I found a strange file under/var/tmp directory, named ietd.conf

    "url" : "stratum+tcp://",
    "user" : "46Z6dQ77i2qAapF4kjLXaaYKCB59eajwaZbmtyyPsxDXWyxPS5nfYoe5t4R7yTgsvT
    "pass" : "x",
    "algo" : "cryptonight",
    "quiet" : true

Can someone explain it to me please

  • Are you running mining software for an altcoin such as Monero or Bytecoin?
    – Murch
    May 29, 2017 at 18:44
  • @Murch no it's just a Linux machine with ubuntu server, we installed on it a dcm4che server dcm4che.org May 29, 2017 at 20:31

1 Answer 1


You most likely have a stealth Monero miner installed, I recommend checking your system for rootkits.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.