Handle the kdevtmpfsi mining virus (transfer)

kdevtmpfsi has a daemon process, killing the kdevtmpfsi process alone will continue to resume occupancy. The name of the daemon is kinsing, and you need to kill to solve the problem.

ps -aux | grep kinsing

ps -aux | grep kdevtmpfsi

kill -9 (kdevtmpfsi PID)

kill -9 (kinsing PID)

再把文件给删除掉

Possible reasons for mining

1. Use other people's docker's run without setting a password. Pay attention to the password of a container like redis, and also have the port number of docker 2375. Don't let the firewall let go.

2. The exposed port must have a password

3. The downloaded image is poisonous and has been bred with viruses.

Reprinted by reference: https://blog.csdn.net/u014589116/article/details/103705690