Remember to deal with the Alibaba Cloud server being mined once

A process called kdevtmpfsi, which occupies a lot of CPU, Alibaba Cloud alarms, is mined, and after querying it is determined to be a virus in the docker container image.
Normal processing, the process cannot be killed

Handling method
1 kdevtmpfsi has a daemon process. Killing the kdevtmpfsi process alone will continue to restore the occupation. The daemon process name is kinsing, and the problem can be solved only after killing.
ps -ef | grep kinsing
kill -9'parent process'
2 Globally search for files with kdevtmpfsi, delete all


So far cpu returns to normal

Guess you like

Origin blog.csdn.net/u014442879/article/details/103762451