./cache.sh?

[Peter Silva]

fwiw,  Is this in some kind of high availability cluster?  The first
hit on google is this:

http://docs.intersystems.com/latest/csp/docbook/DocBook.UI.Page.cls?KEY=GHA_redhat_clusters_cache_sh

when you delete it on one node, it might make sense if another
participating node perceives that as damage, and repairs it.  the
later hits on a google search looked even less likely.

quoting from their web site: "InterSystems IRIS is a high-performance,
“cloud-first” platform that scales up and out, and integrates with
other technologies faster."

So I have no clue what it does.

On Tue, Feb 6, 2018 at 11:22 PM, Karl Auer <kauer at biplane.com.au> wrote:
> An odd one today!
>
> A client has a system that is running a process that shows up in the
> process list as "./cache.sh". There is no file named "cache.sh"
> anywhere on his system. This process is chewing up most of his CPU. If
> stopped, it starts again after a few minutes. It starts on boot, too.
>
> I thnk it's malware, and since this system is showing a few other signs
> of compromise my immediate recommendation was to rebuild the system
> from scratch, and that's what we'll probably do.
>
> But I'm curious - has anyone seen this before? Google was little help
> -there are a zillion "cache" things out there.
>
> Regards, K.
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Karl Auer (kauer at biplane.com.au)
> http://www.biplane.com.au/kauer
> http://twitter.com/kauer389
>
> GPG fingerprint: A0CD 28F0 10BE FC21 C57C 67C1 19A6 83A4 9B0B 1D75
> Old fingerprint: A52E F6B9 708B 51C4 85E6 1634 0571 ADF9 3C1C 6A3A
>
>
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users