Kdevtmpfsi unexpected process runing on the server

benjaminmaneno 2021-02-16 15:48:34 UTC #1

Keywords: LAMP/MAMP/WAMP - Microsoft Azure - Technical issue - Upgrade
bnsupport ID: e7093638-beb1-44e6-13db-93b057fdb103
Description:
hi guys,
we have seen this process (kdevtmpfsi) running on our server since 2 weeks and we have been able to kill it but now we want to know how to make sure that it doesn't come back again.
is there anyting we can do, any upgrade available ?
any help or suggestion will be greatly appreciated.

thank you.

gongomgra 2021-02-17 12:03:35 UTC #2

Hi @benjaminmaneno,

Thanks for using Bitnami. I did a quick search on the Internet about that process and it seems to be a crypto miner. I launched a fresh new LAMP Azure machine to check if it is included by mistake in our images, but we are not including it.

I found some information about this, can you check it? There are some solutions as well in the links

https://meanands.medium.com/kdevtmpfsi-using-100-of-cpu-here-is-how-you-can-fix-that-89c247a24442

https://www.trendmicro.com/en_us/research/20/d/exposed-redis-instances-abused-for-remote-code-execution-cryptocurrency-mining.html

This seems to be related to Redis services running with open ports. Is that your case?

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!