ubuntu 16.04 - xmr999 process %100 CPU usage ,Process hogging CPUWhy % CPU doesn't add up to 100?Kworker...

Why did the Germans forbid the possession of pet pigeons in Rostov-on-Don in 1941?

Need help identifying/translating a plaque in Tangier, Morocco

Are objects structures and/or vice versa?

Domain expired, GoDaddy holds it and is asking more money

Can I find out the caloric content of bread by dehydrating it?

What does 'script /dev/null' do?

Unbreakable Formation vs. Cry of the Carnarium

Was there ever an axiom rendered a theorem?

Lied on resume at previous job

Is "plugging out" electronic devices an American expression?

What are the advantages and disadvantages of running one shots compared to campaigns?

Prime joint compound before latex paint?

Is every set a filtered colimit of finite sets?

Does a dangling wire really electrocute me if I'm standing in water?

Where else does the Shulchan Aruch quote an authority by name?

I see my dog run

What happens when a metallic dragon and a chromatic dragon mate?

How can I add custom success page

Pristine Bit Checking

Are white and non-white police officers equally likely to kill black suspects?

What is GPS' 19 year rollover and does it present a cybersecurity issue?

Information to fellow intern about hiring?

Crop image to path created in TikZ?

Map list to bin numbers



ubuntu 16.04 - xmr999 process %100 CPU usage ,


Process hogging CPUWhy % CPU doesn't add up to 100?Kworker consuming 100% CPUProcess usage for the past X days?Ubuntu Process high memory usage (almost 99%)Process [sync_supers] using 100% CPU100% CPU due to “fwupd” process in Ubuntu 16.04Random http command by user _apt with 100% CPU usageCPU usage 100% at runing every applicationAbnormal Cpu usage






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}







1















Time to time I'm getting alarmed that the server has high resource consumption after investigating the issue I found that there a process named xmr999 use the hole server CPU resources, I can't find any information about this xmr999,



same time the service provider send Abuse complaint regarding the server. the complaint is the server used to attack another server



I checked the server for backdoor or virus it showed clean



is there any advice regarding this xmr99, what is this or how can I block it?



enter image description here



Regards to all










share|improve this question









New contributor




AbuSaif is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





















  • Open a terminal. Update your question with the output of the command ps aux | grep -i [x]mr999

    – souravc
    3 hours ago











  • After reboot, it disappears, the result of the command is nothing

    – AbuSaif
    2 hours ago











  • [root@nowodoo ~]# ps aux | grep -i [x]mr999 [root@nowodoo ~]#

    – AbuSaif
    2 hours ago


















1















Time to time I'm getting alarmed that the server has high resource consumption after investigating the issue I found that there a process named xmr999 use the hole server CPU resources, I can't find any information about this xmr999,



same time the service provider send Abuse complaint regarding the server. the complaint is the server used to attack another server



I checked the server for backdoor or virus it showed clean



is there any advice regarding this xmr99, what is this or how can I block it?



enter image description here



Regards to all










share|improve this question









New contributor




AbuSaif is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





















  • Open a terminal. Update your question with the output of the command ps aux | grep -i [x]mr999

    – souravc
    3 hours ago











  • After reboot, it disappears, the result of the command is nothing

    – AbuSaif
    2 hours ago











  • [root@nowodoo ~]# ps aux | grep -i [x]mr999 [root@nowodoo ~]#

    – AbuSaif
    2 hours ago














1












1








1








Time to time I'm getting alarmed that the server has high resource consumption after investigating the issue I found that there a process named xmr999 use the hole server CPU resources, I can't find any information about this xmr999,



same time the service provider send Abuse complaint regarding the server. the complaint is the server used to attack another server



I checked the server for backdoor or virus it showed clean



is there any advice regarding this xmr99, what is this or how can I block it?



enter image description here



Regards to all










share|improve this question









New contributor




AbuSaif is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












Time to time I'm getting alarmed that the server has high resource consumption after investigating the issue I found that there a process named xmr999 use the hole server CPU resources, I can't find any information about this xmr999,



same time the service provider send Abuse complaint regarding the server. the complaint is the server used to attack another server



I checked the server for backdoor or virus it showed clean



is there any advice regarding this xmr99, what is this or how can I block it?



enter image description here



Regards to all







process






share|improve this question









New contributor




AbuSaif is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question









New contributor




AbuSaif is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question








edited 3 hours ago









souravc

27.8k1378108




27.8k1378108






New contributor




AbuSaif is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked 3 hours ago









AbuSaifAbuSaif

61




61




New contributor




AbuSaif is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





AbuSaif is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






AbuSaif is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.













  • Open a terminal. Update your question with the output of the command ps aux | grep -i [x]mr999

    – souravc
    3 hours ago











  • After reboot, it disappears, the result of the command is nothing

    – AbuSaif
    2 hours ago











  • [root@nowodoo ~]# ps aux | grep -i [x]mr999 [root@nowodoo ~]#

    – AbuSaif
    2 hours ago



















  • Open a terminal. Update your question with the output of the command ps aux | grep -i [x]mr999

    – souravc
    3 hours ago











  • After reboot, it disappears, the result of the command is nothing

    – AbuSaif
    2 hours ago











  • [root@nowodoo ~]# ps aux | grep -i [x]mr999 [root@nowodoo ~]#

    – AbuSaif
    2 hours ago

















Open a terminal. Update your question with the output of the command ps aux | grep -i [x]mr999

– souravc
3 hours ago





Open a terminal. Update your question with the output of the command ps aux | grep -i [x]mr999

– souravc
3 hours ago













After reboot, it disappears, the result of the command is nothing

– AbuSaif
2 hours ago





After reboot, it disappears, the result of the command is nothing

– AbuSaif
2 hours ago













[root@nowodoo ~]# ps aux | grep -i [x]mr999 [root@nowodoo ~]#

– AbuSaif
2 hours ago





[root@nowodoo ~]# ps aux | grep -i [x]mr999 [root@nowodoo ~]#

– AbuSaif
2 hours ago










1 Answer
1






active

oldest

votes


















0














From another report: https://centos.org/forums/viewtopic.php?f=48&t=70067 it would appear your system is being used for bitcoin mining. If you aren't doing it then your system may have been hacked and someone else is using your computer to mine bitcoins.






share|improve this answer
























  • this what I thought, what the alternative way to remove or block it, to reinstall the system is not an option for me

    – AbuSaif
    2 hours ago











  • Whoah that's really creepy

    – Emmet
    2 hours ago












Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});






AbuSaif is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1132312%2fubuntu-16-04-xmr999-process-100-cpu-usage%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









0














From another report: https://centos.org/forums/viewtopic.php?f=48&t=70067 it would appear your system is being used for bitcoin mining. If you aren't doing it then your system may have been hacked and someone else is using your computer to mine bitcoins.






share|improve this answer
























  • this what I thought, what the alternative way to remove or block it, to reinstall the system is not an option for me

    – AbuSaif
    2 hours ago











  • Whoah that's really creepy

    – Emmet
    2 hours ago
















0














From another report: https://centos.org/forums/viewtopic.php?f=48&t=70067 it would appear your system is being used for bitcoin mining. If you aren't doing it then your system may have been hacked and someone else is using your computer to mine bitcoins.






share|improve this answer
























  • this what I thought, what the alternative way to remove or block it, to reinstall the system is not an option for me

    – AbuSaif
    2 hours ago











  • Whoah that's really creepy

    – Emmet
    2 hours ago














0












0








0







From another report: https://centos.org/forums/viewtopic.php?f=48&t=70067 it would appear your system is being used for bitcoin mining. If you aren't doing it then your system may have been hacked and someone else is using your computer to mine bitcoins.






share|improve this answer













From another report: https://centos.org/forums/viewtopic.php?f=48&t=70067 it would appear your system is being used for bitcoin mining. If you aren't doing it then your system may have been hacked and someone else is using your computer to mine bitcoins.







share|improve this answer












share|improve this answer



share|improve this answer










answered 2 hours ago









WinEunuuchs2UnixWinEunuuchs2Unix

47.5k1192185




47.5k1192185













  • this what I thought, what the alternative way to remove or block it, to reinstall the system is not an option for me

    – AbuSaif
    2 hours ago











  • Whoah that's really creepy

    – Emmet
    2 hours ago



















  • this what I thought, what the alternative way to remove or block it, to reinstall the system is not an option for me

    – AbuSaif
    2 hours ago











  • Whoah that's really creepy

    – Emmet
    2 hours ago

















this what I thought, what the alternative way to remove or block it, to reinstall the system is not an option for me

– AbuSaif
2 hours ago





this what I thought, what the alternative way to remove or block it, to reinstall the system is not an option for me

– AbuSaif
2 hours ago













Whoah that's really creepy

– Emmet
2 hours ago





Whoah that's really creepy

– Emmet
2 hours ago










AbuSaif is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















AbuSaif is a new contributor. Be nice, and check out our Code of Conduct.













AbuSaif is a new contributor. Be nice, and check out our Code of Conduct.












AbuSaif is a new contributor. Be nice, and check out our Code of Conduct.
















Thanks for contributing an answer to Ask Ubuntu!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1132312%2fubuntu-16-04-xmr999-process-100-cpu-usage%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Why do type traits not work with types in namespace scope?What are POD types in C++?Why can templates only be...

Will tsunami waves travel forever if there was no land?Why do tsunami waves begin with the water flowing away...

Should I use Docker or LXD?How to cache (more) data on SSD/RAM to avoid spin up?Unable to get Windows File...