How to solve the problem of remote file download found by linux server?

the server running on Aliyun prompted me to download malicious files



1crontab -e
2/etc/rc.local
3ll /proc/26828/exe 26828id
No such file or directory
4kill
kill 26828
No such process
5top -c

6sh

7. Even if you have tried to change the server password

so how can we solve this problem fundamentally in the end

Mar.03,2021

turn off password login, log in with secret key, and install denyhosts, to change the port of ssh, which can reduce a lot of explosions.

Menu