26 Apr
2024
26 Apr
'24
3:57 p.m.
On Fri April 26 2024 06:52:08 William Morder via tde-users wrote:
<snip>
I had to restart my proxy, then I used iwconfig and
ifconfig to restart my
connection. I noticed that top showed 17 zombies.
So I said, let's see. As one can see from the output below, most of these
zombies are indeed root processes named w, whatever that means here.
No (if readers are wondering), I have not yet tried to trace these PIDs to
discover exactly what are these processes; but at least I know that those
mysterious w processes indeed often are the zombies, and that they are
owned by root.
<snip>
If I found unexpected things happening on a system I would be worried
about the possibility of malware.
If I found an unexpected zombie with pid 12345 I would immediately do
"file /proc/12345/exe" and proceed to investigate from there.
--Mike