# https://alias454.com/osquery/ sudo rm -f /usr/include/icekey.h /usr/include/iceconf.h /usr/include/iceseed.h #madalin_rootkit sudo rm -f /dev/.kork /bin/.login /bin/.ps # ldp_worm sudo rm -f /dev/cuc #sadmind-iis_worm sudo rm -f /dev/ptyxx # ark_rootkit sudo rm -f '/tmp/.uua' '/tmp/.a' sudo rm -f '/lib/.ligh.gh' '/lib/.libgh.gh' '/lib/.libgh-gh' '/dev/tux' '/dev/tux/.proc' '/dev/tux/.file' # ajakit_rootkit sudo rm -f /usr/lib/tcl5.3 # esrk_rootkit sudo rm -f /var/lib/games/.k sudo rm -f '/tmp/.../a', '/tmp/.../r # 55808.a_worm sudo rmdir /tmp/... sudo rmdir '/usr/include/.../' '/usr/lib/.../' '/usr/sbin/.../' # bobkit_rootkit sudo rm -f '/usr/bin/ntpsx' '/tmp/.bkp' '/usr/lib/.bkit- # bobkit_rootkit sudo rm -f '/usr/bin/xchk' '/usr/bin/xsf' '/usr/bin/xchk' # optickit sudo rm -f /usr/lib/locale/uboot # mithras_rootkit