Notes

Jump to bottom

Beth edited this page Nov 10, 2025 · 6 revisions

Sus Users

sudoadmin

Sus service

thuglyfe
Points to: /var/tmp/SecurityUpdate/svchost

Sus scheduled task (crontab)

sudo crontab -l

Bunch of sus files in /var/tmp