USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         1  0.0  0.0  19232  1392 ?        Ss   06:37   0:00 /sbin/init
root         2  0.0  0.0      0     0 ?        S    06:37   0:00 [kthreadd]
root         3  0.0  0.0      0     0 ?        S    06:37   0:00 [migration/0]
root         4  0.0  0.0      0     0 ?        S    06:37   0:00 [ksoftirqd/0]
root         5  0.0  0.0      0     0 ?        S    06:37   0:00 [stopper/0]
root         6  0.0  0.0      0     0 ?        S    06:37   0:00 [watchdog/0]
root         7  0.0  0.0      0     0 ?        S    06:37   0:00 [migration/1]
root         8  0.0  0.0      0     0 ?        S    06:37   0:00 [stopper/1]
root         9  0.0  0.0      0     0 ?        S    06:37   0:00 [ksoftirqd/1]
root        10  0.0  0.0      0     0 ?        S    06:37   0:00 [watchdog/1]
root        11  0.0  0.0      0     0 ?        S    06:37   0:00 [events/0]
root        12  0.0  0.0      0     0 ?        S    06:37   0:00 [events/1]
root        13  0.0  0.0      0     0 ?        S    06:37   0:00 [events/0]
root        14  0.0  0.0      0     0 ?        S    06:37   0:00 [events/1]
root        15  0.0  0.0      0     0 ?        S    06:37   0:00 [events_long/0]
root        16  0.0  0.0      0     0 ?        S    06:37   0:00 [events_long/1]
root        17  0.0  0.0      0     0 ?        S    06:37   0:00 [events_power_ef]
root        18  0.0  0.0      0     0 ?        S    06:37   0:00 [events_power_ef]
root        19  0.0  0.0      0     0 ?        S    06:37   0:00 [cgroup]
root        20  0.0  0.0      0     0 ?        S    06:37   0:00 [khelper]
root        21  0.0  0.0      0     0 ?        S    06:37   0:00 [netns]
root        22  0.0  0.0      0     0 ?        S    06:37   0:00 [async/mgr]
root        23  0.0  0.0      0     0 ?        S    06:37   0:00 [pm]
root        24  0.0  0.0      0     0 ?        S    06:37   0:00 [sync_supers]
root        25  0.0  0.0      0     0 ?        S    06:37   0:00 [bdi-default]
root        26  0.0  0.0      0     0 ?        S    06:37   0:00 [kintegrityd/0]
root        27  0.0  0.0      0     0 ?        S    06:37   0:00 [kintegrityd/1]
root        28  0.0  0.0      0     0 ?        S    06:37   0:00 [kblockd/0]
root        29  0.0  0.0      0     0 ?        S    06:37   0:00 [kblockd/1]
root        30  0.0  0.0      0     0 ?        S    06:37   0:00 [kacpid]
root        31  0.0  0.0      0     0 ?        S    06:37   0:00 [kacpi_notify]
root        32  0.0  0.0      0     0 ?        S    06:37   0:00 [kacpi_hotplug]
root        33  0.0  0.0      0     0 ?        S    06:37   0:00 [ata_aux]
root        34  0.0  0.0      0     0 ?        S    06:37   0:00 [ata_sff/0]
root        35  0.0  0.0      0     0 ?        S    06:37   0:00 [ata_sff/1]
root        36  0.0  0.0      0     0 ?        S    06:37   0:00 [ksuspend_usbd]
root        37  0.0  0.0      0     0 ?        S    06:37   0:00 [khubd]
root        38  0.0  0.0      0     0 ?        S    06:37   0:00 [kseriod]
root        39  0.0  0.0      0     0 ?        S    06:37   0:00 [md/0]
root        40  0.0  0.0      0     0 ?        S    06:37   0:00 [md/1]
root        41  0.0  0.0      0     0 ?        S    06:37   0:00 [md_misc/0]
root        42  0.0  0.0      0     0 ?        S    06:37   0:00 [md_misc/1]
root        43  0.0  0.0      0     0 ?        S    06:37   0:00 [linkwatch]
root        46  0.0  0.0      0     0 ?        S    06:37   0:00 [khungtaskd]
root        47  0.0  0.0      0     0 ?        S    06:37   0:00 [lru-add-drain/0]
root        48  0.0  0.0      0     0 ?        S    06:37   0:00 [lru-add-drain/1]
root        49  0.0  0.0      0     0 ?        S    06:37   0:00 [kswapd0]
root        50  0.0  0.0      0     0 ?        SN   06:37   0:00 [ksmd]
root        51  0.0  0.0      0     0 ?        SN   06:37   0:00 [khugepaged]
root        52  0.0  0.0      0     0 ?        S    06:37   0:00 [aio/0]
root        53  0.0  0.0      0     0 ?        S    06:37   0:00 [aio/1]
root        54  0.0  0.0      0     0 ?        S    06:37   0:00 [crypto/0]
root        55  0.0  0.0      0     0 ?        S    06:37   0:00 [crypto/1]
root        62  0.0  0.0      0     0 ?        S    06:37   0:00 [kthrotld/0]
root        63  0.0  0.0      0     0 ?        S    06:37   0:00 [kthrotld/1]
root        65  0.0  0.0      0     0 ?        S    06:37   0:00 [kpsmoused]
root        66  0.0  0.0      0     0 ?        S    06:37   0:00 [usbhid_resumer]
root        67  0.0  0.0      0     0 ?        S    06:37   0:00 [deferwq]
root        97  0.0  0.0      0     0 ?        S    06:37   0:00 [kdmremove]
root        98  0.0  0.0      0     0 ?        S    06:37   0:00 [kstriped]
root       233  0.0  0.0      0     0 ?        S    06:37   0:00 [scsi_eh_0]
root       235  0.0  0.0      0     0 ?        S    06:37   0:00 [scsi_eh_1]
root       322  0.0  0.0      0     0 ?        S    06:37   0:00 [virtio-blk]
root       381  0.0  0.0      0     0 ?        S    06:37   0:00 [jbd2/vda1-8]
root       382  0.0  0.0      0     0 ?        S    06:37   0:00 [ext4-dio-unwrit]
root       467  0.0  0.0  11216  1340 ?        S<s  06:37   0:00 /sbin/udevd -d
root       568  0.0  0.0      0     0 ?        S    06:37   0:00 [virtio-net]
root       652  0.0  0.0      0     0 ?        S    06:37   0:00 [hd-audio0]
root       668  0.0  0.0      0     0 ?        S    06:37   0:00 [vballoon]
root       737  0.0  0.1  11740  2032 ?        S<   06:37   0:00 /sbin/udevd -d
root       799  0.0  0.0      0     0 ?        S    06:37   0:00 [kauditd]
root       837  0.0  0.0      0     0 ?        S    06:37   0:00 [ib_addr]
root       842  0.0  0.0      0     0 ?        S    06:37   0:00 [infiniband/0]
root       843  0.0  0.0      0     0 ?        S    06:37   0:00 [infiniband/1]
root       852  0.0  0.0      0     0 ?        S    06:37   0:00 [ib_mcast]
root       857  0.0  0.0      0     0 ?        S    06:37   0:00 [iw_cm_wq]
root       862  0.0  0.0      0     0 ?        S    06:37   0:00 [ib_cm/0]
root       863  0.0  0.0      0     0 ?        S    06:37   0:00 [ib_cm/1]
root       868  0.0  0.0      0     0 ?        S    06:37   0:00 [rdma_cm]
root       889  0.0  0.0      0     0 ?        S    06:37   0:00 [ipoib_flush]
root      1083  0.0  0.0      0     0 ?        S    06:37   0:00 [flush-252:0]
root      1104  0.0  0.0   9116   996 ?        Ss   06:37   0:00 /sbin/dhclient -H localhost -1 -q -cf /etc/dhcp/dhclient-eth0.conf -lf /var/lib/dhclient/dhclient-eth0.leases -pf /var/run/dhclient-eth0.pid eth0
root      1160  0.0  0.0  29764   836 ?        S<sl 06:37   0:00 auditd
root      1182  0.0  0.0 249084  1452 ?        Sl   06:37   0:00 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root      1229  0.0  0.0   4076   632 ?        Ss   06:37   0:00 /usr/sbin/acpid
root      1391  0.0  0.1  52300  1616 ?        Ss   06:37   0:00 login -- root     
root      1392  0.0  0.0   4076   640 ttyS0    Ss+  06:37   0:00 /sbin/agetty /dev/ttyS0 115200 vt100-nav
root      1396  0.0  0.1 108320  1936 tty1     Ss   06:37   0:00 -bash
root      1558  0.0  0.0  66288  1200 ?        Ss   06:48   0:00 /usr/sbin/sshd
root      8287  0.0  0.1 108316  1672 ?        S    06:55   0:00 /bin/sh /usr//bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/localhost.localdomain.localdomain.pid
mysql     8528  0.0  9.5 2587012 152588 ?      Sl   06:55   0:00 /usr/sbin/mysqld --basedir=/usr/ --datadir=/var/lib/mysql --plugin-dir=/usr//lib64/mysql/plugin --user=mysql --log-error=/var/log/mysql/mysqld.log --pid-file=/var/lib/mysql/localhost.localdomain.localdomain.pid --socket=/var/lib/mysql/mysql.sock --port=3306
root     13299  0.0  0.2  95940  3952 ?        Ss   06:56   0:00 sshd: centos [priv]
centos   13302  0.0  0.1  95940  2200 ?        S    06:56   0:00 sshd: centos@pts/0
centos   13558  0.0  0.0   9200  1416 pts/0    Ss+  06:56   0:00 bash -c echo 'centos' | sudo -S 2>/dev/null bash -c 'bash /tmp/s9s_tmp.root/x7NWOkEWDuKZMQ9w/A4xmqXBcuIH69ajR.1101.3238.sh 2> /tmp/s9s_tmp.root/x7NWOkEWDuKZMQ9w/A4xmqXBcuIH69ajR.1101.3238.sh.stderr'
root     13572  0.0  0.1  72196  2540 pts/0    S+   06:56   0:00 sudo -S bash -c bash /tmp/s9s_tmp.root/x7NWOkEWDuKZMQ9w/A4xmqXBcuIH69ajR.1101.3238.sh 2> /tmp/s9s_tmp.root/x7NWOkEWDuKZMQ9w/A4xmqXBcuIH69ajR.1101.3238.sh.stderr
root     13573  0.0  0.0   9196  1220 pts/0    S+   06:56   0:00 bash -c bash /tmp/s9s_tmp.root/x7NWOkEWDuKZMQ9w/A4xmqXBcuIH69ajR.1101.3238.sh 2> /tmp/s9s_tmp.root/x7NWOkEWDuKZMQ9w/A4xmqXBcuIH69ajR.1101.3238.sh.stderr
root     13574  0.0  0.0   9196  1256 pts/0    S+   06:56   0:00 bash /tmp/s9s_tmp.root/x7NWOkEWDuKZMQ9w/A4xmqXBcuIH69ajR.1101.3238.sh
root     13577  0.0  0.2  53732  4392 pts/0    S+   06:56   0:00 /usr/bin/mysql -NAB -uroot -px xxxxxx -e SET SQL_LOG_BIN=1;   SET SQL_MODE='';  CREATE USER 'cmon'@'192.168.0.100'  IDENTIFIED BY 'cmon'
root     13650  0.0  0.0 110244  1172 tty1     R+   07:07   0:00 ps aux