Views:
886
Votes: 1
✅ Solution
Tags:
server
cron
Link:
🔍 See Original Answer on Ask Ubuntu ⧉ 🔗
URL:
https://askubuntu.com/q/1180445
Title:
Ubuntu Server 16.04 unusual crontab entry
ID:
/2019/10/12/Ubuntu-Server-16.04-unusual-crontab-entry
Created:
October 12, 2019
Upload:
April 8, 2024
Layout: post
TOC:
false
Navigation: false
Copy to clipboard: false
As stated in comments you have a virus installed by crypto miner. This tells you how to remove it: [Watchbog Vulnerability][1]
To summarize the steps:
crontab –r
ls /var/spool/cron/crontabs
pip uninstall urllib2
apt-get remove --auto-remove curl
apt-get remove --auto-remove wget
crontab -r
while true ; do killall watchbog ; done
sudo passwd root
Read the entire link for step by step details and to verify you have this virus in the first place. [1]: https://www.linode.com/community/questions/18657/watchbog-vulnerability