hm2k

Well-Known Member
Jul 19, 2005
93
0
156
I have recently removed a file from our server, however, it seems that the file was set to run by crontab.

I have used crontab -l to list all the crons under root, and I cannot see this file.

Yet it keeps trying to run, and I keep getting mail to say that.

The mail I receive is as follows:

Return-path: <[email protected][server].xxx.com>
Envelope-to: [email protected]
Delivery-date: Sun, 27 Aug 2006 01:56:04 +0100
Received: from xxxc by [server].xxx.com with local-bsmtp (Exim 4.52)
id 1GH8wU-0000Iz-5q
for [email protected]; Sun, 27 Aug 2006 01:56:03 +0100
X-Spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-25) on [server].xxx.com
X-Spam-Level:
X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00,NO_RELAYS
autolearn=ham version=3.1.4
Received: from root by [server].xxx.com with local (Exim 4.52)
id 1GH8wU-0000Ib-1J
for [email protected][server].xxx.com; Sun, 27 Aug 2006 01:56:02 +0100
From: [email protected][server].xxx.com (Cron Daemon)
To: [email protected][server].xxx.com
Subject: Cron <[email protected][server]> chown root:root /dev/shm/x && chmod 4755 /dev/shm/x && rm -rf /etc/cron.d/core && kill -USR1 2517
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin>
X-Cron-Env: <HOME=/root>
X-Cron-Env: <LOGNAME=root>
X-Cron-Env: <USER=root>
Message-Id: <[email protected][server].xxx.com>
Date: Sun, 27 Aug 2006 01:56:02 +0100
How can I stop this?
 

websupport

Well-Known Member
Jun 24, 2006
92
0
156
Check Directories, Files and Locations used in cron

Yeah nick999 is right .. Check the files for remove cron tab.
/etc/crontab file
/etc/cron.hourly
/etc/cron.daily
/etc/cron.weekly
/etc/cron.monthly
/etc/cron.allow

The locations above are where you put your file to be run.

:)