Crontab like find and delete

security

(Gerald) #1

Hello,
I’ve caught something again and although a crontab wants to take over my computer.

I get the following output if the following command is given:

or user in $ (cut -f1 -d: / etc / passwd); do crontab -u $ user -l; done

* / 4 * * * * pidof momi || exec / var / tmp / momi> / dev / null 2> & 1 &

A directory / var / tmp / momi no longer exists :wink: However, I do not get the Crontab away … vll someone can help me!

Thank you!


(Marc) #2

To know under which user’s crontab is running:

for user in $(cut -f1 -d: /etc/passwd); do echo $user; crontab -u $user -l; done

(Gerald) #3

The user is apache

apache
    */4 * * * * pidof momi || exec /var/tmp/momi >/dev/null 2>&1 &

(Marc) #4

Anything in:

crontab -u apache