Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

high cpu load by ./system-disk process

Discussion in 'Security' started by lambov, Jan 8, 2018.

  1. lambov

    lambov Member

    Joined:
    Oct 9, 2016
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Earth
    cPanel Access Level:
    Root Administrator
    today i found strange high cpu load and based on top -c showing that i have 2 ./system-disk processes that eat about @50% and run in long time, the process is under an user and i have scanned the account related i didn't see any malicious activity
    now i have killed the processes

    what is ./system-disk processes actually?
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,802
    Likes Received:
    1,714
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    You can search for files matching that process name to see if anything shows up so you can get a better idea of where the file exists and what it does. EX:

    Code:
    find / -name "system-disk"
    You may also find the following thread helpful:

    Troubleshooting high server loads on Linux servers

    Thank you.
     
  3. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    1,010
    Likes Received:
    87
    Trophy Points:
    78
    cPanel Access Level:
    DataCenter Provider
    Run 'ps faux' to get a little more info, or take the PID from top and look for it in 'ps faux' output.

    This should get you user id if nothing else. You can also use the PID to gather other information.

    I am guessing this is a spoofed process name from perl script, you may not find any file called system-disk (or you might, too, but you'll have to look.)
     
  4. lambov

    lambov Member

    Joined:
    Oct 9, 2016
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Earth
    cPanel Access Level:
    Root Administrator
    i did it, but i can not find system-disk file
     
  5. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    1,010
    Likes Received:
    87
    Trophy Points:
    78
    cPanel Access Level:
    DataCenter Provider
    There probably is no file called that. What is output of
    Code:
    ps faux
     
  6. lambov

    lambov Member

    Joined:
    Oct 9, 2016
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Earth
    cPanel Access Level:
    Root Administrator
    i found that the processes related to a file and 3 strange wordpress plugin.
     
Loading...

Share This Page