hamuskinny

Registered
Mar 3, 2014
2
0
1
cPanel Access Level
Root Administrator
Hi Guys, first post here. Not sure if this is the right place to post but here it goes.

I have a number of cron jobs which suddenly stopped running. I get notifications when crons are run, but since I get so many of them i have to admit I don't check them all the time. When i went back and checked the mails, there were no new notifications. After checking my junk mail i see those missing notification. Instead of the normal mail which shows the response of the cron, the body of the mail contains a viagra spam email!

I checked the cron logs and it shows my php files are getting called but after testing none of them are actually running. I have to assume that something is hijacking my cron job and calling a hacker file each time a cron is run.

Maybe this explanation is too vague, but i would appreciate any help on where they could possibly have modified my code.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Hello :)

First, check to make sure "crond" is started with a command such as:

Code:
service crond restart
Next, check the integrity of the PHP scripts that are called with the cron jobs. Make sure they are the original PHP files and have not been altered to produce malicious content.

Thank you.