Linux's top command less cpu usage, but the display is very high

Server recently discovered a strange question, 40 dual-core servers, installed centos7.4 system, turn over a few hours will be a graphical interface especially Caton, top found in about 50% CPU utilization, but not a lot in the process occupied by the process.

How can not upload pictures ...




because in binary man named libselinux.so in execution, the name appears to have a relationship with selinux, but in fact not the case, it should be a script like the mining, process and there are no top, ps where there is no
final by perf top -s comm, pid, symbol found a bunch of unknown process, then according to / proc / pid find the location of the executable file, delete the entire directory, and finally cpu usage will go down, and
now virus true wit, even at top and ps where life and death are not check out, via ps H -eo user, pid, ppid , tid, time,% cpu, cmd --sort =% cpu this command did not even.