I need help. I'm using ubuntu 16.04.5 LTS. i wanna edit the crontab and i already login as root. when i run command "crontab -e", there is already a schedule that download file and execute. i think it's a trojan so i want to remove from crontab but everytime i change the crontab, the error message show "operation not permitted".

crontab list

cannot edit crontab

file access

How to fix this problem and remove the injected script in my crontab?


This error message is often shown for files with the 'immutable' or 'append-only' attributes. Use lsattr on the files (and their parent folder) to check whether they have this attribute, and chattr to remove it.

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.