perl-demployer.cgi

[marinanewman]

looking in my whm...
&show cpu usage&

I have this process
477 nobody 0 11.7 0.4 perl-demployer.cgi

sometimes 2 or 3 of them that stay there for hours.. using alot of cpu..

any idea what it is and what it does.?

[dgbaker]

Nor any info on a google search for it. Could be a custom scripts of a client?

[marinanewman]

did a &trace& on it in whm and get hundreds of lines like this

read(5, &&, 4096) = 0
write(6, &\7&, 1) = 1
read(5, &&, 4096) = 0
write(6, &\7&, 1) = 1
read(5, &&, 4096) = 0
write(6, &\7&, 1) = 1
read(5, &&, 4096) = 0
write(6, &\7&, 1) = 1
read(5, &&, 4096) = 0
write(6, &\7&, 1) = 1
read(5, &&, 4096) = 0
brk(0x87f7000) = 0x87f7000


over and over..

[dgbaker]

From an SSH prompt if you do a
locate perl-demployer.cgi

does it come back with anything?

[Website Rob]

My search turned up no such script by that name, but did show it (demployer) is not used as an English word we would recognize.

Les blagues [New Window] [Full Window]
... reparti. Lassée de répéter tous les jours la même chose à sa grande fille, une dame décide demployer une autre méthode. Elle ...
URL: http://www.misterblague.com/cgi-bin/blague_new.cgi?catego.

?????rencaijob.com--???????! [New Window] [Full Window]
The summary for this Chinese(Simplified) page contains characters that cannot be correctly displayed in this language/character set.
URL: http://www.rencaijob.com/demployer.htm

Database System--????? 12 ... [New Window] [Full Window]
The summary for this Bihari page contains characters that cannot be correctly displayed in this language/character set.
URL: http://www.uni.net.th/~09_2543/lesson12/ms3t2.htm
Sources: Netscape 4

Database System--บทที่ 12 ความปลอดภัยของฐานข้อมูล [New Window] [Full Window]
ลักษณะส่วนรวมของวิว( View)
URL: http://www.uni.net.th/~09_2543/lesson12/cs3t2.htm


I would trace the IP and/or just shut down the process, see what happens.

[marinanewman]

I killed all of them.. there was 2 running at the same time.. each time I killed one, another popped up.. finally they all died..

[Website Rob]

May they R.I.P.