cryptominer warning

[xenios]

I got the below warning today. Any idea?
---------------------
Programs or services that no package installed and that hide themselves as system processes: /etc/systemd/system/ntpd-manual.service(/usr/sbin/ntpd). This matches a known cryptominer. Stop and disable the service, keep a copy of the files for analysis, change the root password and check how they were installed (root shell history, SSH logins).
----------------------
CWPpro version: 1.30.3

[overseer]

Sounds like a very suspicious, illegitimate process. Kill it!

Code Select Expand

systemctl stop ntpd-manual.service
systemctl disable ntpd-manual.service
rm -f /etc/systemd/system/ntpd-manual.service
rm -f /usr/sbin/ntpdReboot.