Since this morning I began to notice a slowness into my Linux/mageia 6.
I checked by using
top command as root user, finding that a process named
xm64 running as
invitado user (guest user in spanish) was using 755% of my CPU.
I killed several times that process and it suddendly began again. The suspicious thing was that nobody was logged in as guest user (invitado), the only real user of the computer was me.
invitado is an account just for my guests when they are at my home, I decided to erase that user before kill again
After erasing that user,
xm64 process never showed up again.
I searched for xm64 information on /var/log using
grep -ri xm64 /var/log but nothing was found.
Now I'm installing
maldetect in order to search for information.
I searched on google and I find nothing related with xm64 linux but when I look just for xm64 I find information about a trojan virus on windows XM64.EXE.
This is the first time in 25 years since I began to use Linux that I suspect that my Linux machine is infected.
I blame myself because I created that guest user using a dictionary password ... I promise to never do this again.
Could anyone confirm me if this is a malware on Linux or if this is another issue?