Process 'sustes' using CPU at 600%

[Deleted member 813988]

I have the issue with my one of my linodes - process name "sustes" which is using cpu at 600% continuously. Searching online I found this link - https://www.digitalocean.com/community/questions/what-is-this-sustes-in-my-process-in-my-cpu-stats, and it may be that someone using the server to mine bitcoins (lol, not lol).

Did anyone had a similar issue? How to take it down? Seems like 'usual' methods don't work.

 

[Couch Monkey Media]

Just shut the server down and Strat back up and see if the resource limit jumps again. Then I would go in and still killing process one by one. if this is a clients server of yours I would suspend and give them a few options. 1. Upgrade to a plan that fits your needs. 2. Move to a different web host.

 

[Deleted member 813988]

Just shut the server down and Strat back up and see if the resource limit jumps again. Then I would go in and still killing process one by one. if this is a clients server of yours I would suspend and give them a few options. 1. Upgrade to a plan that fits your needs. 2. Move to a different web host.

Thanks for suggesting, it’s one of my droplets on Linode, so far the support only told me its self managed droplets and run ClamAv - it too helpful

 

[ExonHost]

You can install maldet and start scanning. If you can't solve the issue, you can hire a system admin.

 

[Deleted member 813988]

Just shut the server down and Strat back up and see if the resource limit jumps again. Then I would go in and still killing process one by one. if this is a clients server of yours I would suspend and give them a few options. 1. Upgrade to a plan that fits your needs. 2. Move to a different web host.

I have tried this but this process starts again and again
I have then deleted files also and it was stopped but now again its started

You can install maldet and start scanning. If you can't solve the issue, you can hire a system admin.

What's maldet? Like ClamAv?

 

[ExonHost]

Then I'd suggest to reinstall the system. Upload the files from your backup after reinstall.

Yes, its malware/virus scanner.

 

[hajroboss]

check inside "/etc/rc.local" and other startup files. Maybe you have it attached to start up with system boot. If you see something wrong in it, remove and restart server

 

[Deleted member 813988]

check inside "/etc/rc.local" and other startup files. Maybe you have it attached to start up with system boot. If you see something wrong in it, remove and restart server

thanks for suggestion!