I have processes named bash64
which are using all my CPU.
If I kill them, it reappears. Their ancestor is a bash process which have systemd as own ancestor.
How to find which process/ systemd unit are running that ?
root@srv1:~# ls -al /proc/$(pidof bash64 | awk '{print $1}')/exe
lrwxrwxrwx 1 root root 0 juil. 29 18:44 /proc/11655/exe -> /root/.tmp00/bash64
root@srv1:~# ls .tmp00
27d96f548d2d99d032c4v1.2.0 bash bash64 bash.pid cfg cfgi uuid
If I remove the .tmp00 dir, it reappears immediatly.
My system is a baremetal Ubuntu 20.04 on ext4/ssd. I got some issues with DNS resolving recently but which came from my router configuration (but I may have broke something on my desktop).
bash64
in the official repository. So you have to determine its full path bywhich bash64
orls -al /proc/$(pidof bash64 | awk '{print $1}')/exe
and origin. – N0rbert Jul 29 '20 at 16:39