Unix & Linux Asked by Syed Tahoor Ali on December 29, 2021
I have amzon linux instance with docker, rabbitmq and ejabberd installed.
One process is starting and using cpu 100% I’m trying to kill that process but after sometimes it is starting
Top command result
22374 root 20 0 2653576 3092 2456 S 99.7 0.0 80:40.24 kdevtmpfsi
26567 root 20 0 170888 4340 3796 R 0.3 0.1 0:00.02 top
1 root 20 0 117880 6036 3972 S 0.0 0.1 0:22.54 systemd
2 root 20 0 0 0 0 S 0.0 0.0 0:00.06 kthreadd
4 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/0:0H
6 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 mm_percpu_wq
ps -eaf | grep kdevtmpfsi
root 22374 1 99 14:25 ? 01:31:02 /tmp/kdevtmpfsi
root 27128 22220 0 15:55 pts/0 00:00:00 grep --color=auto kdevtmpfsi
Not able to understand What is starting this process??
Sounds a lot like the crypto miner described in https://stackoverflow.com/questions/59487096/kdevtmpfsi-how-to-find-and-delete-that-miner. Your instance and everything in it is no longer trustworthy and should be destroyed.
Answered by eleventyone on December 29, 2021
Get help from others!
Recent Answers
Recent Questions
© 2024 TransWikia.com. All rights reserved. Sites we Love: PCI Database, UKBizDB, Menu Kuliner, Sharing RPP