Question

  • Creator
    Topic
  • #2341867

    Unfamiliar entries in my router system log, Maleware?

    Locked

    by zzreader ·

    Tags: 

    I noticed strange entries on our router on 10/29/21016 and they continue every 5 minutes. The cron.info hits the router every 5 minutes for 6 times then the killall occurs and the cron.info starts again. This occurs even when there are no computers connected to the router.
    I have Comcast
    Motorola surfboard 6141
    Belkin AC1200 router.
    all computers are Mint 17.3
    Here is an example.
    Nov 8 07:50:01 localhost cron.info crond[1096]: crond: USER root pid 3725 cmd /usr/scripts/mem_sync
    Nov 8 07:55:01 localhost cron.info crond[1096]: crond: USER root pid 3775 cmd /usr/scripts/mem_sync
    Nov 8 08:00:01 localhost cron.info crond[1096]: crond: USER root pid 3827 cmd killall -SIGUSR2 nlinkd
    Nov 8 08:00:01 localhost cron.info crond[1096]: crond: USER root pid 3829 cmd /usr/scripts/mem_sync
    Nov 8 08:05:01 localhost cron.info crond[1096]: crond: USER root pid 3879 cmd /usr/scripts/mem_sync
    Nov 8 08:10:01 localhost cron.info crond[1096]: crond: USER root pid 3931 cmd /usr/scripts/mem_sync
    Nov 8 08:15:01 localhost cron.info crond[1096]: crond: USER root pid 3981 cmd /usr/scripts/mem_sync
    Nov 8 08:20:01 localhost cron.info crond[1096]: crond: USER root pid 4033 cmd /usr/scripts/mem_sync
    Nov 8 08:25:01 localhost cron.info crond[1096]: crond: USER root pid 4083 cmd /usr/scripts/mem_sync
    Nov 8 08:30:01 localhost cron.info crond[1096]: crond: USER root pid 4131 cmd killall -SIGUSR2 nlinkd
    Nov 8 08:30:01 localhost cron.info crond[1096]: crond: USER root pid 4133 cmd /usr/scripts/mem_sync

All Answers

Share your knowledge