Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

high cpu load by ./system-disk process

Discussion in 'Security' started by lambov, Jan 8, 2018.

  1. lambov

    lambov Member

    Joined:
    Oct 9, 2016
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Earth
    cPanel Access Level:
    Root Administrator
    today i found strange high cpu load and based on top -c showing that i have 2 ./system-disk processes that eat about @50% and run in long time, the process is under an user and i have scanned the account related i didn't see any malicious activity
    now i have killed the processes

    what is ./system-disk processes actually?
     
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,167
    Likes Received:
    1,934
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    You can search for files matching that process name to see if anything shows up so you can get a better idea of where the file exists and what it does. EX:

    Code:
    find / -name "system-disk"
    You may also find the following thread helpful:

    Troubleshooting high server loads on Linux servers

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    1,011
    Likes Received:
    89
    Trophy Points:
    78
    cPanel Access Level:
    DataCenter Provider
    Run 'ps faux' to get a little more info, or take the PID from top and look for it in 'ps faux' output.

    This should get you user id if nothing else. You can also use the PID to gather other information.

    I am guessing this is a spoofed process name from perl script, you may not find any file called system-disk (or you might, too, but you'll have to look.)
     
  4. lambov

    lambov Member

    Joined:
    Oct 9, 2016
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Earth
    cPanel Access Level:
    Root Administrator
    i did it, but i can not find system-disk file
     
  5. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    1,011
    Likes Received:
    89
    Trophy Points:
    78
    cPanel Access Level:
    DataCenter Provider
    There probably is no file called that. What is output of
    Code:
    ps faux
     
  6. lambov

    lambov Member

    Joined:
    Oct 9, 2016
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Earth
    cPanel Access Level:
    Root Administrator
    i found that the processes related to a file and 3 strange wordpress plugin.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice