Excessive processes running under user

[ASTRAPI]

Hello

What does that means and how can i fix it?

User:user1 PID:6297 Run Time:7274(secs) Memory:109404(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5
User:user1 PID:6298 Run Time:7267(secs) Memory:109616(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5
User:user1 PID:6299 Run Time:7266(secs) Memory:109740(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5
User:user1 PID:6300 Run Time:7265(secs) Memory:109752(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5
User:user1 PID:6301 Run Time:7264(secs) Memory:109616(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5
User:user1 PID:6302 Run Time:7263(secs) Memory:109724(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5
User:user1 PID:6303 Run Time:7262(secs) Memory:109692(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5
User:user1 PID:6304 Run Time:7261(secs) Memory:109092(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5
User:user1 PID:6305 Run Time:7260(secs) Memory:109944(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5
User:user1 PID:6306 Run Time:7259(secs) Memory:108004(kb) exe:/usr/local/cpanel/cgi-sys/php5 cmd:php5


Thank you

 

[rohit.sivakumar]

Have you got an answer to this?

Why am I getting these messages?

Subject:Excessive processes running under user Yaddoo

Time: Fri Apr 30 10:04:38 2010 +0530
Account: Yaddoo
Process Count: 19 (Not killed)

Process Information:

User:YaddooPID:1859 Run Time:189(secs) Memory:61524(kb) exe:/usr/bin/php cmd:/usr/bin/php /home/Yaddoo/public_html/TT/yallo.php
User:YaddooPID:5469 Run Time:67(secs) Memory:61528(kb) exe:/usr/bin/php cmd:/usr/bin/php /home/Yaddoo/public_html/TT/yallo.php
User:YaddooPID:5737 Run Time:52(secs) Memory:61528(kb) exe:/usr/bin/php cmd:/usr/bin/php /home/Yaddoo/public_html/TT/yallo.php
User:YaddooPID:5784 Run Time:48(secs) Memory:61524(kb) exe:/usr/bin/php cmd:/usr/bin/php /home/Yaddoo/public_html/TT/yallo.php
User:YaddooPID:7180 Run Time:0(secs) Memory:61524(kb) exe:/usr/bin/php cmd:/usr/bin/php /home/Yaddoo/public_html/TT/yallo.php

 

[0101]

up ineed solution

 

[rachelm]

I'd suspend the user and check what's in that file, looks like you might have a compromised account on the server.