Phantom process in Ubuntu

0

A few days ago I have a security problem on my server with Ubuntu. When I review the processes, one that appears among the ones that consume the most is:

  

NZInzgIlSJgkD

Does anyone have any idea what it could be?

    
asked by asael2 20.09.2017 в 07:45
source

1 answer

1

No idea what it might be, but if it were you, I would look for it this way:

I guess you're seeing it in top , hence I would see the command line:

ps -ef | grep NZInzgIlSJgkD

There you can see which is the parent process (who started it?). View the properties of the file with tools such as file /pathAlArchivo/NZInzgIlSJgkD , even the user / group could give clues.

Being that it is a name generated possibly by chance, it is probable that you will not find it (it is executed and it is eliminated), but the data of the process that initiates it will be your track to follow.

    
answered by 20.09.2017 / 09:57
source