Re: BUG #16692: Postgres process using 100 percent CPU

On Fri, Oct 30, 2020 at 03:32:13PM +0100, Magnus Hagander wrote:
> On Fri, Oct 30, 2020 at 3:29 PM PG Bug reporting form
> <noreply(at)postgresql(dot)org> wrote:
> >
> > The following bug has been logged on the website:
> >
> > Bug reference: 16692
> > Logged by: Anup Maity
> > Email address: email2anup14(at)gmail(dot)com
> > PostgreSQL version: 11.0
> > Operating system: UBUNTU 20.4
> > Description:
> >
> > From last 1 week, this process with user postgres is utilizing entire cpu
> > and approx 2.5gb ram. I have tried reinstalling postgres but then too the
> > issues persists. please help. No query is being running. this is in idle
> > usage
> > 37811 postgres 20 0 2442744 2.3g 4 S 399.7 14.8 148:23.87
> > n2cP0Mv4
> >
>
> That is not a PostgreSQL process.
>
> It looks very much like malware running on your system, that happens
> to be running under the "postgres" user account.
>
> I'd shut the machine down immediately. And then mount the file system
> through some other means (meaning mount the disk from a different
> system and absolutely do *NOT* boot off this disk), figuring out where
> those binaries are and try to salvage the database from there.

Before shutting down it might be good to look at "ls -l /proc/37811",
especially "cwd" and "exe" links.

depesz