清理挖矿病毒操作步骤：1.停止并禁用ddaemon和c3pool_miner服务；2.解除文件锁定属性；3.删除相关服务文件和目录；4.清理残留的挖矿程序文件；5.重载系统服务配置。操作涉及关键系统文件删除，需谨慎执行。

具体操作如下 

systemctl stop ddaemon.service
systemctl disable ddaemon.service

lsattr /usr/bin/ddaemon /usr/workspace/miner.sh

chattr -i /usr/bin/ddaemon /usr/workspace/miner.sh
systemctl stop c3pool_miner.service
systemctl disable c3pool_miner.service

rm -f /etc/systemd/system/c3pool_miner.service
rm -f /etc/systemd/system/ddaemon.service 
rm -f /etc/systemd/system/multi-user.target.wants/c3pool_miner.service
systemctl daemon-reload


sudo rm -rf /usr/workspace/*
sudo rm /usr/bin/ddaemon