top查看cpu占用进程100% xmrigMiner进程
处理步骤:
crontab -l注释掉或删掉挖矿任务
kill -9 进程
rm -rf /usr/lib/updated
top检查,存在则kill -9
删不掉,继续处理:
# 步骤 1: 解除文件属性
cd /usr/lib/updated && chattr -ia *
lsattr * # 确认属性已移除
# 步骤 2: 删除目标目录
rm -rf /usr/lib/updated/arm
# 步骤 3: 彻底清理残留(谨慎操作!)
rm -rf /usr/lib/updated
详细记录如下:
(base) root@huawei:/var/spool/cron/crontabs# lsattr /usr/lib/updated
----ia--------e----- /usr/lib/updated/xmrigMiner
----ia--------e----- /usr/lib/updated/update
----ia--------e----- /usr/lib/updated/cron.d
----ia--------e----- /usr/lib/updated/config.json
----ia--------e----- /usr/lib/updated/h64
----ia--------e----- /usr/lib/updated/dir.dir
----ia--------e----- /usr/lib/updated/libs
----ia--------e----- /usr/lib/updated/start
----ia--------e----- /usr/lib/updated/go
----ia--------e----- /usr/lib/updated/upd
----ia--------e----- /usr/lib/updated/arm
(base) root@huawei:/var/spool/cron/crontabs# cd /usr/lib
(base) root@huawei:/usr/lib# ls -ld
drwxr-xr-x 84 root root 4096 Mar 11 07:39 .
(base) root@huawei:/usr/lib# ls -ld updated
drwxr-xr-x 2 bin bin 4096 Mar 11 11:27 updated
(base) root@huawei:/usr/lib# chmod -R 777 updated
chmod: changing permissions of 'updated/xmrigMiner': Operation not permitted
chmod: changing permissions of 'updated/update': Operation not permitted
chmod: changing permissions of 'updated/cron.d': Operation not permitted
chmod: changing permissions of 'updated/config.json': Operation not permitted
chmod: changing permissions of 'updated/h64': Operation not permitted
chmod: changing permissions of 'updated/dir.dir': Operation not permitted
chmod: changing permissions of 'updated/libs': Operation not permitted
chmod: changing permissions of 'updated/start': Operation not permitted
chmod: changing permissions of 'updated/go': Operation not permitted
chmod: changing permissions of 'updated/upd': Operation not permitted
chmod: changing permissions of 'updated/arm': Operation not permitted
(base) root@huawei:/usr/lib# chattr -ia /usr/lib/updated
(base) root@huawei:/usr/lib# ll /usr/lib/updated
total 8332
drwxrwxrwx 2 bin bin 4096 Mar 11 11:27 ./
drwxr-xr-x 84 root root 4096 Mar 11 07:39 ../
-rwx--x--x 1 root root 215960 Dec 18 2020 arm*
-rw-r--r-- 1 root root 14378 Mar 11 07:40 config.json
-rw-r--r-- 1 root root 47 Mar 11 07:40 cron.d
-rw-r--r-- 1 root root 17 Mar 11 07:40 dir.dir
-rwxr-xr-x 1 bin bin 337 Feb 14 2020 go*
-rwxrwxrwx 1 bin bin 838583 Jun 14 2018 h64*
-rwxrwxrwx 1 bin bin 335 Jun 14 2018 libs*
-rwxrwxrwx 1 bin bin 55 Jan 13 2023 start*
-rwxr--r-- 1 bin bin 200 Mar 11 07:40 upd*
-rwxrwxrwx 1 bin bin 242 Dec 18 2020 update*
-rwxr-xr-x 1 root root 7420616 May 28 2024 xmrigMiner*
(base) root@huawei:/usr/lib# lsattr /usr/lib/updated
----ia--------e----- /usr/lib/updated/xmrigMiner
----ia--------e----- /usr/lib/updated/update
----ia--------e----- /usr/lib/updated/cron.d
----ia--------e----- /usr/lib/updated/config.json
----ia--------e----- /usr/lib/updated/h64
----ia--------e----- /usr/lib/updated/dir.dir
----ia--------e----- /usr/lib/updated/libs
----ia--------e----- /usr/lib/updated/start
----ia--------e----- /usr/lib/updated/go
----ia--------e----- /usr/lib/updated/upd
----ia--------e----- /usr/lib/updated/arm
(base) root@huawei:/usr/lib# rm -rf /usr/lib/updated
rm: cannot remove '/usr/lib/updated/xmrigMiner': Operation not permitted
rm: cannot remove '/usr/lib/updated/update': Operation not permitted
rm: cannot remove '/usr/lib/updated/cron.d': Operation not permitted
rm: cannot remove '/usr/lib/updated/config.json': Operation not permitted
rm: cannot remove '/usr/lib/updated/h64': Operation not permitted
rm: cannot remove '/usr/lib/updated/dir.dir': Operation not permitted
rm: cannot remove '/usr/lib/updated/libs': Operation not permitted
rm: cannot remove '/usr/lib/updated/start': Operation not permitted
rm: cannot remove '/usr/lib/updated/go': Operation not permitted
rm: cannot remove '/usr/lib/updated/upd': Operation not permitted
rm: cannot remove '/usr/lib/updated/arm': Operation not permitted
(base) root@huawei:/usr/lib# cd /usr/lib/updated && chattr -ia *
(base) root@huawei:/usr/lib/updated# lsattr *
--------------e----- arm
--------------e----- config.json
--------------e----- cron.d
--------------e----- dir.dir
--------------e----- go
--------------e----- h64
--------------e----- libs
--------------e----- start
--------------e----- upd
--------------e----- update
--------------e----- xmrigMiner
(base) root@huawei:/usr/lib/updated#
(base) root@huawei:/usr/lib/updated# rm -rf *
(base) root@huawei:/usr/lib/updated# ll
total 8
drwxrwxrwx 2 bin bin 4096 Mar 11 11:38 ./
drwxr-xr-x 84 root root 4096 Mar 11 07:39 ../
(base) root@huawei:/usr/lib/updated# cd ..
(base) root@huawei:/usr/lib# top
top - 11:39:02 up 169 days, 8:49, 5 users, load average: 198.72, 196.01, 194.56
Tasks: 2640 total, 1 running, 2639 sleeping, 0 stopped, 0 zombie
%Cpu(s): 99.4 us, 0.6 sy, 0.0 ni, 0.0 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st
MiB Mem : 772169.2 total, 166545.5 free, 95854.1 used, 509769.6 buff/cache
MiB Swap: 8192.0 total, 8171.0 free, 21.0 used. 672244.8 avail Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
34763 root 20 0 17.0g 23252 5720 S 18369 0.0 1582:58 xmrigMiner
35231 root 20 0 11832 6100 2704 R 28.1 0.0 0:00.15 top
4114511 root 20 0 8227.3g 4.8g 636136 S 9.4 0.6 34:42.37 mindie_llm_back
4114518 root 20 0 8227.3g 4.8g 635020 S 9.4 0.6 36:44.29 mindie_llm_back
4114259 root 20 0 16.1g 310356 100728 S 6.2 0.0 22:07.24 mindieservice_d
4114509 root 20 0 8227.1g 4.8g 636692 S 6.2 0.6 39:06.55 mindie_llm_back
4114510 root 20 0 8227.0g 4.8g 635556 S 6.2 0.6 44:22.96 mindie_llm_back
4114534 root 20 0 8227.1g 4.8g 637284 S 6.2 0.6 35:15.75 mindie_llm_back
4114540 root 20 0 8227.3g 4.8g 636044 S 6.2 0.6 37:53.24 mindie_llm_back
11 root 20 0 0 0 0 I 3.1 0.0 72:38.16 rcu_sched
718539 root 20 0 0 0 0 I 3.1 0.0 18:54.87 kworker/0:2-events
4114508 root 20 0 8227.0g 4.7g 636820 S 3.1 0.6 37:50.32 mindie_llm_back
4114525 root 20 0 8226.8g 4.8g 637768 S 3.1 0.6 35:38.14 mindie_llm_back
4117472 root 20 0 627044 373180 138176 S 3.1 0.0 0:23.61 python3
4117777 root 20 0 628092 373528 138560 S 3.1 0.0 0:23.60 python3
4117781 root 20 0 9377088 853248 12108 S 3.1 0.1 1:24.30 mindie_llm_back
4118075 root 20 0 628124 372956 137612 S 3.1 0.0 0:25.05 python3
1 root 20 0 168664 11268 7452 S 0.0 0.0 1:41.23 systemd
2 root 20 0 0 0 0 S 0.0 0.0 0:05.59 kthreadd
3 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_gp
4 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_par_gp
6 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/0:0H-kblockd
9 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 mm_percpu_wq
10 root 20 0 0 0 0 S 0.0 0.0 0:40.37 ksoftirqd/0
12 root rt 0 0 0 0 S 0.0 0.0 0:08.18 migration/0
13 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/0
15 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/0
16 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/1
17 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/1
18 root rt 0 0 0 0 S 0.0 0.0 0:07.39 migration/1
19 root 20 0 0 0 0 S 0.0 0.0 0:01.17 ksoftirqd/1
21 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/1:0H-kblockd
22 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/2
23 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/2
24 root rt 0 0 0 0 S 0.0 0.0 0:07.29 migration/2
25 root 20 0 0 0 0 S 0.0 0.0 0:00.26 ksoftirqd/2
(base) root@huawei:/usr/lib# kill -9 34763
(base) root@huawei:/usr/lib# top
top - 11:39:14 up 169 days, 8:49, 5 users, load average: 183.00, 192.83, 193.54
Tasks: 2639 total, 1 running, 2638 sleeping, 0 stopped, 0 zombie
%Cpu(s): 0.1 us, 0.6 sy, 0.0 ni, 99.3 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st
MiB Mem : 772169.2 total, 166524.8 free, 95881.9 used, 509762.5 buff/cache
MiB Swap: 8192.0 total, 8171.0 free, 21.0 used. 672217.0 avail Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
30002 root 20 0 2132 1140 1056 S 4.9 0.0 0:00.24 arm
4114510 root 20 0 8227.0g 4.8g 635556 S 4.9 0.6 44:23.50 mindie_llm_back
4114259 root 20 0 16.1g 310356 100728 S 4.6 0.0 22:07.86 mindieservice_d
4114508 root 20 0 8227.0g 4.7g 636820 S 4.6 0.6 37:50.91 mindie_llm_back
4114511 root 20 0 8227.3g 4.8g 636136 S 4.6 0.6 34:42.94 mindie_llm_back
4114518 root 20 0 8227.3g 4.8g 635020 S 4.6 0.6 36:44.81 mindie_llm_back
4114525 root 20 0 8226.8g 4.8g 637768 S 4.6 0.6 35:38.65 mindie_llm_back
4114540 root 20 0 8227.3g 4.8g 636044 S 4.6 0.6 37:53.77 mindie_llm_back
4114509 root 20 0 8227.1g 4.8g 636692 S 4.2 0.6 39:07.13 mindie_llm_back
4114534 root 20 0 8227.1g 4.8g 637284 S 4.2 0.6 35:16.32 mindie_llm_back
4039 root 20 0 84460 6536 2580 S 3.6 0.0 2354:37 irqbalance
37854 root 20 0 11832 6084 2684 R 2.0 0.0 0:00.16 top
10 root 20 0 0 0 0 S 0.3 0.0 0:40.38 ksoftirqd/0
11 root 20 0 0 0 0 I 0.3 0.0 72:38.18 rcu_sched
538 root 20 0 0 0 0 S 0.3 0.0 0:00.57 ksoftirqd/87
4117462 root 20 0 628060 379520 144524 S 0.3 0.0 0:19.11 python3
4117478 root 20 0 627068 373080 138140 S 0.3 0.0 0:32.48 python3
4117551 root 20 0 627988 374916 140080 S 0.3 0.0 0:17.19 python3
4117644 root 20 0 628096 372260 137424 S 0.3 0.0 0:19.76 python3
4117649 root 20 0 9367968 852804 11724 S 0.3 0.1 1:18.34 mindie_llm_back
4117712 root 20 0 9385284 852944 11716 S 0.3 0.1 1:07.19 mindie_llm_back
4117773 root 20 0 628092 373932 139104 S 0.3 0.0 0:22.22 python3
4117957 root 20 0 627076 376844 142012 S 0.3 0.0 0:21.15 python3
4117966 root 20 0 627072 376236 141272 S 0.3 0.0 0:38.40 python3
4118074 root 20 0 628092 371992 136664 S 0.3 0.0 0:21.56 python3
4118105 root 20 0 628048 380948 145624 S 0.3 0.0 0:23.66 python3
4118312 root 20 0 628084 380396 145080 S 0.3 0.0 0:21.32 python3
4118315 root 20 0 628088 380428 145104 S 0.3 0.0 0:21.17 python3
1 root 20 0 168664 11268 7452 S 0.0 0.0 1:41.23 systemd
2 root 20 0 0 0 0 S 0.0 0.0 0:05.59 kthreadd
3 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_gp
4 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_par_gp
6 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/0:0H-kblockd
9 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 mm_percpu_wq
12 root rt 0 0 0 0 S 0.0 0.0 0:08.18 migration/0
13 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/0
(base) root@huawei:/usr/lib# kill -9 30002
(base) root@huawei:/usr/lib# cd updated
(base) root@huawei:/usr/lib/updated# ll
total 8
drwxrwxrwx 2 bin bin 4096 Mar 11 11:38 ./
drwxr-xr-x 84 root root 4096 Mar 11 07:39 ../
(base) root@huawei:/usr/lib/updated# top
top - 11:39:31 up 169 days, 8:49, 5 users, load average: 131.47, 180.44, 189.45
Tasks: 2640 total, 1 running, 2639 sleeping, 0 stopped, 0 zombie
%Cpu(s): 0.1 us, 0.3 sy, 0.0 ni, 99.6 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st
MiB Mem : 772169.2 total, 166555.7 free, 95857.1 used, 509756.4 buff/cache
MiB Swap: 8192.0 total, 8171.0 free, 21.0 used. 672241.9 avail Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
55921 root 20 0 11832 6052 2652 R 27.3 0.0 0:00.09 top
4114259 root 20 0 16.1g 310356 100728 S 4.5 0.0 22:08.60 mindieservice_d
4114508 root 20 0 8227.0g 4.7g 636820 S 4.5 0.6 37:51.72 mindie_llm_back
4114509 root 20 0 8227.1g 4.8g 636692 S 4.5 0.6 39:07.88 mindie_llm_back
4114510 root 20 0 8227.0g 4.8g 635556 S 4.5 0.6 44:24.26 mindie_llm_back
4114511 root 20 0 8227.3g 4.8g 636136 S 4.5 0.6 34:43.70 mindie_llm_back
4114518 root 20 0 8227.3g 4.8g 635020 S 4.5 0.6 36:45.57 mindie_llm_back
4114540 root 20 0 8227.3g 4.8g 636044 S 4.5 0.6 37:54.52 mindie_llm_back
1 root 20 0 168664 11268 7452 S 0.0 0.0 1:41.23 systemd
2 root 20 0 0 0 0 S 0.0 0.0 0:05.59 kthreadd
3 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_gp
4 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_par_gp
6 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/0:0H-kblockd
9 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 mm_percpu_wq
10 root 20 0 0 0 0 S 0.0 0.0 0:40.40 ksoftirqd/0
11 root 20 0 0 0 0 I 0.0 0.0 72:38.22 rcu_sched
12 root rt 0 0 0 0 S 0.0 0.0 0:08.18 migration/0
13 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/0
15 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/0
16 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/1
17 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/1
18 root rt 0 0 0 0 S 0.0 0.0 0:07.39 migration/1
19 root 20 0 0 0 0 S 0.0 0.0 0:01.17 ksoftirqd/1
21 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/1:0H-kblockd
22 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/2
23 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/2
24 root rt 0 0 0 0 S 0.0 0.0 0:07.29 migration/2
25 root 20 0 0 0 0 S 0.0 0.0 0:00.26 ksoftirqd/2
27 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/2:0H-kblockd
28 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/3
29 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/3
30 root rt 0 0 0 0 S 0.0 0.0 0:07.22 migration/3
31 root 20 0 0 0 0 S 0.0 0.0 0:00.90 ksoftirqd/3
33 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/3:0H-kblockd
34 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/4
35 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/4
(base) root@huawei:/usr/lib/updated# sar 1 5
Linux 5.4.0-26-generic (huawei) 03/11/2025 _aarch64_ (192 CPU)
11:39:34 AM CPU %user %nice %system %iowait %steal %idle
11:39:35 AM all 0.04 0.00 0.11 0.00 0.00 99.84
^C
Average: all 0.04 0.00 0.11 0.00 0.00 99.84
(base) root@huawei:/usr/lib/updated# rm -rf /usr/lib/updated/arm
(base) root@huawei:/usr/lib/updated# cd ..
(base) root@huawei:/usr/lib# rm -rf /usr/lib/updated
(base) root@huawei:/usr/lib# ll
total 964
drwxr-xr-x 83 root root 4096 Mar 11 11:39 ./
drwxr-xr-x 11 root root 4096 Apr 23 2020 ../
drwxr-xr-x 32 root root 32768 Mar 5 09:56 aarch64-linux-gnu/
drwxr-xr-x 2 root root 4096 Apr 23 2020 accountsservice/
drwxr-xr-x 2 root root 4096 Apr 23 2020 apparmor/
drwxr-xr-x 5 root root 4096 Apr 23 2020 apt/
drwxr-xr-x 2 root root 4096 Sep 23 02:17 bfd-plugins/
drwxr-xr-x 2 root root 4096 Apr 22 2020 binfmt.d/
drwxr-xr-x 2 root root 4096 Apr 23 2020 bolt/
drwxr-xr-x 3 root root 4096 Apr 23 2020 byobu/
drwxr-xr-x 2 root root 4096 Apr 23 2020 cloud-init/
-rwxr-xr-x 1 root root 739 Mar 5 09:30 cnf-update-db*
-rwxr-xr-x 1 root root 3565 Feb 14 2022 command-not-found*
drwxr-xr-x 2 root root 4096 Sep 20 07:02 compat-ld/
drwxr-xr-x 2 root root 4096 Apr 23 2020 console-setup/
lrwxrwxrwx 1 root root 21 Sep 23 02:17 cpp -> /etc/alternatives/cpp*
drwxr-xr-x 3 root root 4096 Sep 20 07:02 crda/
drwxr-xr-x 4 root root 4096 Apr 23 2020 cryptsetup/
-r--r--r-- 1 root root 36 Dec 13 10:59 davinci.conf
drwxr-xr-x 2 root root 4096 Apr 23 2020 dbus-1.0/
drwxr-xr-x 3 root root 4096 Apr 23 2020 dpkg/
drwxr-xr-x 3 root root 4096 Apr 23 2020 dracut/
drwxr-xr-x 2 root root 4096 Apr 23 2020 eject/
drwxr-xr-x 3 root root 4096 Sep 23 02:17 emacsen-common/
drwxr-xr-x 2 root root 4096 Apr 23 2020 environment.d/
drwxr-xr-x 2 root root 4096 Apr 23 2020 file/
drwxr-xr-x 2 root root 4096 Apr 23 2020 finalrd/
drwxr-xr-x 86 root root 20480 Sep 20 07:02 firmware/
drwxr-xr-x 3 root root 4096 Sep 23 02:17 gcc/
drwxr-xr-x 2 root root 4096 Apr 23 2020 girepository-1.0/
drwxr-xr-x 3 root root 4096 Apr 23 2020 git-core/
drwxr-xr-x 2 root root 4096 Apr 23 2020 gnupg/
drwxr-xr-x 2 root root 4096 Apr 23 2020 gnupg2/
drwxr-xr-x 2 root root 4096 Sep 20 07:02 gold-ld/
drwxr-xr-x 4 root root 4096 Apr 23 2020 groff/
drwxr-xr-x 4 root root 4096 Sep 20 07:02 grub/
drwxr-xr-x 2 root root 4096 Apr 23 2020 hdparm/
drwxr-xr-x 2 root root 4096 Apr 23 2020 init/
drwxr-xr-x 3 root root 4096 Apr 23 2020 initcpio/
drwxr-xr-x 4 root root 4096 Apr 23 2020 initramfs-tools/
drwxr-xr-x 3 root root 4096 Apr 23 2020 kernel/
drwxr-xr-x 3 root root 4096 Apr 23 2020 klibc/
-rwxr-xr-x 1 root root 91080 Nov 7 2019 klibc-unVzPS-prFh5518UkFjYOJInn9c.so*
drwxr-xr-x 2 root root 4096 Apr 23 2020 language-selector/
lrwxrwxrwx 1 root root 28 Apr 30 2024 ld-linux-aarch64.so.1 -> aarch64-linux-gnu/ld-2.31.so*
lrwxrwxrwx 1 root root 16 Apr 6 2020 libdmmp.so -> libdmmp.so.0.2.0
-rw-r--r-- 1 root root 34664 Apr 6 2020 libdmmp.so.0.2.0
lrwxrwxrwx 1 root root 18 Mar 3 2020 libhandle.so.1 -> libhandle.so.1.0.3
-rw-r--r-- 1 root root 14336 Mar 3 2020 libhandle.so.1.0.3
lrwxrwxrwx 1 root root 16 Apr 6 2020 libmpathcmd.so -> libmpathcmd.so.0
-rw-r--r-- 1 root root 10008 Apr 6 2020 libmpathcmd.so.0
lrwxrwxrwx 1 root root 20 Apr 6 2020 libmpathpersist.so -> libmpathpersist.so.0
-rw-r--r-- 1 root root 30488 Apr 6 2020 libmpathpersist.so.0
lrwxrwxrwx 1 root root 17 Apr 6 2020 libmultipath.so -> libmultipath.so.0
-rw-r--r-- 1 root root 368168 Apr 6 2020 libmultipath.so.0
drwxr-xr-x 3 root root 4096 Sep 20 07:02 linux/
drwxr-xr-x 3 root root 4096 Sep 20 07:02 linux-boot-probes/
drwxr-xr-x 3 root root 4096 Sep 20 07:33 locale/
drwxr-xr-x 3 root root 4096 Apr 23 2020 lsb/
drwxr-xr-x 2 root root 4096 Apr 23 2020 man-db/
drwxr-xr-x 3 root root 4096 Apr 23 2020 mime/
drwxr-xr-x 2 root root 4096 Sep 20 07:02 modprobe.d/
drwxr-xr-x 3 root root 4096 Sep 20 07:02 modules/
drwxr-xr-x 2 root root 4096 Apr 22 2020 modules-load.d/
drwxr-xr-x 2 root root 4096 Apr 23 2020 multipath/
drwxr-xr-x 3 root root 4096 Apr 23 2020 nagios/
drwxr-xr-x 2 root root 4096 Apr 23 2020 netplan/
drwxr-xr-x 8 root root 4096 Apr 23 2020 networkd-dispatcher/
drwxr-xr-x 2 root root 4096 Apr 23 2020 open-iscsi/
drwxr-xr-x 2 root root 4096 Sep 20 07:03 openssh/
drwxr-xr-x 2 root root 4096 Sep 20 07:02 os-prober/
drwxr-xr-x 4 root root 4096 Sep 20 07:02 os-probes/
-rw-r--r-- 1 root root 378 Apr 15 2020 os-release
drwxr-xr-x 2 root root 4096 Apr 23 2020 packagekit/
drwxr-xr-x 2 root root 4096 Apr 23 2020 pkgconfig/
drwxr-xr-x 4 root root 4096 Apr 23 2020 pm-utils/
drwxr-xr-x 2 root root 4096 Apr 23 2020 policykit-1/
drwxr-xr-x 3 root root 4096 Apr 23 2020 python2.7/
drwxr-xr-x 3 root root 4096 Apr 23 2020 python3/
drwxr-xr-x 30 root root 20480 Dec 16 07:10 python3.8/
drwxr-xr-x 3 root root 4096 Apr 23 2020 recovery-mode/
drwxr-xr-x 2 root root 4096 Apr 23 2020 rsyslog/
drwxr-xr-x 2 root root 4096 Dec 26 2019 sasl2/
lrwxrwxrwx 1 root root 19 Feb 26 2020 sftp-server -> openssh/sftp-server*
drwxr-xr-x 2 root root 4096 Apr 23 2020 snapd/
drwxr-xr-x 2 root root 4096 Mar 5 09:34 software-properties/
drwxr-xr-x 3 root root 4096 Sep 23 02:17 ssl/
drwxr-xr-x 2 root root 4096 Apr 23 2020 sudo/
drwxr-xr-x 2 root root 4096 Apr 23 2020 sysctl.d/
drwxr-xr-x 2 root root 4096 Mar 6 00:45 sysstat/
drwxr-xr-x 17 root root 4096 Apr 23 2020 systemd/
drwxr-xr-x 2 root root 4096 Apr 23 2020 sysusers.d/
drwxr-xr-x 2 root root 4096 Apr 23 2020 tc/
drwxr-xr-x 16 root root 4096 Feb 26 2020 terminfo/
drwxr-xr-x 2 root root 4096 Apr 23 2020 tmpfiles.d/
drwxr-xr-x 2 root root 4096 Apr 23 2020 ubuntu-release-upgrader/
drwxr-xr-x 4 root root 4096 Apr 23 2020 udev/
drwxr-xr-x 2 root root 4096 Apr 23 2020 ufw/
drwxr-xr-x 2 root root 4096 Apr 23 2020 update-notifier/
drwxr-xr-x 2 root root 4096 Apr 23 2020 valgrind/
drwxr-xr-x 2 root root 4096 Apr 23 2020 xfsprogs/
(base) root@huawei:/usr/lib# rm -rf /usr/lib/updated
(base) root@huawei:/usr/lib# ll -d /usr/lib/updated
ls: cannot access '/usr/lib/updated': No such file or directory
(base) root@huawei:/usr/lib# top
top - 11:40:20 up 169 days, 8:50, 5 users, load average: 62.73, 155.39, 180.55
Tasks: 2641 total, 1 running, 2640 sleeping, 0 stopped, 0 zombie
%Cpu(s): 0.0 us, 0.3 sy, 0.0 ni, 99.7 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st
MiB Mem : 772169.2 total, 166550.6 free, 95862.4 used, 509756.2 buff/cache
MiB Swap: 8192.0 total, 8171.0 free, 21.0 used. 672236.5 avail Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
55948 root 20 0 11832 6052 2648 R 27.3 0.0 0:00.09 top
4114509 root 20 0 8227.1g 4.8g 636692 S 9.1 0.6 39:10.07 mindie_llm_back
4114508 root 20 0 8227.0g 4.7g 636820 S 4.5 0.6 37:54.11 mindie_llm_back
4114510 root 20 0 8227.0g 4.8g 635556 S 4.5 0.6 44:26.42 mindie_llm_back
4114511 root 20 0 8227.3g 4.8g 636136 S 4.5 0.6 34:45.88 mindie_llm_back
4114518 root 20 0 8227.3g 4.8g 635020 S 4.5 0.6 36:47.83 mindie_llm_back
4114534 root 20 0 8227.1g 4.8g 637284 S 4.5 0.6 35:19.23 mindie_llm_back
4114540 root 20 0 8227.3g 4.8g 636044 S 4.5 0.6 37:56.69 mindie_llm_back
4117403 root 20 0 9377088 855920 11840 S 4.5 0.1 1:16.38 mindie_llm_back
4117819 root 20 0 627036 373676 138856 S 4.5 0.0 0:18.27 python3
1 root 20 0 168664 11268 7452 S 0.0 0.0 1:41.25 systemd
2 root 20 0 0 0 0 S 0.0 0.0 0:05.59 kthreadd
3 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_gp
4 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_par_gp
6 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/0:0H-kblockd
9 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 mm_percpu_wq
10 root 20 0 0 0 0 S 0.0 0.0 0:40.41 ksoftirqd/0
11 root 20 0 0 0 0 I 0.0 0.0 72:38.24 rcu_sched
12 root rt 0 0 0 0 S 0.0 0.0 0:08.18 migration/0
13 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/0
15 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/0
16 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/1
17 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/1
18 root rt 0 0 0 0 S 0.0 0.0 0:07.39 migration/1
19 root 20 0 0 0 0 S 0.0 0.0 0:01.17 ksoftirqd/1
21 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/1:0H-kblockd
22 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/2
23 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/2
24 root rt 0 0 0 0 S 0.0 0.0 0:07.29 migration/2
25 root 20 0 0 0 0 S 0.0 0.0 0:00.26 ksoftirqd/2
27 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/2:0H-kblockd
28 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/3
29 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/3
30 root rt 0 0 0 0 S 0.0 0.0 0:07.22 migration/3
31 root 20 0 0 0 0 S 0.0 0.0 0:00.90 ksoftirqd/3
33 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/3:0H-kblockd
(base) root@huawei:/usr/lib# sar 1 10
Linux 5.4.0-26-generic (huawei) 03/11/2025 _aarch64_ (192 CPU)
11:40:24 AM CPU %user %nice %system %iowait %steal %idle
11:40:25 AM all 0.02 0.00 0.10 0.00 0.00 99.89
^C
Average: all 0.02 0.00 0.10 0.00 0.00 99.89
(base) root@huawei:/usr/lib# crontab -l
#* * * * * /usr/lib/updated/upd >/dev/null 2>&1
(base) root@huawei:/usr/lib# ll /usr/lib/updated
ls: cannot access '/usr/lib/updated': No such file or directory
相关参考:
解决挖矿病毒【Xmrig miner 】CPU 100%服务器卡死问题 - 章力 - 博客园