svc/bin/svc.startd

root 9 1 0 Oct 17 ? 1:31 /lib/svc/bin/svc.configd

root 415 1 0 Oct 17 ? 20:55 /usr/*****in/nscd

root 2263 7 0 Oct 17 console 0:00 /usr/lib/saf/ttymon -g -d /dev/console -l console -m ldterm,ttcompat -h -p wgon

webservd 2505 2475 0 Oct 17 ? 0:00 /usr/apache2/bin/httpd -k start

root 2294 1 0 Oct 17 ? 0:00 /usr/sadm/lib/smc/bin/smcboot

root 540 1 0 Oct 17 ? 0:00 /lib/svc/method/iscsid

daemon 2214 1 0 Oct 17 ? 1:05 /usr/lib/nfs/nfsmapid

root 2410 1 0 Oct 17 ? 0:00 /usr/lib/ssh/sshd

root 2006 1 1 Oct 17 ? 60:59 /usr/*****in/vradmind

root 760 1 0 Oct 17 ? 0:29 /*****in/vxesd

root 409 1 0 Oct 17 ? 1:03 /usr/lib/picl/picld

root 5945 1 0 Oct 17 ? 0:01 /usr/lib/utmpd

root 390 1 0 Oct 17 ? 0:00 /usr/lib/sysevent/syseventd

webservd 2504 2475 0 Oct 17 ? 0:00 /usr/apache2/bin/httpd -k start

root 4388 1 0 Oct 17 ? 1:09 /opt/VRTSsfmcs/sec/bin/sfmsecd -c /var/opt/VRTSsfmcs/sec

daemon 394 1 0 Oct 17 ? 0:01 /usr/lib/crypto/kcfd

root 2160 1 0 Oct 17 ? 0:44 /bin/sh - /etc/vx/vras/templates/vvr_stats

root 2420 1 0 Oct 17 ? 0:05 /usr/*****in/syslogd

root 2409 1 0 Oct 17 ? 0:00 /usr/*****in/vold -f /etc/vold.conf

root 450 1 0 Oct 17 ? 0:00 /usr/lib/power/powerd

root 2001 1 0 Oct 17 ? 0:00 /usr/*****in/in.vxrsyncd

root 491 1 0 Oct 17 ? 0:01 devfsadmd

daemon 2203 1 0 Oct 17 ? 0:00 /usr/*****in/rpcbind

root 2395 2394 0 Oct 17 ? 1:23 /usr/lib/autofs/automountd

daemon 2212 1 0 Oct 17 ? 0:00 /usr/lib/nfs/statd

daemon 2213 1 0 Oct 17 ? 0:00 /usr/lib/nfs/nfs4cbd

root 2229 1 0 Oct 17 ? 0:00 /usr/*****in/cron

webservd 2506 2475 0 Oct 17 ? 0:00 /usr/apache2/bin/httpd -k start

root 2394 1 0 Oct 17 ? 0:00 /usr/lib/autofs/automountd

root 2235 7 0 Oct 17 ? 0:00 /usr/lib/saf/sac -t 300

root 2236 1 0 Oct 17 ? 0:14 /usr/lib/inet/inetd start

daemon 2262 1 0 Oct 17 ? 0:00 /usr/lib/nfs/lockd

root 2264 1 0 Oct 17 ? 0:11 /usr/lib/utmpd

root 2244 2235 0 Oct 17 ? 0:00 /usr/lib/saf/ttymon

root 4174 2822 0 Oct 17 ? 0:00 /*****in/sh - /usr/lib/vxvm/bin/vxattachd root

root 2296 2294 0 Oct 17 ? 0:00 /usr/sadm/lib/smc/bin/smcboot

root 2295 2294 0 Oct 17 ? 0:00 /usr/sadm/lib/smc/bin/smcboot

root 12190 1 0 Oct 18 ? 23:38 /opt/VRTSvcs/bin/CVMCluster/CVMClusterAgent -type CVMCluster

root 2823 1 0 Oct 17 ? 0:00 /*****in/sh - /usr/lib/vxvm/bin/vxcached root

root 5708 1 0 Oct 17 ? 0:00 /usr/*****in/inetd -s

webservd 2503 2475 0 Oct 17 ? 0:00 /usr/apache2/bin/httpd -k start

root 2566 1 0 Oct 17 ? 0:16 /usr/lib/sendmail -bd -q15m

root 2530 1 0 Oct 17 ? 0:00 /usr/lib/dmi/snmpXdmid -s wgong

root 2482 1 0 Oct 17 ? 0:00 /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf

root 22126 22113 0 09:22:27 pts/3 0:00 -bash

root 2475 1 0 Oct 17 ? 0:26 /usr/apache2/bin/httpd -k start

root 6049 1 0 Oct 17 ? 26:43 /usr/lib/fm/fmd/fmd

webservd 2507 2475 0 Oct 17 ? 0:00 /usr/apache2/bin/httpd -k start

root 7009 7008 0 Oct 17 ? 0:00 vxnotify

root 4190 4188 0 Oct 17 ? 0:00 /usr/*****in/vxnotify -x -w 15

smmsp 2565 1 0 Oct 17 ? 0:01 /usr/lib/sendmail -Ac -q15m

root 2522 1 0 Oct 17 ? 0:00 /usr/lib/dmi/dmispd

daemon 5765 1 0 Oct 17 ? 0:00 /.SUNWnative/usr/lib/nfs/statd

root 2524 1 0 Oct 17 ? 0:17 /usr/sfw/*****in/snmpd

root 5885 1 0 Oct 17 ? 0:03 /usr/*****in/nscd

root 8872 1 0 Oct 18 ? 23:22 /opt/VRTSvcs/bin/NFS/NFSAgent -type NFS

root 5815 1 0 Oct 17 ? 0:00 /usr/lib/autofs/automountd

root 5972 5971 0 Oct 17 ? 0:00 /usr/sadm/lib/smc/bin/smcboot

root 5906 1 0 Oct 17 ? 0:00 /usr/lib/lpsched

root 4193 2823 0 Oct 17 ? 0:00 /*****in/sh - /usr/lib/vxvm/bin/vxcached root

root 5431 1 0 Oct 17 ? 0:00 /usr/lib/picl/picld

root 9544 3606 0 Oct 17 ? 0:00 /bin/sh /etc/init.d/init.cssd oclsvmon

noaccess 5111 1 0 Oct 17 ? 10:50 /usr/java/bin/java -server -Xmx128m -XX:+UseParallelGC -XX:ParallelGCThreads=4

root 3472 1 0 Oct 17 ? 11:59 /opt/VRTSsfmh/bin/vxdclid

root 21558 1 0 09:21:50 ? 0:01 /usr/*****in/dtrace -qs ./block_zero.d

root 3606 1 1 Oct 17 ? 30:27 /bin/sh /etc/init.d/init.cssd fatal

root 8864 1 0 Oct 18 ? 23:44 /opt/VRTSvcs/bin/CVMVxconfigd/CVMVxconfigdAgent -type CVMVxconfigd

root 6305 5170 0 Oct 17 zoneconsole 0:00 /usr/lib/saf/ttymon -g -h -p s8 console login: -T xterms -d /dev/console -l co

root 4335 1 0 Oct 17 ? 0:00 zsched

root 5858 1 0 Oct 17 ? 0:00 /usr/*****in/cron

root 3602 1 0 Oct 17 ? 0:00 /bin/sh /etc/init.d/init.evmd run

root 2824 1 0 Oct 17 ? 0:00 /*****in/sh - /usr/lib/vxvm/bin/vxvvrsecdgd root

root 2822 1 0 Oct 17 ? 0:00 /*****in/sh - /usr/lib/vxvm/bin/vxattachd root

root 9527 3616 0 Oct 17 ? 193:29 /fs/u01/ora11g/app/crshome/bin/crsd.bin reboot

root 3660 1 0 Oct 17 ? 2:48 /opt/VRTSsfmh/bin/xprtld -X 1 /etc/opt/VRTSsfmh/xprtld.conf

root 4176 4174 0 Oct 17 ? 0:00 vxnotify -m -S -w 150

root 8699 1 1 Oct 18 ? 109:25 /opt/VRTSvcs/bin/had

root 4161 3431 0 Oct 17 ? 0:00 /opt/VRTS/bin/vxnotify -w 15

oracle 9782 9564 0 Oct 17 ? 0:00 sh -c /bin/sh -c 'cd /fs/u01/ora11g/app/crshome/log/wgong/cssd/oclsomon; ulimit

oracle 9514 3602 0 Oct 17 ? 0:00 sh -c sh -c 'ulimit -c unlimited; cd /fs/u01/ora11g/app/crshome/log/wgong/evmd;

root 2842 1 0 Oct 17 ? 0:00 /*****in/sh - /usr/lib/vxvm/bin/vxconfigbackupd

root 7008 2842 0 Oct 17 ? 0:00 /*****in/sh - /usr/lib/vxvm/bin/vxconfigbackupd

root 4316 1 0 Oct 17 ? 0:00 /usr/lib/sysevent/syseventconfd

root 4310 1 0 Oct 17 ? 0:00 zoneadmd -z s8zone

root 3616 1 0 Oct 17 ? 0:00 /bin/sh /etc/init.d/init.crsd run

root 2977 1 0 Oct 17 ? 0:27 /opt/VRTSdbed/common/bin/vxdbd -d

root 5170 4335 0 Oct 17 ? 0:01 /etc/init

root 5971 1 0 Oct 17 ? 0:00 /usr/sadm/lib/smc/bin/smcboot

root 3431 1 0 Oct 17 ? 1:33 /opt/VRTSsfmh/bin/perl /opt/VRTSsfmh/bin/sfmh-discovery.pl

root 3239 1 0 Oct 17 ? 0:00 /usr/dt/bin/dtlogin -daemon

root 9564 3606 0 Oct 17 ? 0:00 /bin/sh /etc/init.d/init.cssd oclsomon

root 6301 5170 0 Oct 17 ? 0:00 /usr/lib/saf/sac -t 300

oracle 9784 9783 0 Oct 17 ? 6:38 /fs/u01/ora11g/app/crshome/bin/oclsomon.bin

oracle 10087 9516 0 Oct 17 ? 0:01 /fs/u01/ora11g/app/crshome/bin/evmlogger.bin -o /fs/u01/ora11g/app/crshome/evm/

root 6284 1 0 Oct 17 ? 0:00 /usr/dt/bin/dtlogin -daemon

root 4188 2824 0 Oct 17 ? 0:00 /*****in/sh - /usr/lib/vxvm/bin/vxvvrsecdgd root

root 8868 1 0 Oct 18 ? 25:01 /opt/VRTSvcs/bin/IPMultiNICB/IPMultiNICBAgent -type IPMultiNICB

root 4262 3660 0 Oct 17 ? 0:44 veaintf

root 5834 1 0 Oct 17 ? 0:01 /usr/*****in/syslogd

root 5954 1 0 Oct 17 ? 0:17 /usr/lib/sendmail -bd -q15m

root 5665 1 0 Oct 17 ? 0:00 /usr/*****in/rpcbind

root 5816 5815 0 Oct 17 ? 0:03 /usr/lib/autofs/automountd

daemon 5764 1 0 Oct 17 ? 0:00 /.SUNWnative/usr/lib/nfs/lockd

root 6302 6301 0 Oct 17 ? 0:00 /usr/lib/saf/ttymon

root 22911 3606 0 09:23:16 ? 0:00 /bin/sleep 1

root 8876 1 0 Oct 18 ? 24:16 /opt/VRTSagents/ha/bin/Oracle/OracleAgent -type Oracle -agdir /opt/VRTSagents/h

root 6329 1 0 Oct 17 ? 0:01 /usr/lib/fps/fpsd

root 6293 1 0 Oct 17 ? 0:00 /usr/lib/dmi/dmispd

root 8862 1 0 Oct 18 ? 23:47 /opt/VRTSvcs/bin/CVMVolDg/CVMVolDgAgent -type CVMVolDg

oracle 9516 9514 0 Oct 17 ? 2:29 /fs/u01/ora11g/app/crshome/bin/evmd.bin

oracle 9712 9711 0 Oct 17 ? 3:50 /fs/u01/ora11g/app/crshome/bin/oclsvmon.bin

root 8870 1 0 Oct 18 ? 51:52 /opt/VRTSvcs/bin/MultiNICB/MultiNICBAgent -type MultiNICB

oracle 9783 9782 0 Oct 17 ? 0:00 /bin/sh -c cd /fs/u01/ora11g/app/crshome/log/wgong/cssd/oclsomon; ulimit -c unl

root 8858 1 0 Oct 18 ? 22:31 /opt/VRTSvcs/bin/CFSfsckd/CFSfsckdAgent -type CFSfsckd

root 8082 1 0 Oct 17 ? 0:00 /usr/*****in/vxnotify -g sdg -icfspdvACLMS

oracle 9711 9710 0 Oct 17 ? 0:00 /bin/sh -c cd /fs/u01/ora11g/app/crshome/log/wgong/cssd/oclsvmon; ulimit -c unl

oracle 10392 1 0 Oct 17 ? 0:45 /fs/u01/ora11g/app/oracle/orahome/bin/tnslsnr LISTENER_WGONG -inherit

root 8007 1 0 Oct 17 ? 0:00 /opt/VRTSvxfs/*****in/vxfsckd -p /var/adm/cfs/vxfsckd-pid

oracle 9710 9544 0 Oct 17 ? 0:00 sh -c /bin/sh -c 'cd /fs/u01/ora11g/app/crshome/log/wgong/cssd/oclsvmon; ulimit

oracle 11327 11122 0 Oct 17 ? 0:25 /fs/u01/ora11g/app/crshome/bin/gsdproxy (ADDRESS=(PROTOCOL=tcp)(DEV=19)(HOST=12

oracle 9773 9587 0 Oct 17 ? 29:35 /fs/u01/ora11g/app/crshome/bin/ocssd.bin

oracle 1344 1 0 Oct 17 ? 0:00 /fs/u01/ora11g/app/crshome/opmn/bin/ons -d

root 8852 1 0 Oct 18 ? 24:44 /opt/VRTSvcs/bin/Application/ApplicationAgent -type Application

root 18263 1 0 14:05:02 ? 2:58 /opt/VRTSsfmcs/esmweb/jre/bin/java -Dnop -Xms256m -Xmx1024m -XX:MaxPermSize=256

root 22113 2236 0 09:22:26 ? 0:00 /usr/*****in/in.telnetd

root 7165 1 0 Oct 17 ? 4:33 /usr/lib/inet/in.mpathd -a

root 9587 3606 0 Oct 17 ? 0:00 /bin/sh /etc/init.d/init.cssd daemon

root 16964 1 0 14:03:40 ? 4:47 dbsrv11 -n SFM3_wgong -xtcpip(port=5636;DOBROAD=NO) -***** 0 -gd DBA -gk DBA -gl D

root 8866 1 0 Oct 18 ? 23:51 /opt/VRTSvcs/bin/FileOnOff/FileOnOffAgent -type FileOnOff

oracle 11122 1 0 Oct 17 ? 25:48 /fs/u01/ora11g/app/crshome/jdk/jre/bin/sparcv9/java -DPROGRAM=gsd -classpath /f

root 12192 1 0 Oct 18 ? 24:31 /opt/VRTSagents/ha/bin/Netlsnr/NetlsnrAgent -type Netlsnr -agdir /opt/VRTSagent

root 22272 22268 0 09:22:38 pts/4 0:00 -bash

root 22912 22272 0 09:23:17 pts/4 0:00 ps -ef

root 8880 1 0 Oct 18 ? 25:08 /opt/VRTSvcs/bin/HostMonitor -type HostMonitor -agdir /

root 20610 2160 0 09:20:49 ? 0:00 sleep 300

oracle 1345 1344 0 Oct 17 ? 0:24 /fs/u01/ora11g/app/crshome/opmn/bin/ons -d

root 11010 1 0 Oct 18 ? 40:10 vxconfigd -k -x cleartempdir

root 8702 1 0 Oct 18 ? 0:00 /opt/VRTSvcs/bin/hashadow

root 22268 2236 0 09:22:38 ? 0:00 /usr/*****in/in.telnetd

root 9045 3431 0 Oct 18 ? 2:54 /opt/VRTSsfmh/bin/hareg -all -group -resource -clus -sys -rclus -rsys -rgroup -

root 8854 1 0 Oct 18 ? 23:49 /opt/VRTSvcs/bin/ApplicationNone/ApplicationNoneAgent -type ApplicationNone

root 8878 1 0 Oct 18 ? 23:01 /opt/VRTSvcs/bin/PrivNIC/PrivNICAgent -type PrivNIC

root 8856 1 0 Oct 18 ? 23:25 /opt/VRTSvcs/bin/CFSMount/CFSMountAgent -type CFSMount

您的位置：文學城 » 論壇 » 實用電腦 » 別說別人, 你每次輸入口令前, 都會檢查是否有可疑程序, 並有本事輕易地發現可疑程序?

所有跟帖：

• 你不覺得你這種低級問題滑稽可笑麽? -加州老李- ♀ (80 bytes) () 10/25/2012 postreply 17:41:17

• 這問題太低級? 那問一個中級問題: 在C程序裏,你怎樣知道被跟蹤了? -wzis1- ♂ (205 bytes) () 10/26/2012 postreply 01:47:48

• 怎麽, 都過了一整天了, 中級問題也回答不了, 或再將其歸為低級問題? -wzis1- ♂ (0 bytes) () 10/26/2012 postreply 23:03:01

• 還是這個中級問題讓你笑過氣了? -wzis1- ♂ (0 bytes) () 10/27/2012 postreply 01:09:55

• 象你這種瘋狗式的蠢人, 除了亂咬人, 還能做什麽? -wzis1- ♂ (61 bytes) () 10/30/2012 postreply 13:27:20

請您先登陸，再發跟帖！