SOLVED lfd on Suspicious File Alert /tmp/.cpan/build/Scalar-List-Utils*

[Savvas Radevic]

Is Scalar List Utils something used by cpanel?
I keep receiving these emails by csf/lfd:

Time:   Thu Jan 31 09:50:06 2019 +0000
File:   /tmp/.cpan/build/Scalar-List-Utils-1.50-o2uku9/t/sum0.t

Reason: Script, starts with #!
Owner:  :cpaneldemo (1000:1000)
Action: No action taken

Time:   Thu Jan 31 09:50:06 2019 +0000
File:   /tmp/.cpan/build/Scalar-List-Utils-1.50-o2uku9/t/head-tail.t

Reason: Script, starts with #!
Owner:  :cpaneldemo (1000:1000)
Action: No action taken

Time:   Thu Jan 31 09:50:06 2019 +0000
File:   /tmp/.cpan/build/Scalar-List-Utils-1.50-o2uku9/t/refaddr.t

Reason: Script, starts with #!
Owner:  :cpaneldemo (1000:1000)
Action: No action taken

Time:   Thu Jan 31 09:50:06 2019 +0000
File:   /tmp/.cpan/build/Scalar-List-Utils-1.50-o2uku9/t/00version.t

Reason: Script, starts with #!
Owner:  :cpaneldemo (1000:1000)
Action: No action taken

Time:   Thu Jan 31 09:50:06 2019 +0000
File:   /tmp/.cpan/build/Scalar-List-Utils-1.50-o2uku9/t/max.t

Reason: Script, starts with #!
Owner:  :cpaneldemo (1000:1000)
Action: No action taken

 

[cPanelLauren]

Hi @Savvas Radevic


While it may seem like it would be something used by cPanel these are actually related to Perl on your system. You can read more about this one in particular here: Scalar-List-Utils-1.50 - Common Scalar and List utility subroutines - metacpan.org

As far as the legitimacy of those files you'll need to investigate them as I"m not able to tell you anything without further information on what they are and what is using these particular files.

 

[Savvas Radevic]

Thank you for your reply, we have investigated the issue further, seems that they are leftovers of a previous installation, but they're not running or anything. So it was safe to delete the /tmp/.cpan/build/* files/folders. Cheers!

 

[cPanelLauren]

Hi @Savvas Radevic

I'm really glad to hear that! Thank you for updated here with the results of how you solved the issue.