1

I found a strange file under/var/tmp directory, named ietd.conf

{
    "url" : "stratum+tcp://188.165.254.85:80",
    "user" : "46Z6dQ77i2qAapF4kjLXaaYKCB59eajwaZbmtyyPsxDXWyxPS5nfYoe5t4R7yTgsvT
AxgE8DRwwtKiMxCmM39KCBPfEgL5b",
    "pass" : "x",
    "algo" : "cryptonight",
    "quiet" : true
}

Can someone explain it to me please

2
  • Are you running mining software for an altcoin such as Monero or Bytecoin?
    – Murch
    May 29, 2017 at 18:44
  • @Murch no it's just a Linux machine with ubuntu server, we installed on it a dcm4che server dcm4che.org May 29, 2017 at 20:31

1 Answer 1

2

You most likely have a stealth Monero miner installed, I recommend checking your system for rootkits.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.