Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Chkrootkit:Checking `chkutmp'... The tty of the following user process(es) were not

Discussion in 'General Discussion' started by isputra, Jan 7, 2006.

  1. isputra

    isputra Well-Known Member

    Joined:
    May 3, 2003
    Messages:
    576
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Mbelitar
    Hi,

    Today i notice that my chkrootkit test result give me strange message :

    Checking `chkutmp'... The tty of the following user process(es) were not found
    in /var/run/utmp !
    ! RUID PID TTY CMD
    ! root 29541 pts/0 /usr/bin/perl /scripts/realperlinstaller version Archive::Tar Archive::Zip BSD::Resource Bundle::DBD::mysql Bundle::Interchange Bundle::LWP Business::OnlinePayment::AuthorizeNet Business::UPS CGI Compress::Zlib Crypt::SSLeay DBI Date::Parse Digest::MD5 Digeschkutmp: nothing deleted

    What happen with this ?
    Is it my server hacked ?

    Thanks
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,470
    Likes Received:
    21
    Trophy Points:
    463
    Location:
    Go on, have a guess
    No, that's simply a terminal process running exactly what it shows. Probably a hung session that you terminated. If it's still there, kill of the owning PID, but be careful if it's simply a subprocess of a larger thread (i.e. do ps axf to find out more).
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    postcd likes this.
  3. isputra

    isputra Well-Known Member

    Joined:
    May 3, 2003
    Messages:
    576
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Mbelitar
    thanks chirpy.

    I use ps axf and no PID with 29541
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice