Remove a cron on a resellers account

ThunderHostingDotCom

Well-Known Member
Nov 18, 2002
449
1
168
All over!
We terminated a reseller & now I am getting the below e-mail daily. Where do I go to delete it?

chdir to /home/luckycom/catalogs/luckycom: No such file or directory
 

ThunderHostingDotCom

Well-Known Member
Nov 18, 2002
449
1
168
All over!
/var/spool/cron/luckycom - comes up blank

&

/etc/crontab - has the below in it...


SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/

# run-parts
01 * * * * root run-parts /etc/cron.hourly
02 4 * * * root run-parts /etc/cron.daily
22 4 * * 0 root run-parts /etc/cron.weekly
42 4 1 * * root run-parts /etc/cron.monthly
 

PWSowner

Well-Known Member
Nov 10, 2001
2,948
4
343
ON, Canada
That's why I put man "command". It would give you the details about how they work.

You want

cd /
find -user luckycom

The first command is to go to the /directory so the search will be everywhere. It will list all files with luckycom as the user. It will take several minutes to search the whole server.
 

ThunderHostingDotCom

Well-Known Member
Nov 18, 2002
449
1
168
All over!
Yes I am.
The Subject of the email reads...
Cron <[email protected]> /usr/local/cpanel/3rdparty/interchange/bin/expireall -r

& the message reads...
chdir to /home/luckycom/catalogs/luckycom: No such file or directory
 

PWSowner

Well-Known Member
Nov 10, 2001
2,948
4
343
ON, Canada
Sounds like you may have to do a search for files containing luckycom to find the culprit. I don't remember how that's done because when I need to search for file contents, I just search a copy of the server on my own computer.