Reference: https: //www.freebuf.com/vuls/200289.html
The top command to look at CPU utilization.
Called sysupdate process takes up most of the CPU resources. CPU utilization close to 100%. It seems to be a real sit mining.
First find out the pid mining program
ps aux | grep sysupdate
And then find the program in accordance with pid absolute path cd / proc / pid now, after the write command lists to find the location, enter the directory
(I was under the tmp directory, below update.sh, and sysupdate program, mainly in order to write the script update.sh)
The next step, I was directly delete tmp folder, then kill -9 sysupdate
I found a few days appeared, found no timing tasks, ah, so I looked at the / var / log / cron log
There is no solution, but also to wait and see.