SOLVED list of updated files includes eggdrop.sym, ircd.sym and other suspicious files

jeffschips

Well-Known Member
Jun 5, 2016
248
30
78
new york
cPanel Access Level
Root Administrator
Hello.

I normally receive updates on files not matching md5sums and check if it was the result of an update. But today I received a list of updated files the likes of the following:

Code:
[2021-11-01 22:39:31 -0400] [/usr/local/cpanel/bin/dcpumon] Loading Symbol Table... /usr/local/cpanel/etc/sym/BitchX.sym ..Done
[2021-11-01 22:39:31 -0400] [/usr/local/cpanel/bin/dcpumon] Loading Symbol Table... /usr/local/cpanel/etc/sym/bnc.sym ..Done
[2021-11-01 22:39:31 -0400] [/usr/local/cpanel/bin/dcpumon] Loading Symbol Table... /usr/local/cpanel/etc/sym/eggdrop.sym ..Done
[2021-11-01 22:39:31 -0400] [/usr/local/cpanel/bin/dcpumon] Loading Symbol Table... /usr/local/cpanel/etc/sym/generic-sniffers.sym ..Done
[2021-11-01 22:39:31 -0400] [/usr/local/cpanel/bin/dcpumon] Loading Symbol Table... /usr/local/cpanel/etc/sym/guardservices.sym ..Done
[2021-11-01 22:39:31 -0400] [/usr/local/cpanel/bin/dcpumon] Loading Symbol Table... /usr/local/cpanel/etc/sym/ircd.sym ..Done
[2021-11-01 22:39:31 -0400] [/usr/local/cpanel/bin/dcpumon] Loading Symbol Table... /usr/local/cpanel/etc/sym/psyBNC.sym ..Done
[2021-11-01 22:39:31 -0400] [/usr/local/cpanel/bin/dcpumon] Loading Symbol Table... /usr/local/cpanel/etc/sym/ptlink.sym ..Done
[2021-11-01 22:39:31 -0400] [/usr/local/cpanel/bin/dcpumon] Loading Symbol Table... /usr/local/cpanel/etc/sym/services.sym ..Done
What the heck is this stuff? bitchX.sym, generic-sniffers.sym? When attemtping to contact and log a report with cpanel can't get into the client portal.
 

quietFinn

Well-Known Member
Feb 4, 2006
1,648
323
438
Finland
cPanel Access Level
Root Administrator
I believe those have something to do with "Backgroud Process Killer", WHM -> System Health -> Backgroud Process Killer
 
  • Like
Reactions: cPanelAnthony

cPanelAnthony

Administrator
Staff member
Oct 18, 2021
1,046
111
118
Houston, TX
cPanel Access Level
Root Administrator
Hello! While you would ultimately want to confirm that these files are legitimate with a systems administrator, "BitchX" is actually legitimate software; it appears to be an IRC.


I am not sure what "generic-sniffers" is, however.
 

quietFinn

Well-Known Member
Feb 4, 2006
1,648
323
438
Finland
cPanel Access Level
Root Administrator
  • Like
Reactions: cPanelAnthony