In fact https://msandbu.org/real-life-detection-of-a-virtual-machine-in-azure-with-security-center/ sounds very similar to your issue.
On Mon, 3 Jun 2019 at 22:13, Richard Bywater <[email protected]> wrote: > A quick Google search of the directory name ".firefoxcatche" appears to > point at possible crypto-mining malware which would go along with the high > CPU usage I'm guessing. I'd get your machine checked. > > Richard. > > On Tue, 21 May 2019 at 18:12, Turaco mobile <[email protected]> wrote: > >> Hi, Jenkins is running in CentOS 7 and the user is jenkins. Most of the >> time cpu usage is high above 70% even nobody building the jobs. >> Top command shows: >> Jenkins user and command column shows 'cron' or 'tsm'. >> 12310 jenkins 20 0 3488136 9936 1088 S 61.1 0.3 20:07.09 tsm >> 16196 build 20 0 3491620 10212 1188 S 50.0 0.3 6:21.44 tsm >> >> Will jenkins default create hidden file .firefoxcatche directory? >> [root@do-svn-Jenkins cron]# cat jenkins >> 0 0 */3 * * /var/lib/jenkins/.firefoxcatche/a/upd>/dev/null 2>&1 >> @reboot /var/lib/jenkins/.firefoxcatche/a/upd>/dev/null 2>&1 >> 5 8 * * 0 /var/lib/jenkins/.firefoxcatche/b/sync>/dev/null 2>&1 >> @reboot /var/lib/jenkins/.firefoxcatche/b/sync>/dev/null 2>&1 >> #5 1 * * * /tmp/.X13-unix/.rsync/c/aptitude>/dev/null 2>&1 >> >> Pls let know how to resolve this issue. Even if i delete this file, it's >> automatically created. >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Jenkins Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/jenkinsci-users/CAC3KZS_eYPztwQafYQDLMKbQWZSkx0yDNAnZVBg2E6nuwAUqfw%40mail.gmail.com >> <https://groups.google.com/d/msgid/jenkinsci-users/CAC3KZS_eYPztwQafYQDLMKbQWZSkx0yDNAnZVBg2E6nuwAUqfw%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAAy0hwcr%2Bc1t59A1quW4o5d7YYrrZnsUst1LWh6JxXX9xxpc0w%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
