Beware Of Process Cpanel

[logikstudios]

Hey.
Please beaware of a process called cpanel running in the CPU/MEMORY/MY SQL USAGE. This is nothing to do with cpanel. This infact a virus or trojen. I got this on tuesday. This turns your server into a read permission. If you reboot your server with this on it will not boot up. I had this on tuesday and it ended up them have to reinstall the OS and Cpanel. IF you have two hard drives, move all accounts onto the second hard drive if you can.

You will see if you have this if your CPU load gets higher. Mine got to about 97%

Thanks,
Nathaniel

 

[logikstudios]

Sorry i did mean to mention that you will see the process CPANEL.

Also i did not receive any logs when this was installed

Thanks,
Nathaniel

 

[fireshark]

real cpanel = cpsrvd

 

[johny_gjx]

can cPanel confirm this? I also have this issue but after reboot things were normal.

 

[isputra]

is this process ?

Top Process %CPU 17.0 [cpanel ]

 

[logikstudios]

Its the only thing i can relate to. I would always see cpsrvd. But when i saw cpanel as a process and did not recieve a logwatch. Something was wrong. I then started to notice the server became slugiish. Then payed a guy to have a look. tried to install the CSF firewall. Then that was it.

 

[logikstudios]

Mine was about that. But then the server load went to about 90% because something put the server to a read only permission.