jenkins user cpu is high and will jenkins create .firefoxcatche directory

[Turaco mobile]

Hi, Jenkins is running in CentOS 7 and the user is jenkins. Most of the time cpu usage is high above 70% even nobody building the jobs.

Top command shows:

Jenkins user and command column shows 'cron' or 'tsm'.

12310 jenkins   20   0 3488136   9936   1088 S  61.1  0.3  20:07.09 tsm
16196 build     20   0 3491620  10212   1188 S  50.0  0.3   6:21.44 tsm

Will jenkins default create hidden file .firefoxcatche directory?

[root@do-svn-Jenkins cron]# cat jenkins
0 0 */3 * * /var/lib/jenkins/.firefoxcatche/a/upd>/dev/null 2>&1
@reboot /var/lib/jenkins/.firefoxcatche/a/upd>/dev/null 2>&1
5 8 * * 0 /var/lib/jenkins/.firefoxcatche/b/sync>/dev/null 2>&1
@reboot /var/lib/jenkins/.firefoxcatche/b/sync>/dev/null 2>&1
#5 1 * * * /tmp/.X13-unix/.rsync/c/aptitude>/dev/null 2>&1

Pls let know how to resolve this issue. Even if i delete this file, it's automatically created.

[Baptiste Mathus]

No, that file is really unlikely created by Jenkins.

What else runs on this machine?

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAC3KZS_eYPztwQafYQDLMKbQWZSkx0yDNAnZVBg2E6nuwAUqfw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Richard Bywater]

A quick Google search of the directory name ".firefoxcatche" appears to point at possible crypto-mining malware which would go along with the high CPU usage I'm guessing. I'd get your machine checked.

Richard.

--

[Richard Bywater]

In fact  https://msandbu.org/real-life-detection-of-a-virtual-machine-in-azure-with-security-center/ sounds very similar to your issue.