The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

/bin/sh: line 0: kill: (17392) - No such process

Discussion in 'General Discussion' started by fonefun, Sep 1, 2006.

  1. fonefun

    fonefun Member

    Joined:
    May 19, 2005
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    0
    i am getting this email every minute does anybody know what it is



    /bin/sh: line 0: kill: (17392) - No such process
    chown root:root /var/tmp/h3 && chmod 4755 /var/tmp/h3 && rm -rf /etc/cron.d/core && kill -USR1 17392
     
  2. WebScHoLaR

    WebScHoLaR Well-Known Member

    Joined:
    Dec 14, 2005
    Messages:
    511
    Likes Received:
    2
    Trophy Points:
    18
    Location:
    Planet Earth
    Login to the server via SSH and run crontab -l and check for any such cronjob executing every minute.
     
  3. mctDarren

    mctDarren Well-Known Member

    Joined:
    Jan 6, 2004
    Messages:
    664
    Likes Received:
    2
    Trophy Points:
    18
    Location:
    New Jersey
    cPanel Access Level:
    Root Administrator
    Smells like a local root exploit to me. If it's not too late, look in /etc/cron.d to see what core is and check if /var/tmp/h3 is still there...
     
  4. fonefun

    fonefun Member

    Joined:
    May 19, 2005
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    0
Loading...

Share This Page