Quote Originally Posted by eth00 View Post
I was helping Paul look at this, at least in his specific case it was completely related to both cPanel and linux.
want to make it clear, thsi isn't a cPanel exploit or flaw in cpanel or cpanel boxes. in fact, you could remove php and mysql wouldn't stop this. for those that think you have cleaned up from backups. check for SSH keys you didn't install