I have a unknown process when I run
- When I kill the process it is coming again with another random name.
- when I check the rc.d levels and init.d there are many random name similar like this one and this one is also there.
- when I try to apt-get remove or anthing elses it is coming again.
- when I plug in network cable it is locking our whole network.
Do you have any idea how I can remove it?
What is this service/process?
This is the exe file, when I delete it, it is coming again too.
/proc/**pid**/exe => symbolic link to /usr/bin/hgmjzjkpxa
When i check "netstat -natp" there is an establisment foreign address is 22.214.171.124:2828. When i try to add rules to iptables, it is not working. But after trying and then restart this address change to 126.96.36.199:2828 this one.
OS is Debian Wheeze