The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

PRLPU72Y enabled in the service manager

Discussion in 'General Discussion' started by betoranaldi, Oct 23, 2008.

  1. betoranaldi

    betoranaldi Well-Known Member

    Joined:
    Dec 5, 2007
    Messages:
    105
    Likes Received:
    0
    Trophy Points:
    16
    Just took a look at the service manager in WHM and noticed the following service being enabled.

    PRLPU72Y

    Does anyone know what it is or does? I don't recall seeing it there before.

    Thanks
    Brian
     
  2. DaveUsedToWorkHere

    DaveUsedToWorkHere Well-Known Member

    Joined:
    Dec 28, 2001
    Messages:
    689
    Likes Received:
    1
    Trophy Points:
    18
    Brian,
    That's not a service that we ship. Service files are located in: /etc/chkserv.d/

    I'd check around the server as that seems pretty suspicious.
     
  3. betoranaldi

    betoranaldi Well-Known Member

    Joined:
    Dec 5, 2007
    Messages:
    105
    Likes Received:
    0
    Trophy Points:
    16
    found the service at /etc/chkserv.d/PRLPU72Y

    Looking at the file it included the following:

    Code:
    service[exim]=125,QUIT,220,/etc/rc.d/init.d/exim stop;/etc/rc.d/init.d/exim stop;/etc/rc.d/init.d/exim stop;/etc/rc.d/init.d/exim start 

    Looks like it just stops and starts EXIM. It doesn't look suspicious to me although I don't know how it got there.

    Does anyone see anything odd in it?
     
    #3 betoranaldi, Oct 25, 2008
    Last edited: Oct 25, 2008
  4. DaveUsedToWorkHere

    DaveUsedToWorkHere Well-Known Member

    Joined:
    Dec 28, 2001
    Messages:
    689
    Likes Received:
    1
    Trophy Points:
    18
    There's nothing malicious there but the question is how it got there in the first place. Google shows no results for 'PRLPU72Y' and I've never seen that string before. There should be no issue in deleting it. The timestamp on the file will have some info towards finding out when it was created.
     
Loading...

Share This Page