D
D
Denis Michurin2017-07-24 13:57:46
linux
Denis Michurin, 2017-07-24 13:57:46

What is the incomprehensible process /tmp/uKwM60bvCRh?

A file constantly appears that launches an incomprehensible process that loads the system.

HTOP
8a16b30196a84009ab7db6908e5e8d0d.PNG

It is located in:
/tmp/uKwM60bvCRh
ls
543ad708696940d48ac49ca168973282.PNG

I have already killed him many times, the file itself has been deleted. The file is owned by root. What he does and where he came from, I did not find the answer.
OS Debian 8.
UPD: Yes, I picked up a bug, what kind of scanner for debain is there?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
R
Roman Mirilaczvili, 2017-07-24
@denistu10

  1. To get information about network connections as sudo/root run the command
  2. install a rootkit scanner and scan the OS
  3. Improve OS security with noexec for /tmp : https://kb.iweb.com/hc/en-us/articles/230267488--I...

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question